Oct 18, 2011

How to configure MS Internet Explorer proxy settings for a Cisco VPN client

Add the proxy settings to the group policy:

asa(config)# group-policy RA_Policy internal
asa(config)# group-policy RA_Policy attributes
asa(config-group-policy)# msie-proxy server value
asa(config-group-policy)# msie-proxy method use-server
asa(config-group-policy)# msie-proxy local-bypass enable
asa(config-group-policy)# msie-proxy except-list value intranet.example.com

Then assign the group policy to the tunnel group:

asa(config)# tunnel-group RA_VPN type remote-access
asa(config)# tunnel-group RA_VPN general-attributes
asa(config-tunnel-general)# default-group-policy RA_Policy

asa(config)# end
asa# wr mem

Apr 14, 2011

DNS Filtering

If you don't have a web filtering system, you can prevent users from accessing some web sites using HTTP inspection on ASA/PIX. However, it won't work whether they use HTTPS. So what?

Apr 1, 2011

Routing non-contiguous subnets on ASA (without VLSM)

How to route traffic between the wireless LAN and the internal network without using VLSM?

Mar 22, 2011

Basic anti-spam on ASA

If you want to perform basic anti-spam to block spammers based on domain names, the following policy can help you: