Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they do, how they work.

I've a strong theoretical understanding of VPNs but no pratical experience. At present I'm just learning the basics using a Cisco ASA Simulator.

Thanks for any help.

share|improve this question
up vote 2 down vote accepted

Connection Profiles are used to assign DHCP servers, Global Addresse Pools, AAA and generic VPN settings. (How to connect to the VPN)

It will also be "linked" to a Group Policiy"

The Group Policy will specify network ACL, DNS and Routing (Split Tunneling) once the VPN connection is established. (What are you privileges once you are connected)

Therefore, you can have multiple ways to connect to your VPN endpoint but still have the same policies attributed to the different VPN clients.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.