Blog

Certificates on a Cisco ASA serving AnyConnect (Cisco Secure Client) traffic do two related but distinct jobs. First, the ASA

Dynamic Access Policies (DAP) on the Cisco ASA are the runtime override layer for VPN sessions. They evaluate at login

Authentication, Authorization, and Accounting (AAA) on a Cisco ASA decides three things for every VPN session: who is the user,

Two of the most overloaded terms in Cisco ASA VPN configuration are group-policy and tunnel-group. They sound similar, they are

Split tunneling controls which traffic from a connected VPN client traverses the encrypted tunnel and which traffic exits to the

AnyConnect (Cisco Secure Client) supports two transport options when connecting to an ASA: SSL/TLS over TCP/443 and IKEv2/