网络设备配置实训教程教学课件作者谢尧王明昊课件教学资源webvpnasa课件.pdfVIP

Clientless SSL VPN (WebVPN) on ASA Configuration Example with ASDM Document ID: 70475 Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Procedure Configuration Verify Troubleshoot Procedures Used to Troubleshoot Commands Used to Troubleshoot Related Information Introduction Clientless SSL VPN (WebVPN) allows for limited but valuable secure access to the corporate network from any location. Users can achieve secure browser?based access to corporate resources at anytime. This document provides a straightforward configuration for the Cisco Adaptive Security Appliance (ASA) 5500 series to allow Clientless SSL VPN access to internal network resources. The SSL VPN technology can be utilized in three ways: Clientless SSL VPN, Thin?Client SSL VPN (Port Forwarding), and SSL VPN Client (SVC Tunnel Mode). Each has its own advantages and unique access to resources. 1. Clientless SSL VPN A remote client needs only an SSL?enabled web browser to access http? or https?enabled web servers on the corporate LAN. Access is also available for Windows file browsing via Common Internet File System (CIFS). A good example of http access is the Outlook Web Access (OWA) client. 2. Thin?Client SSL VPN (Port Forwarding) A remote client must download a small, Java?based applet for secure access of TCP applications that use static port numbers. UDP is not supported. Examples include access to POP3, SMTP, IMAP, SSH, and Telnet. The user needs local administrative privileges because changes are made to files on the local machine. This method of SSL VPN does not work with applications that use dynamic port assignments, for example, several FTP applications. 3. SSL VPN Client (SVC?Tunnel Mode) The SSL VPN Client downloads a small client to the remote workstation and allows full, secure access to the resources on the internal corporate network. The SVC can be downloaded permanently to the remote station, Cisco