VPN SSO not working - 4.5

[Chris Perkins]

Hello, I recently set up NAC for VPN users. When a user connects to the ASA5510 they are mapped to a specific VLAN… All redirections, rules are in place. The only thing that does not work is the Single sign-on piece. We have captured packets and have validated that the UDP/8906 packet does leave the client, traverses the ASA, traverses the network and does go to the CAS – When using tcpdump on the CAS there aren’t any UDP/8906 packets being received. Wireshark was listening on a mirrored port which is how we know the packet does make it through the network. Please let me know if anyone has seen this or has any info that may help. Thank you. Regards, Chris Perkins, CCSP Consulting Engineer, Security Office: 505.938.4172 Fax: 505.256.9091 INX, Inc. 1720 Louisiana Blvd NE Suite 301 Albuquerque, NM 87110 www.inxi.com