So, if you configured group-url like (Settings done in the connection-profile tab if using ASDM), you should specify exactly this url, when connecting from the client PC. Group selection is done as ciscomax said, "via dropdown list on the client, specifying group within the conncet link, or via certificate attributes". Plus, in the anyconnect client profile, you should check the box "Use start before login".įor the part, regarding authentication, if you're looking where to specify group/password - it's not applicable to the sslvpn, cause there's no such thing as group authentication.
There you should choose Anyconnect SBL (Image with all the modules should be in the ASA's flash). What modules will be downloaded to the client from server is controlled in hte Group-policy/Advanced/Anyconnect Client/Optional client modules to download. I guess you should user start-before-login module/feature of anyconnect client for the PC to be able to vpnconnect first and then register with the AD.
0 kommentar(er)
