Customize the SecurID Web Interface for a Cisco Adaptive Security Appliance

You can provide a more streamlined experience for users who authenticate to the Cloud Authentication Service through RADIUS-enabled devices by updating your Cisco Adaptive Security Appliance (ASA) with the latest customization files.

Before you begin

If you deployed the Cloud Authentication Service before October 2019 and you want users who access the customized web client to be able to use Emergency Access Code, you must perform this procedure before you enable Emergency Access Code for users. If possible, perform this customization before you update the identity router.

Procedure

  1. Download the RSASecurIDAccessCiscoWebClient-1.1.0.zip file.

    1. In the Cloud Administration Console, click Authentication Clients > RADIUS.

    2. Select the RADIUS client you want to customize.

    3. On the RADIUS Client page, open Advanced Configuration.

    4. Under Web Client, click Custom, then Download Custom Web Client.

      securid_ngx_g_cisco_download_zip_file.png

    5. Extract the contents of the zip file to a location accessible by the Cisco ASA Adaptive Security Device Manager (ASDM).

  2. Sign in to the Cisco ASDM-IDM Launcher. Specify the IP address or hostname of the Cisco device you are customizing. A dashboard similar to the following appears:

    securid_ngx_g_cisco_config_menu.png

  3. In the toolbar, click Configuration.

  4. In the navigation panel, select Remote Access VPN.

    securid_ngx_g_cisco_remoteaccessvpn.png

  5. In the next navigation panel, click Clientless SSL VPN Access > Portal > Web Contents.

    securid_ngx_g_cisco_clientless_menu.png

    A screen similar to the following appears:

    securid_ngx_g_cisco_import_file.png

    You might see different files depending on what is in your directory folder.

  6. If your web client contains customization files from a previous SecurID release, you must delete each file one by one. Select a file, click Delete, then click Apply.

  1. After you have deleted all files related to the previous customization, import the new files.

    1. Click Import.

    2. In the Import Web Content dialog box, select Local Computer and browse to the directory containing the extracted files. Select a file to import.

    3. Select No. For example, use this option to make the content available to logon or portal page, as shown.

    securid_ngx_g_cisco_import_web_content.png

  2. Click Import Now. When you see the success message, click OK.

  3. Repeat the import steps for each new customization file.

    Note: Do not rename any files you import.

  4. You need to apply the customization to a profile or group policies so you can use the customization in your environment. You can use your preferred method to apply this customization, or perform these steps.

    1. In the navigation panel, click Customization.

    2. Double-click a profile in the Customization Objects window.

    3. In the navigation panel, click Logon Page. The Edit Customization Object dialog box appears.

    4. Select Replace pre-defined logon page with a custom page (full customization).

    5. Select the step_up.inc file as the custom user sign-in page.

    6. Click OK.

      securid_ngx_g_cisco_customize_profile.png

      After the customization is complete, your users will see a customized interface similar to this example:

      securid_ngx_g_cisco_end_user_page_820x1034.png