1-101
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring User Attributes
Configuring the Maximum Object Size to Ignore for Updating the Session Timer
Network devices exchange short keepalive messages to ensure that the virtual circuit between them is
still active. The length of these messages can vary. The
keep-alive-ignore
command lets you tell the
ASA to consider all messages that are less than or equal to the specified size as keepalive messages and
not as traffic when updating the session timer. The range is 0 through 900 KB. The default is 4 KB.
To specify the upper limit of the HTTP/HTTPS traffic, per transaction, to ignore, use the
keep-alive-ignore
command in group-policy attributes webvpn configuration mode:
hostname(config-group-webvpn)#
keep-alive-ignore
size
hostname(config-group-webvpn)#
The
no
form of the command removes this specification from the configuration:
hostname(config-group-webvpn)#
no keep-alive-ignore
hostname(config-group-webvpn)#
The following example sets the maximum size of objects to ignore as 5 KB:
hostname(config-group-webvpn)#
keep-alive-ignore 5
hostname(config-group-webvpn)#
Configuring Auto-Signon
To automatically submit the login credentials of a particular user of clientless SSL VPN to internal
servers using NTLM, basic HTTP authentication or both, use the
auto-signon
command in username
webvpn configuration mode.
The
auto-signon
command is a single sign-on method for users of clientless SSL VPN sessions. It passes
the login credentials (username and password) to internal servers for authentication using NTLM
authentication, basic authentication, or both. Multiple auto-signon commands can be entered and are
processed according to the input order (early commands take precedence).
You can use the auto-signon feature in three modes: webvpn configuration, webvpn group configuration,
or webvpn username configuration mode. The typical precedence behavior applies where username
supersedes group, and group supersedes global. The mode you choose will depend upon the desired
scope of authentication.
To disable auto-signon for a particular user to a particular server, use the
no
form of the command with
the original specification of IP block or URI. To disable authentication to all servers, use the
no
form
without arguments. The
no
option allows inheritance of a value from the group policy.
The following example commands configure auto-signon for a user of clientless SSL VPN named
anyuser, using either basic or NTLM authentication, to servers defined by the URI mask
https://*.example.com/*:
hostname(config)#
username anyuser attributes
hostname(config-username)#
webvpn
hostname(config-username-webvpn)#
auto-signon allow uri https://*.example.com/* auth-type
all
The following example commands configure auto-signon
for a user of clientless SSL VPN named
anyuser, using either basic or NTLM authentication, to the server with the IP address
10.1.1.0, using subnet mask 255.255.255.0:
hostname(config)#
username anyuser attributes
hostname(config-username)#
webvpn
hostname(config-username-webvpn)#
auto-signon allow ip 10.1.1.0 255.255.255.0 auth-type
all
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......