How to configure IVE for java based applications to pass through SSL-VPN ?

[Rao_]

Hello Everyone

we have 2 SA 4500 appliances and set up the equipment for SSL-VPN in our campus environment.

Everything is working well, But we are seeing some issues for java based websites.

Eg: Lets say firewall admin needs access to Cisco ASA's "ASDM" which is java based and so I did book marked the ASDM address.

Result: When firewall admin clicks on the ASDM it goes to website successfully through SSLVPN, but when he actually clicks on run ASDM, it opens successfully but not through SSL-VPN.

How do I fix this? this is happening for java related stuff.....

[Mrkool_ · Accepted solution]

JSAM is what you need to look at

[cbarcellos_]

You can also look into using WSAM and Network Connect.

[Rao_]

Thanks for the info...will dig more into JSAM and WSAM.

Will come back If I coudln't figure out.

[SSHSSH_]

hi all

i'm always facing issues regarding which access method to use

that depends on the application to be accessed or on the OS on machine that will access ?

is the following rule correct : try Wsam , if didn't work try Jsam , if didn't work try NC ???

[SSHSSH_]

for ex , here , the 3 methods ( Wsam ,Jsam ,NC ) were suggested , that means that all of them can be used ?

[jkeberle_]

Only one of them can be used at a given time. My systems are configured to autolaunch WSAM on sign-in if you are on a windows machine, and JSAM to autolaunch if your on a NON-windows machine. Then if the user requires additional priveleges and is authorized to do so, they can manually launch the NC.

[Rao_]

JSAM is working perfectly for java applications on Windows machine even on windows 7.

So In this case why do I need WSAM.

[cbarcellos_]

That's great. Sometimes you may have better luck with WSAM over JSAM, depending on the application. If JSAM works fine then you wouldn't need to try WSAM.