Educause Security Discussion mailing list archives

Cisco ASA VPN - Windows7 pre-login drive mappings


From: Brian Helman <bhelman () SALEMSTATE EDU>
Date: Tue, 1 Nov 2011 14:10:35 +0000

We recently switched from a Cisco VPN concentrator to the Cisco ASA for our VPN services.  The ASA works fine for 
Windows XP, but we're running in to an issue with Win7 (both 32 and 64-bit versions) re: drive mappings.  Under XP, 
we're able to launch the VPN (IPSec) client at system boot-up in order to establish drive mappings over the tunnel.  
The same client does not work under Win7.  

Our preference is to support Win7/64, but I suspect we may have a need to also support Win7/32.  I am hearing, but have 
not yet been able to test, that the Cisco AnyConnect client will do this for us, but it uses SSL rather than IPSec.  

Does anyone have better information on how to provide this service with an ASA and do you know what the licensing is on 
the ASA (I believe there was a license-upgrade requirement on the Concentrator for SSL services, which we never bought 
in to)?   Lastly, if AnyConnect does require SSL, is this the same SSL configuration as using a "clientless" connection 
(which we haven't attempted with the ASA yet)?

Thanks,
Brian


Current thread: