Cisco Systems Configuring the Setup for Cisco Secure Desktop

72-10
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter72 Configuring Clientless SSL VPN
Configuring Clientless SSL VPN Access
•Time Range—Lets you select the name of a predefined time-range parameter set.
•...—Click to browse the configured time ranges or to add a new one.
Configuration Examples for ACLs for Clientless SSL VPN
Examples
Here are examples of ACLs for clientless SSL VPN:
Configuring the Setup for Cisco Secure Desktop
The Cisco Secure Desktop Setup window displays the version and state of the Cisco Secure Desktop
image if it is installed on the ASA, indicates whether it is enabled, and shows the size of the cache used
to hold the Cisco Secure Desktop and SSL VPN Client on the ASA.
You can use the buttons in this window as follows:
To transfer a copy of a Cisco Secure Desktop image from your local computer to the flash device of the
ASA, click Upload.
To prepare to install or upgrade Cisco Secure Desktop, use your Internet browser to download a
securedesktop_asa_<n>_<n>*.pkg file from
http://www.cisco.com/cgi-bin/tablebuild.pl/securedesktop to any location on your PC. Then use this
button to transfer a copy from your local computer to the flash device. Click Browse Flash to install
it into the running configuration. Finally, click Enable Secure Desktop.
•To install or replace the Cisco Secure Desktop image on the flash device of the ASA, click Browse
Flash.
Note If you click Browse Flash to upgrade or downgrade the Cisco Secure Desktop image, select
the package to install, and click OK, the Uninstall Cisco Secure Desktop dialog window asks
you if you want to delete the Cisco Secure Desktop distribution currently in the running
configuration from the flash device. Click Yes if you want to save space on the flash device,
or click No to reserve the option to revert to this version of Cisco Secure Desktop.
•To remove the Cisco Secure Desktop image and configuration file (sdesktop/data.xml) from the
running configuration, click Uninstall.
Action Filter Effect
Deny url http://*.yahoo.com/ Denies access to all of Yahoo!
Deny url cifs://fileserver/share/directory Denies access to all files in the specified
location.
Deny url https://www.example.com/ directory/file.html Denies access to the specified file.
Permit url https://www.example.com/directory Permits access to the specified location
Deny url http://*:8080/ Denies HTTPS access to anywhere via
port 8080.
Deny url http://10.10.10.10 Denies HTTP access to 10.10.10.10.
Permit url any Permits access to any URL. Usually used
after an ACL that denies url access.