In this demonstration, I’ve just uploaded one An圜onnect package. You will need to upload the relevant An圜onnect client images to your ASA so that when users connect for the first time, they can download An圜onnect before connecting to the VPN. Navigate to Remote Access VPN > Network (Client) Access > An圜onnect Client Software. Note: Your configuration may differ from the lab environment demonstration. Now we will focus on the ASA VPN configuration.

In this demonstration, we will leave the options that are selected as default. If you want to change this, you can edit the certificate and select the necessary options from the ‘Advanced’ tab. Press ‘Install Certificate’ to add your root CA.īy default, the certificate will be accepted for IPsec and SSL client connections. In this demonstration, we won’t perform any certificate revocation checks but in a live environment, I would strongly recommend that you do. Add your Root CA and any relevant subordinate CA’s to the ASA. Log into your ASA and navigate to Configuration > Device Management > Certificate Management and select ‘CA Certificates’. In this demonstration, we will use ASDM to upload the certificate. Once downloaded, we will need to upload this to the ASA. We will first start by downloading the Root CA which has been used to sign certificates associated with our remote access users and their devices.

Root CA and (if applicable) any sub-CA’s for your users that will connect remotely.In this article, I will demonstrate how to configure a Cisco ASA for digital certificate-based authentication for remote access VPN users.

Cisco anyconnect vpn asa