[c-nsp] Fwd: Cisco ASA and visible groups

Dan Shechter Gelles dans at marathon-networks.com
Thu Feb 25 19:40:10 EST 2016


Try to remove the "tunnel-group-list enable":

ASAv#conf t
ASAv(config)# webvpn
ASAv(config-webvpn)# no tunnel-group-list enable

-Dan

On Thu, Feb 25, 2016 at 7:12 AM, Jason 'XenoPhage' Frisvold <
xenophage at godshell.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greetings,
>
>         Hopefully there's a quick and easy answer to this...  We're
> currently
> using group policies to identify the ip ranges, routes, acls, etc. for
> a given user.  However, this means that anyone viewing the login page
> (which is open to the world for obvious reasons) can see the group
> list.  Is there a way to remove the group dropdown?  If users are only
> in a single group, I don't see why the group needs to be identified..
>  If anything, it just confuses the user.
>
> Thanks,
>
> - --
> - ---------------------------
> Jason 'XenoPhage' Frisvold
> xenophage at godshell.com
> - ---------------------------
>
> "Any sufficiently advanced magic is indistinguishable from technology."
> - - Niven's Inverse of Clarke's Third Law
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - https://gpgtools.org
>
> iEYEARECAAYFAlbPGeIACgkQ8CjzPZyTUTRWRQCeJHT2rHRdS6J62krLPOlt1vCK
> GnsAnjBWkGM1sV95p1vAZTeymOcyVgHt
> =cjF3
> -----END PGP SIGNATURE-----
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list