Cisco 5505 - ASA Firewall Edition Bundle

A-6
Cisco AnyConnect VPN Client Administrator Guide
OL-12950-012
Appendix A Sample AnyConnect Profile and XML Schema
Sample AnyConnect Profile Schema
<xs:element name="KeyUsage" type="ns1:KeyUsage"
minOccurs="0">
<xs:annotation>
<xs:documentation>Certificate Key attributes
that can
be used for choosing acceptable client certificates.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="ExtendedKeyUsage"
type="ns1
:ExtendedKeyUsage" minOccurs="0">
<xs:annotation>
<xs:documentation>Certificate Extended Key
attribute
s that can be used for choosing acceptable client
certificates.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="DistinguishedName"
type="ns1
:DistinguishedName" minOccurs="0">
<xs:annotation>
<xs:documentation>Certificate Distinguished Name
matching
allows for exact match criteria in the choosing of acceptable client
certificates.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="BackupServerList" type="ns1:BackupServerList"
minOccurs
="0">
<xs:annotation>
<xs:documentation>Collection of one or more backup servers
to be use
d in case the user selected one fails.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="ServerList" type="ns1:HostEntry" minOccurs="0">
<xs:annotation>
<xs:documentation>This section contains the list of hosts the user will
be able t
o select from.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="BackupServerList">
<xs:annotation>
<xs:documentation>Collection of one or more backup servers to be used in case
the user
selected one fails.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="HostAddress" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>Can be a FQDN or IP address.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="KeyUsage">
<xs:annotation>
<xs:documentation>Certificate Key attributes that can be used for choosing
acceptabl
e client certificates.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="MatchKey" maxOccurs="9">