Eng. Alessandro Mazzanti

Cisco - Disable AnyConnect SSL VPN portal website

During these days I was wondering if it is possible to disable the Cisco ASA VPN page and continue to use SSL vpn with the client. These question was rasing due to security concerns about, a.e., AD user locking out.

Using ASDM you need to follow below steps.

Configuration > Connection Profiles > Check the box "Shut down portal login page"

This features seems to be confirmed in this very exhaustive article too:

https://www.linkedin.com/pulse/shutting-down-webvpn-portal-ftd-flexconfig-matt-albrecht

[original articles]

https://community.spiceworks.com/topic/2114883-disable-anyconnect-ssl-vpn-portal-website

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/asdm74/vpn/asdm-74-vpn-config/webvpn-customizing.html

https://community.cisco.com/t5/vpn/disabling-clientless-browser-based-vpn/td-p/3065988

Cisco - How to backup Cisco switches using TFTP

There are several ways on how backup Cisco switches (or other vendors name) can be done.

One of them is downloading TFTP client server

https://tftp.en.uptodown.com/windows

Launching it and deciding where saving configuration files.

Be aware taking note about client IP.

Later you need to connect to switches using any SSH clients (I warmly suggest using these clients:

Solar-PuTTY Connect to any server or device in your network with Solar-PuTTY for Windows. This is an interesting Putty or PuttyCM alternative.

https://www.alessandromazzanti.com/2018/11/freeware-solarwinds-software-free-tools.html

and execute below commands on switches:

Router#copy tftp: running-config
Address or name of remote host []? 64.104.207.171
Source filename []? backup_cfg_for_my_router
Destination filename [running-config]?
Accessing tftp://10.66.64.10/backup_cfg_for_my_router...
Loading backup_cfg_for_router from 64.104.207.171 (via FastEthernet0/0): !
[OK - 1030 bytes]
1030 bytes copied in 9.612 secs (107 bytes/sec)
CE_2#

Where:

64.104.207.171 must be substituted by your client ip address where tftp is under execution.
backup_cfg_for_my_router is backup file name that will be created on client where tftp is under execution.

You can configure automatic backups, you simple need to read all article below indicated.

[original article]

https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-releases-122-mainline/46741-backup-config.html

Tips - English video and audios subtitles (on Chrome)

There is a new native chrome option that permit to view videos or audios adding, in real time, subtitles (that are quite precise).

Here it is procedure to enable this option on chrome italian version.

Settings --> click advanced --> accessibility --> Real time subtitles

[Original article]

https://www.hwupgrade.it/news/web/chrome-arrivano-i-sottotitoli-in-tempo-reale-per-qualsiasi-contenuto-sul-web_96356.html

Tips - How to run application with Administrative rights

If you need to execute single application with administrative rights (without giving Administrative end users permissions) you can proceed in this way:

C:\Windows\System32\runas.exe /user:computername\Administrator /savecred "X:\path\filename.exe"

Be aware that changing previously syntax, with other executable program file, you will be able to execute it with administrative rights (creating a small security hole)