jim_duffy
Managing Editor

SSL VPNs on Cisco ASA are IE8 unfriendly

Analysis
Jan 14, 20102 mins

Might be March before security appliance supports latest version of Microsoft browser

Colleague Tim Greene this week reports that users of SSL VPNs configured with Cisco’s ASA appliance may have limited access to applications through Internet Explorer 8. Incompatibility with the Microsoft browser means one of the appliance’s SSL VPN options won’t work until March; the second option only supports applications with Web interfaces or those that can be readily made Web compliant, Greene reports: 

Businesses that want to use an ASA option called Smart Tunnels with IE8 are out of luck. Smart Tunnels require Java or Active X plug-ins to the browser in order to create the VPN connection all without requiring administrative privileges on the remote machine. The advantage of these connections is they support TCP-based applications and give administrators power to restrict those applications that have access to internal resources.

IE8 introduced a new method of multi-processing which required code changes to the Cisco Smart Tunnels plugin for clientless SSL VPN, Greene reports. Cisco suggests customers needing to use IE8 and ASA Smart Tunnels can sign up for a beta version of the next release of ASA software — but it “may or may not help,” according to an internal Cisco e-mail. 

Cisco said the hiccup is due to the IE8 release coming well before Cisco’s next major scheduled ASA version release.

More from Cisco Subnet:

  • Cisco to consumerize TelePresence?
  • Enterprise competition heating up between Cisco and Juniper
  • Cisco invests in ad counter
  • Bids start for Nortel VoIP but Cisco’s all set
  • ACLs; A Service Providers Best Practice on your LAN
  • Top 5 Security Breaches of 2009
  • What is the most significant technology development of 2009?
Win great stuff from Cisco Subnet Like e-mail? Subscribe to the Cisco Alert newsletter.Cisco Subnet RSS feed

Like RSS readers? Subscribe to the

Follow all Cisco Subnet bloggers on Twitter.Jim Duffy on Twitter

Follow