Cisco Systems OL-16647-01 Configuring Session Settings

38-11
Cisco ASDM User Guide
OL-16647-01
Chapter 38 Clientless SSL VPN
Configuring Session Settings
Configuring Session Settings
The Clientless SSL VPN Add/Edit Internal Group Policy > More Options > Session Settings window
lets you specify personalized user information between clientless SSL VPN sessions. By default, each
group policy inherits the settings from the default group policy. Use this window to specify personalized
clientless SSL VPN user information for the default group policy and any group policies for which you
want to differentiate these values.
Fields
• User Storage Location—Choose none or choose the file server protocol (smb or ftp) from the
drop-down menu. If you choose smb or ftp, use the following syntax to enter the file system
destination into the adjacent text field:
username:password@host:port-number/path
For example
mike:mysecret@ftpserver3:2323/public
Note Although the configuration shows the username, password, and preshared key, the security
appliance uses an internal algorithm to store the data in an encrypted form to safeguard it.
• Storage Key—Type the string, if required, for the security appliance to pass to provide user access
to the storage location.
• Storage Objects—Select one of the following options from the drop-down menu to specify the
objects the server uses in association with the user. The security appliance store these objects to
support clientless SSL VPN connections.
– cookies,credentials
– cookies
– credentials
• Transaction Size-Enter the limit in KB over which to time out the session. This attribute applies only
to a single transaction. Only a transaction larger than this value resets the session expiration clock.
The following table shows the modes in which this feature is available:
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——