please stay away from ASA 5500 version 8.4.6

when you want to upgrade your ASA os version, you can use 8.4.5 or brand new 8.4.7, please avoid 8.4.6, too many bugs and really troubled me, the good thing is I just used it on my testing box.

what I experienced:
1. you can connect to VPN but the network is working working, show debug error license exceed limit
2. your 2 factor authentication might not working after upgrade, you meed recreate the VPN profile
3. your CSD policy might messed, need reconfig.


I am so glad did not upgrade my production box.

ASA clientless VPN portal bookmark working with DFS

in the windows infrastructure such as you company domain name is abc.com  you can use \\abc\folder\folder to access dfs file, but is not working with ASA clientless vpn portal bookmark, you might get " can't contact drive" or similar error message

here is the solution:
if you have singer file server you can use first two solutions, for multiple file server you need use the third one.

1. you can use the hostname of the fileserver,   server01/folder/folder
2. use full dns  server01.abc.com/folder/folder
3. use name as abc.com/folder/folder