Re: Cisco ASA VPN - Windows7 pre-login drive mappings

["Reynolds, Walter" <waltr () UMICH EDU>]

We do not have it set up to boot at start, but I can answer the SSL question.

There are two options.  Anyconnect Express is only a few hundred dollars, but is only for the SSL client based option.  
The Anyconnect Pro is the clientless setup and the fee on that is more than the ASA itself if I remember.  This is the 
one that will allow more end user checks and clientless connections.

For the most part the config is the same, but you define if you are using the IPSec client, SSL clien or SSL clientless.

There is a ssl config section to define what version of anyconnect you have, if it remains installed on the computer 
and a few other items.

Walt Reynolds
University of Michigan

On Nov 1, 2011, at 10:55 AM, "Brian Helman" <bhelman () SALEMSTATE EDU> wrote:

> We recently switched from a Cisco VPN concentrator to the Cisco ASA for our VPN services.  The ASA works fine for 
> Windows XP, but we're running in to an issue with Win7 (both 32 and 64-bit versions) re: drive mappings.  Under XP, 
> we're able to launch the VPN (IPSec) client at system boot-up in order to establish drive mappings over the tunnel.  
> The same client does not work under Win7.  
>
> Our preference is to support Win7/64, but I suspect we may have a need to also support Win7/32.  I am hearing, but 
> have not yet been able to test, that the Cisco AnyConnect client will do this for us, but it uses SSL rather than 
> IPSec.  
>
> Does anyone have better information on how to provide this service with an ASA and do you know what the licensing is 
> on the ASA (I believe there was a license-upgrade requirement on the Concentrator for SSL services, which we never 
> bought in to)?   Lastly, if AnyConnect does require SSL, is this the same SSL configuration as using a "clientless" 
> connection (which we haven't attempted with the ASA yet)?
>
> Thanks,
> Brian