I have therefore setup a Microsoft Certificate authority.ġst of all I tested using a local CA (on the ASA itself) and issued certificates to my An圜onnect clients (with failover mode disabled - mainly did this to get the hang of it.
To further confound our situation Cisco also do not support using the ASA as a local CA for the issuance of these certificates while in failover mode. As An圜onnect no longer supports pre-shared keys the only way for us to have two factor authentication is to use certificates. Previously while using the IPsec client we used pre-shared keys and a AAA (active directory server). We are using the Cisco ASA 5510 (in failover mode). I am planning to move users in my organisation from a Cisco IPsec VPN to the newer Cisco An圜onnect SSL VPN client.
0 kommentar(er)
