{"type":"doc","content":[{"type":"paragraph"},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"Armor offers one free SSL VPN user per account.","type":"text"}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"To fully use this screen, you must have the following permissions assigned to your account:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Write SSL VPN Devices and Users","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Read SSL VPN Devices and Users","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Read Virtual Data Centers","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Cisco AnyConnect VPN","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"anchor","parameters":{"macroParams":{"":{"value":"Enable-Your-SSL-VPN-Access"},"legacyAnchorId":{"value":"SSLVPN-Enable-Your-SSL-VPN-Access"}},"macroMetadata":{"macroId":{"value":"fbf3059c97c489351696e385fa4a02a2"},"schemaVersion":{"value":"1"},"title":"Anchor"}},"localId":"c5708071-b389-443b-b4d4-9050fcf72da4"}},{"text":"Enable Your SSL VPN Access","type":"text"}]},{"type":"rule"},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"For help, please contact Armor Support via ticket or live chat at ","type":"text"},{"text":"amp.armor.com","type":"text","marks":[{"type":"link","attrs":{"href":"http://amp.armor.com"}}]},{"text":" or via phone (US: +1) 877 262 3473 or (UK: +44) 800 500 3167. We are here to help.","type":"text"}]}]},{"type":"paragraph"},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If you have created a virtual machine, then you must enable and install your SSL VPN client.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Infrastructure","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click","type":"text"},{"text":" SSL VPN","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Members","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the plus ( + ) icon.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the field, enter and select the name of the user, or their email address.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Mark the desired data center or data centers that the user can connect to.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Submit","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The newly added user will appear in the table; the table is organized in alphabetical order, based on the first name of the user.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log into the client.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Your SSL VPN login credentials are the same credentials you use to access the Armor Management Portal (AMP). ","type":"text"},{"type":"hardBreak"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"anchor","parameters":{"macroParams":{"":{"value":"Disable-SSL/VPN-for-your-user"},"legacyAnchorId":{"value":"SSLVPN-Disable-SSL/VPN-for-your-user"}},"macroMetadata":{"macroId":{"value":"671ae66c6999cfd3b6b45f1b91a71d51"},"schemaVersion":{"value":"1"},"title":"Anchor"}},"localId":"e1294512-40e5-479d-8a5a-1a0b87257cf4"}},{"text":"Disable SSL VPN for your user","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"rule"},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"To disable SSL VPN for a user, you must have the following permissions assigned to your account:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Write SSL VPN Devices and Users","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Read SSL VPN Devices and Users","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Read Virtual Data Centers","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"bodiedExtension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt","parameters":{"macroParams":{"name":{"value":"Remove SSL VPN access for your users"}},"macroMetadata":{"macroId":{"value":"f42cdad8aecf8f58d2334e4dacad3489"},"schemaVersion":{"value":"1"},"title":"Excerpt"}},"localId":"4b081a07-6db3-4f86-9f28-21c99e2840f6"},"content":[{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Infrastructure","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click","type":"text"},{"text":" SSL VPN","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Members","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the top bar, select the desired data center. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Locate and hover over the desired user.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the trash icon that appears. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Remove","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"Access","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Download and install the Cisco AnyConnect SSL VPN client","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"rule"},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"For help, please contact Armor Support via ticket or live chat at ","type":"text"},{"text":"amp.armor.com","type":"text","marks":[{"type":"link","attrs":{"href":"http://amp.armor.com"}}]},{"text":"? or via phone (US: +00) 1 877 262 3473 or (UK: +44) 800 500 3167.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"The Cisco AnyConnect Client is used to create a secure connection from your local computer to your Secure Cloud Servers within Armor's environment.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Download the client. Select the link that corresponds to your operating system:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Windows ","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-win-4.10.08029-core-vpn-predeploy-k9.msi","type":"text","marks":[{"type":"link","attrs":{"href":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-win-4.10.08029-core-vpn-predeploy-k9.msi"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"macOS","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-macos-4.10.08029-predeploy-k9.dmg","type":"text","marks":[{"type":"link","attrs":{"href":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-macos-4.10.08029-predeploy-k9.dmg"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Linux ","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-linux64-4.10.08029-predeploy-k9.tar.gz","type":"text","marks":[{"type":"link","attrs":{"href":"https://agent.armor.com/_files/ciscoanyconnect/anyconnect-linux64-4.10.08029-predeploy-k9.tar.gz"}}]}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once the file has been downloaded, run the installer, and then follow the on-screen prompt.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If you have any issues downloading or installing the AnyConnect client, please contact Armor Support through the ","type":"text"},{"text":"Armor Ticketing System.","type":"text","marks":[{"type":"link","attrs":{"href":"https://support.armor.com"}}]},{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Connect to Cisco AnyConnect SSL VPN client","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"rule"},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In your local machine, open the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Cisco AnyConnect Client","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Verify and select the correct hostname: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

Data Center	Web Address
Dallas	vpn-1.armor.com/okta
Chicago	vpn-6.armor.com/okta
London	vpn-3.armor.com/okta
Frankfurt	vpn-16.armor.com/okta

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"table","attrs":{"layout":"default"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[119.0]},"content":[{"type":"paragraph","content":[{"text":"Data Center","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"Web Address","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[119.0]},"content":[{"type":"paragraph","content":[{"text":"Dallas","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"vpn-1.armor.com/okta","type":"text","marks":[{"type":"link","attrs":{"href":"http://vpn-1.armor.com/okta"}},{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[119.0]},"content":[{"type":"paragraph","content":[{"text":"Chicago","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"vpn-6.armor.com/okta","type":"text","marks":[{"type":"link","attrs":{"href":"http://vpn-6.armor.com/okta"}},{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[119.0]},"content":[{"type":"paragraph","content":[{"text":"London","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"vpn-3.armor.com/okta","type":"text","marks":[{"type":"link","attrs":{"href":"http://vpn-3.armor.com/okta"}},{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[119.0]},"content":[{"type":"paragraph","content":[{"text":"Frankfurt","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[232.0]},"content":[{"type":"paragraph","content":[{"text":"vpn-16.armor.com/okta","type":"text","marks":[{"type":"link","attrs":{"href":"http://vpn-16.armor.com/okta"}},{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter your VPN credentials.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Connect","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You will be connected via multi-factor authentication (MFA). A","type":"text"},{"text":"nswer the phone call from Armor, and then follow the instructions. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"type":"hardBreak"}]}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"anchor","parameters":{"macroParams":{"":{"value":"Troubleshooting-SSL-VPN"},"legacyAnchorId":{"value":"SSLVPN-Troubleshooting-SSL-VPN"}},"macroMetadata":{"macroId":{"value":"5f166dbfb605475a98a8af88369f5e05"},"schemaVersion":{"value":"1"},"title":"Anchor"}},"localId":"fa1a46a6-2475-40a6-9ac1-fa82736604e8"}},{"text":"Troubleshooting SSL VPN","type":"text"}]},{"type":"rule"},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"Billing","type":"text"}]},{"type":"paragraph","content":[{"text":"If you are concerned about your billing statement for SSL VPN devices (members), consider that:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You may have members in other data centers. In the top menu, there is a drop-down menu that you can use to switch across different data center views. As a result, when you switch to a different data center view, you may see additional members.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If you have the same SSL VPN member in multiple data centers, you will only be billed for the one member. For example, if you have one member in DFW01 and the same member in LHR01, then you will only be billed for one member; however, if you have multiple members in a single data center location, then you will be charged for those additional members.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In short, you will be billed for every unique member, regardless of how many data centers are included.","type":"text"}]}]}]}]}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Archived Search","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"anchor","parameters":{"macroParams":{"":{"value":"Log-Search-for-SSL-VPN"},"legacyAnchorId":{"value":"SSLVPN-Log-Search-for-SSL-VPN"}},"macroMetadata":{"macroId":{"value":"ae1646e33bc7907b1284dcfffb8d8922"},"schemaVersion":{"value":"1"},"title":"Anchor"}},"localId":"d489b56e-0755-4305-837d-f0812ae788fe"}},{"text":"Log Search for VMWare SSL VPN","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Please see the ","type":"text"},{"text":"Log Search","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519580060"}}]},{"text":" documentation for more information.","type":"text"}]},{"type":"table","attrs":{"layout":"wide","width":1800.0,"localId":"78e7c59b-829d-48cd-8920-1e790b4100fa"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"Field","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"Filter by","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.action","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"This indicates the action taken. Those listed below are the only ones of interest.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"login success","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"session logout success","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"authentication failure","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.log_level","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"This the log level from the Edge Gateway","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.local_ip","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"The IP address of the client","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.timestamp","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"The timestamp of the action","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.username","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"The username of user taking the action","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[250.0]},"content":[{"type":"paragraph","content":[{"text":"nsx_edge.sslvpn.virtual_ip","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[709.0]},"content":[{"type":"paragraph","content":[{"text":"The IP Address assigned to the user for that session","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"type":"hardBreak"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Topics Discussed","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"maxLevel":{"value":"3"},"minLevel":{"value":"2"}},"macroMetadata":{"macroId":{"value":"26a888b3-ba93-4928-b752-53af8d7cd304"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"9ef7bcc5-3d76-44cd-bdd9-07e07781a055"}}],"version":1}