Filter
Top Products
38-25
Cisco ASDM User Guide
OL-16647-01
Chapter 38 Clientless SSL VPN
DTLS Settings
DTLS Settings
Enabling Datagram Transport Layer Security (DTLS) allows the AnyConnect VPN Client establishing
an SSL VPN connection to use two simultaneous tunnels—an SSL tunnel and a DTLS tunnel. Using
DTLS avoids latency and bandwidth problems associated with some SSL connections and improves the
performance of real-time applications that are sensitive to packet delays.
If you do not enable DTLS, AnyConnect client users establishing SSL VPN connections connect with
an SSL VPN tunnel only.
Fields
• Interface—Displays a list of interfaces on the security appliance.
• DTLS Enabled—Check to enable DTLS connections with the AnyConnect client on the interfaces.
• UDP Port (default 443)—(Optional) Specify a separate UDP port for DTLS connections.
Modes
The following table shows the modes in which this feature is available:
SSL VPN Client Settings
The Cisco AnyConnect VPN Client provides secure SSL connections to the security appliance for
remote users. The client gives remote users the benefits of an SSL VPN client without the need for
network administrators to install and configure clients on remote computers.
Without a previously-installed client, remote users enter the IP address in their browser of an interface
configured to accept SSL VPN connections. Unless the security appliance is configured to redirect http://
requests to https://, users must enter the URL in the form https://<address>.
After entering the URL, the browser connects to that interface and displays the login screen. If the user
satisfies the login and authentication, and the security appliance identifies the user as requiring the
client, it downloads the client that matches the operating system of the remote computer. After
downloading, the client installs and configures itself, establishes a secure SSL connection and either
remains or uninstalls itself (depending on the security appliance configuration) when the connection
terminates.
In the case of a previously installed client, when the user authenticates, the security appliance examines
the revision of the client, and upgrades the client as necessary.
When the client negotiates an SSL VPN connection with the security appliance, it connects using
Transport Layer Security (TLS), and optionally, Datagram Transport Layer Security (DTLS). DTLS
avoids latency and bandwidth problems associated with some SSL connections and improves the
performance of real-time applications that are sensitive to packet delays.
The AnyConnect client can be downloaded from the security appliance, or it can be installed manually
on the remote PC by the system administrator. For more information about installing the client manually,
see the Cisco AnyConnect VPN Client Administrator Guide.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——