Can AnyConnect (or Clientless SSL VPN) users “initiate” password-management/changes from the AnyConnect client itself?
A. No. AnyConnect does not have any option inside of it to trigger or initate a password change. Password changes are only triggered from the head-end when required as part of MSCHAPv2 RADIUS with expiry or Lightweight Directory Access Protocol (LDAP) password expiration. Customers can change their Active Directory (AD) password using the same ctrl-alt-del mechanism assuming they are ‘logging in to the network’ (Start Before Login). Q. Does AnyConnect support a pool with a single address? If you want the ASA to do Port Address Translation (PAT), such that all the remote clients appear on the inside network as a single address, differentiated by source TCP port number? A. AnyConnect requires a unique IP address for each client. Thus, the PAT pool does not apply with AnyConnect in this context. Certainly, going through a linksys which does PAT (such as home) is not an issue with AnyConnect.
Related Questions
- Can AnyConnect (or Clientless SSL VPN) users initiate password-management changes from the AnyConnect VPN Client itself?
- Can AnyConnect (or Clientless SSL VPN) users "initiate" password-management/changes from the AnyConnect client itself?
- Does ASA SSL VPN (AnyConnect Client or Clientless) support QOS and policing bandwidth management capabilites?