Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 1736 / 2164

1-102
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring User Attributes
hostname(config-username-webvpn)#
Specifying HTTP Compression
Enable compression of http data over a clientless SSL VPN session for a specific user by entering the
http-comp command in the username webvpn configuration mode.
hostname(config-username-webvpn)# http-comp { gzip | none }
hostname(config-username-webvpn)#
To remove the command from the configuration and cause the value to be inherited, use the no form of
the command:
hostname(config-username-webvpn)# no http-comp { gzip | none }
hostname(config-username-webvpn)#
The syntax of this command is as follows:
•
gzip— Specifies compression is enabled for the group or user. This is the default value.
•
none— Specifies compression is disabled for the group or user.
For clientless SSL VPN session, the compression command configured from global configuration mode
overrides the http-comp command configured in group policy and username webvpn modes.
In the following example, compression is disabled for the username testuser:
hostname(config)# username testuser internal
hostname(config)# username testuser attributes
hostname(config-username)# webvpn
hostname(config-username-webvpn)# http-comp none
hostname(config-username-webvpn)#
Specifying the SSO Server
Single sign-on support, available only for clientless SSL VPN sessions, lets users access different secure
services on different servers without reentering a username and password more than once. The
sso-server value command, when entered in username-webvpn mode, lets you assign an SSO server to
a user.
To assign an SSO server to a user, use the sso-server value command in username-webvpn configuration
mode. This command requires that your configuration include CA SiteMinder command.
hostname(config-username-webvpn)# sso-server value server_name
hostname(config-username-webvpn)#
To remove the assignment and use the default policy, use the no form of this command. To prevent
inheriting the default policy, use the sso-server none command.
hostname(config-username-webvpn)# sso-server {value server_name | none}
hostname(config-username-webvpn)#
[no] sso-server value
server_name
The default policy assigned to the SSO server is DfltGrpPolicy.
The following example assigns the SSO server named example to the user named anyuser:
hostname(config)#
username anyuser attributes
hostname(config-username)# webvpn
hostname(config-username-webvpn)# sso-server value example
hostname(config-username-webvpn)#