Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anyone know how to bypass the Cisco ASA portal page (clientless SSL VPN), so I can access some internal machine directly from outside using a certain group policy? (or otherwise, be creative)

I'm asking because the internal machine uses HTTP/1.1 name-based vhosts that I wish to transparently access from the outside, yet use ASA's authentication mechanisms before getting there.

share|improve this question
Can you not forward port 80 to the machine in question? You should then be able to port forward 8080 to the cisco LAN port 80 so that you can still access the interface. – MaQleod Aug 31 '11 at 15:51
Well, we use a certificate-based connection via HTTPS to the ASA from outside. I guess one solution would be to use one of the unused external IPs and NAT them to the inside machine, but then the authentication would have to happen on that machine too, which I don't like. (another user account list to manage etc.) – Marki Aug 31 '11 at 16:04
The fact is that the so-called homepage is a URL, not just an IP so it does not just forward requests. We have now set up a separate DNS for the DMZ and access the machines directly via portal bookmarks. – Marki Sep 6 '11 at 8:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.