[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 522
  • Last Modified:

ASA SSL VPN essentials

i am looking for a easy to follow, how to setup SSL VPN essentials. i am buying the license. we are currently using the vpn client, can these co exist? i will remove old vpn cleint after ssl is installed and tested.
0
Hubman
Asked:
Hubman
  • 2
  • 2
1 Solution
 
jmeggersCommented:
If you're talking about the IPsec VPN client, it can coexist with the AnyConnect client.  If you're talking about the AnyConnect client itself, it's the same client for premium and Essentials licenses.  If you're talking about the old SVC client, get rid of it.

If you're setting up the VPN, my advice is to use the wizard in ASDM.  Pretty easy to follow, the big stumbling block everyone seems to hit is NAT, but if you're currently using the IPSec client you should have already addressed that.  If you're converting from IPSec over to SSL, my suggestion would be to use the existing address pool, since you've probably already addressed the no-NAT issue for that address block.
0
 
HubmanAuthor Commented:
Cisco AnyConnect Essentials is the one I want to install. currently using the IPSec.
0
 
HubmanAuthor Commented:
How many hours should it take to configure if someone knows what they are doing?
0
 
jmeggersCommented:
Sorry I didn't see your follow-up question.  A basic configuration on the ASA shouldn't take long for someone who knows what they're doing. Once you know the topology and how to handle NAT, etc. There's also an XML file to set up, there are typically files that have to be loaded onto the ASA (the client itself), so total configuration on the ASA, maybe 30 minutes.  Someone who already has everything worked out, files loaded, etc. can probably do it faster than that, it's generally not more than 10 commands or so on the ASA.  Usually when I'm working with a customer the slowdowns are they don't already have a TFTP server set up, they haven't pulled the client down from CCO, etc.  Those are the things that add time to the job.

AnyConnect Essentials doesn't allow for a lot of extras such as posture assessment, etc.  Those features require premium licenses and those features do require additional time to configure in ASDM.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now