
Configuration steps performed in this lecture
Install Identity certificate
Load AnyConnect package to ASA Firewall
Enable AnyConnect VPN client SSL access
Configure a Group policy
Configure an AnyConnect connection profile
Configure user authentication
Configure an address pool
Configuration steps performed in this lecture
Install Identity certificate
Load AnyConnect package to ASA Firewall
Enable AnyConnect VPN client SSL access
Configure a Group policy
Configure an AnyConnect connection profile
Configure user authentication
Configure an address pool
If ASA firewall is performing NAT for the Internet traffic flowing from Inside to Outside network and AnyConnect is also configured on the Outside interface of ASA firewall, a special NAT rule is required on ASA firewall to differentiate between Internet traffic and AnyConnect traffic.
In this lecture you will learn about the NAT adjustment.
Split tunnel is a concept that enables you to configure which traffic you want to flow on AnyConnect VPN tunnel and which should not.(for example Internet and corporate office traffic can be given different network paths)
In this lecture, I have taken examples of real world networks and explained the concept of Split-tunnel on ASA firewall with AnyConnect VPN
Traffic Filters can be used to permit/deny specific traffic for AnyConnect remote users.
In this lecture you will learn about traffic filters with help of a test scenario allowing AnyConnect remote users for SSH traffic to one server and Web traffic to another server and rest of traffic will be denied by implicit deny policy.
Most organizations have a remote work force these days, COVID-19 has introduced a hybrid work culture in our society, where organizations are benefiting themselves by saving the infrastructure cost as their employees work from home.
Remote access VPN technology has gained popularity as the size of remote work forces have increased. There are many vendors in market who provide Remote access VPN service, however only few of them are on the top of list.
Cisco AnyConnect Remote access VPN is among the most favorite as it has the cisco's trusted technology, standards and it is easy to use for end users and at the same time easy to configure for network admins.
This course is intended for network administrators who want to learn about Cisco AnyConnect VPN functionality and features.
I have designed this course in such a way that concepts are explained in most simple way possible for the audience.
There are theory lectures which explain the concept and then there are LABs and test scenarios to cover the actual implementation in the production environment.
We will also do debug and troubleshoots to learn identify and resolve problems.
This course covers following topics.
Introduction to Remote access VPN
Hardware and software requirements to run AnyConnect VPN
License requirements to run AnyConnect VPN
SSL based AnyConnect VPN configuration CLI and ASDM
NAT adjustments for AnyConnect traffic
Split Tunnel concept
Traffic filters
External authentication Radius/LDAP
Dynamic Access Policies and its test scenario