ASA SSL VPN not displaying URL list

I thought I had that defined properly, here is the config....am I missing something?

group-policy TestWebVPN internal
group-policy TestWebVPN attributes
 vpn-tunnel-protocol IPSec webvpn
 webvpn
  functions url-entry file-access file-entry file-browsing

tunnel-group DefaultWEBVPNGroup general-attributes
 default-group-policy TestWebVPN
tunnel-group DefaultWEBVPNGroup webvpn-attributes
 nbns-server 172.20.3.11 master timeout 2 retry 2

webvpn
 enable outside
 url-list Internal-Servers " Webmail" http://172.20.3.2 1
 url-list Internal-Servers "Corporate NAS1" http://172.20.3.251 2
 url-list Internal-Servers "Management" cifs://172.20.3.3 3

Yep, looks good. It could be a local issue - make sure you aren't running a desktop firewall, check it from two different browser types if possible (IIS behaves different from Firefox, for example), and make sure your web proxy or content filter isn't stopping it. The webvpn uses a cookie so make sure your browser's security setting allows it.

I tested with both FireFox 3.5 and IE 6.0.  I am uploading a file with a screen shot of what comes up once a user logs in.  

BTW, this is one of those things I have never been able to get working under ASA.   And I have several of them throughout the company.

I have to believe that I am missing some parameter somewhere.  It just does not make sense.

(Things were so much simpler and straight forward with the PIX platform...(grin))

I remember now how to make this work - I logged on via the ASDM and created the url-list from within the ASDM. The actual format of the url-list command is:

url-list value <list-name>

where the <list-name> is the URL listings, one per line. So the syntax you have isn't 100% correct.

You might also try this:

url-list value Internal-Servers "Webmail" http://172.20.3.2 1
url-list value Internal-Servers "Corporate NAS1" http://172.20.3.251 2
url-list value Internal-Servers "Management" cifs://172.20.3.3 3

stsonline,

 I used the ASDM, to create the original entry above.  So, I hand edited the command from the CLI.

When I tried to enter 'url-list value Internal-Servers "Webmail" http://172.20.3.2 1'  The CLI came back with a syntax error on the "http:" entry.  The only way I could enter the command was to enter it this way:

url-list value "Webmail" http://172.20.3.2 1

It accepted that command, but again, when I logged into the SSL via a web browser, nothing was displayed.

Something is not right here.....

BTW, I am running ASA software ver 7.1(2)

stsonline,

I have a "quasi" answer to my problem.  But MAYBE you can figure out why it is, and how to correct it.

Ok, I went ahead and upgraded my ASA to both the ASA 7.2(4) and ASDM 5.2(4)56 versions of the software.   That did not fix anything.

So, I decided to completely erase ALL of the configuration and try again.

I rebuilt the configuration exactly the same way, EXCEPT, that this time, instead of using RADIUS which connects to my Active Directory for authentication, I created a local Cisco ASA user to test with.

That still did not work, BUT, I noticed that in the settings for the user itself, under the "WebVPN/Other" tab selection, there is a setting where you can select the default "Servers and URL lists", rather than "Inheriting" them.  When I selected the "Internal-Servers" URL list, poof, everything showed up, exactly like it was supposed to.  

However, this is NOT the optimal situation for me.  I really need to have this authenticate to my AD, and not have to maintain a separate user list on the ASA.

So, my question now is this.  How do I get the ASA to authenticate to my AD, AND have the default Server and URL lists be my "Internal-Servers" list?

Thank you,
Jeff