ccna certification 640-802

ccna certification 640-802.93.2.3 Clientless SSLVPN9.3ASA VPN Configuration 287 VPN The VPN Wizardo VPN Wizard Introduction window will appear. Click Next to continue. Step 2 Configure the SSLVPN interface. Configure the connection properties file name for the connection and identify the interface to which the external user will connect. By default, the ASA will use a self-signed certificate that is sent to the client for authentication. Optionally, the ASA can also be configured to use a third-party certificate to connect to the client. Third party certificates can be purchased from a known certificate authority, such as VeriSigno in the DigitalCertificate drop-down menu if one has been purchased. The SSLVPN Interface screen provides links in the Information section. These links are used to identify the URLs used for SSLVPN service access (login) and Cisco ASDM access (access to Cisco ASDM software downloads). click Next to continue. Step 3 Configure user authentication. In this window, you can define the authentication method. By selecting the option, you can configure authentication using the AAA server. Click New to enter the location of the AAA server. Alternatively, a local database can be used. To add a new user, enter the user name and password, and then click Add. click Next to continue. Step 4 Create a Group Policy. In this window, you can create or modify a custom group policy for clientless SSLVPN connections. If you configure a new policy, the policy name cannot contain any spaces. By default, the user group policy created will inherit the settings from the DfltGrp policy. After the wizard completes, to change these settings, navigate to the Configuration > Remote Access VPN > Clientless SSLVPN Access > GroupPolicies submenu. Click Next to continue. Step 5 Configure the bookmark list for the clientless client only. A bookmark list is a set of URLs that are configured for use by the clientless SSLVPN Web portal. If the bookmarks are already listed out, theTo create a clientless SSLVPN configuration, use the VPN Wizard and complete the following steps. Step 1 Enable the Clientless SSLVPN Wizard o Select Wizards from the menu bar, then select VPNWizards>ClientlessSSLUsing the Bookmark List drop-down menu, select the appropriate bookmark and click Next to continue. However, there is no configured bookmark list by default, so it must be configured by the network administrator288 Chapter 9 Implementing the Cisco Adaptive Security Appliance ( ASA )it. To create an HTTP server bookmark in the bookmark list, click Manage, which opens the ConfigureGUICustomizationObjects window. Click Add to open the AddBookmark List window. Finally, click Add again to open the Add Bookmark window.Enter the details as shown below.Enter a name for the bookmark in the BookmarkTitle field. This name cannot contain spaces.