#Configure anyconnect on asa asdm Pc#

Hope we got some understanding on the fundamental concepts, Lets move to the Lab work: Also, he decrypts the encrypted message his own private key. Receiver decrypts the Digital signature with sender (CA) public and verifies the source identity. Sender(CA) creates Message Digest using Hashing Algorithm and encrypts with his own private key to create his Digital signature and attaches with the encrypted message(encrypted with receiver public Key). EX:AES,DES,RC4.Р”В¬ertificate Authority & SSL Certificate verification: The entities communicating via symmetric encryption must exchange the key so that it can be used in the decryption process. Symmetric Key Infrastructure: Only one key (a secret key) is used to both encrypt and decrypt data. Security of the public key is not required because it is publicly available and can be passed over the internet. Asymmetric cryptosystem, Symmetric cryptosystem, Certificate Authority, Digital Signatures.Р”Р„symmetric Key ( Public Key Infrastructure ):Р”Р„symmetric encryption is also known as public key cryptography,Р’В AР’В public keyР’В is made freely available and private key is kept a secret.A message that is encrypted using a public key can only be decrypted using a private key, while also, a message encrypted using a private key can be decrypted using a public key. To understand the SSL handshake we need to understand the following terms. Р”Р‡undamental understanding on Public, Private Keys(Asymmetric Encryption), Symmetric Encryption, Digital Signatures Process from Certificate Authority : Following diagram is prepared with respect to the Lab topology. SSL protocol is replaced by TLS and currently we are using TLS2.0. Irrespective of vendor we need to have fundamental understanding of SSL/TLS Handshake and how it will protect the users from Man in the middle attack and other cyber attacks while accessing the network services.

Accessing Application Data : After above steps the user can access the data over secured ssl tunnel.TLS/SSL Handshake: Before getting the Data Access from the Server TLS/SSL handshake happens as explained in below diagram.

#Configure anyconnect on asa asdm Pc#

DNS Lookup: User PC performs a DNS Lookup for the server IP via its DNS cache or it will perform A-type Query with local DNS server or the DNS Server will perform DNS Recursive Query with Root,TLD,Authoritative servers.

I will break down the process into 3 steps: Handshake process specific to lab topology is explained in the below diagram.Р”Р„lso, when we browse internet and access google from our PC's browser, before google page turns on the screen we need to understand the processes and Handshakes that happen between our PC and the Google Server. Before establishing SSL VPN Tunnel, SSL Handshake happens between the Employee's PC and the SSL VPN Tunnel Gateway(Firewall) where the asymmetric encryption ,symmetric encryption and certificates gets exchanged. In our Enterprise/Office Networks we deploy FortiGate, Cisco ASA, Palo alto, Checkpoint firewalls to establish SSL VPN with Remote Employees PCs Via Internet. SSL/TLS handshake process during HTTPS Connection: SSL VPN allows users from any Internet-enabled location to launch a web browser to establish remote-access VPN connections to the Firewall(SSL VPN Gateway) of the office location and thus able to access the data/services in the office network over secure SSL Tunnel. Secure Sockets Layer (SSL) VPN provides remote-access VPN capability, using the SSL protocol via web browser. Note: I will just give a brief theoretical summary on above points

SSL/TLS Handshake role in protecting cyber-attacks when user trying to access the servers from a remote network via ISP & SSL VPN Gateway (Firewall)?.Need for using Asymmetric and Symmetric encryption in SSL/TLS Handshake?.Fundamental understanding on Public, Private Keys(Asymmetric Encryption), Symmetric Encryption, Digital Signatures Process from Certificate Authority ?.SSL/TLS handshake process during a HTTPS Connection?.I have used GNS3 platform on VMware Workstation with FortiGate(6.4) and Cisco ASA(9.8) GNS3 Templates.Р”В«efore Jumping into Configurations and Troubleshooting of SSL VPN its important to have fundamental understanding of following points. Above picture is the GNS3 lab topology in which I have used FortiGate NGFW(6.4) and Cisco_ASA Firewall(9.8.0) to build an SSL VPN between the Employee_PC and the Firewall(SSL_VPN_Gateway) in the office network.