Re: Web VPN URL-List on ASA (8.0)

From: Farrukh Haroon <farrukhharoon_at_gmail.com>
Date: Wed, 13 May 2009 16:10:21 +0300

There is no relation between URL lists and smart tunnels.

Smart tunnels are a much advanced version of port-forwarding (you might
say). Its meant to provision those applications that dont work natively with
th SSL VPN solution.

E.g. you have a custom HTTP portal for your company, the code breaks because
of the webvpn features like content re-write/url manging etc. You can use
smart tunnels, to make that application work.

URL lists dont work with all browsers, try changing the browser to see if
that helps (version,vendor).

Regards

Farrukh

On Wed, May 13, 2009 at 2:43 PM, Sadiq Yakasai <sadiqtanko_at_gmail.com> wrote:

> I have been trying to get URL-Listing on 8.0 code and having a tough time
> doing this. Also. when portforwarding is envoked on the PC, the page just
> hangs and nothing appears in the dialog box that launches on the webbrowser
> (after the I successfully log into the WebVPN page), although ASA says the
> vpn-session is established and connected. See sample config for 8.0 below:
>
> username WEBUSER password oW41BWsG68c8N2FO encrypted
>
> webvpn
> enable Public
> port-forward PORTFORWARD 2023 191.1.118.10 telnet
> tunnel-group-list enable
>
> group-policy WEBVPN internal
> group-policy WEBVPN attributes
> vpn-tunnel-protocol webvpn
> webvpn
> port-forward name PORTFORWARD
> port-forward auto-start PORTFORWARD
> url-entry enable
>
> tunnel-group WEBVPN type remote-access
> tunnel-group WEBVPN general-attributes
> default-group-policy WEBVPN
> tunnel-group WEBVPN webvpn-attributes
> group-alias WEB enable
>
>
> Anyone knows if URL_List is even supported? They seem to be talking about
> some "Smart tunnels" feature. Is this like a replacement for the URL-List?
> I
> simply just dont see any information related to url-list on the config
> guide
> for 8.0
>
> Thanks as usual guys,
> Sadiq
>
> --
> CCIE #19963
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed May 13 2009 - 16:10:21 ART

This archive was generated by hypermail 2.2.0 : Mon Jun 01 2009 - 07:04:42 ART