Questions tagged [cisco-anyconnect]

For questions about or involving the Cisco Anyconnect VPN service, where this tag should only be used when configuring or troubleshooting Anyconnect on an on topic network device.

Filter by
Sorted by
Tagged with
0 votes
1 answer
98 views

Changing Cisco Anyconnect client GUI Text and messages

I tried changing from Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Customization/Localization > GUI Text and Message and also from language localisation.. I ...
Rokaiya Siddika Orni's user avatar
2 votes
1 answer
477 views

Can I set the AnyConnect group policy from users source IP?

Is it possible to configure a Group Policy to be used based on the source IP of the AnyConnect user? I want users connecting from a specific location (IP address) to get a specific Group policy. ...
8None1's user avatar
  • 121
3 votes
2 answers
6k views

Configuring Cisco ASA DAP policies from CLI! (Automating bulk task)

So I have given a task to add 1000s of DAP policies after main DAP file crashed and backup is not available due to unfortunate reasons. There is predefined way of doing it through ASDM which is very ...
Terminator's user avatar
0 votes
0 answers
68 views

Anyconnect Cisco 5505 VPN Group cannot Access Inside Network

Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network. ASA Version 9.2(4)27 ! hostname AwBTech-ASA domain-name awbtech enable password ...
andrewixl's user avatar
1 vote
0 answers
435 views

Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]

Equipment and soft: Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover DHCP server: Windows server 2016 Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
Nadia's user avatar
  • 33
1 vote
0 answers
321 views

Why can I not see the default gateway when connecting to ASA through AnyConnect?

I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
P_K's user avatar
  • 55
1 vote
1 answer
374 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
Satish's user avatar
  • 4,371
1 vote
2 answers
3k views

Cisco AnyConnect clients connects to Internet via L3 device on inside zone of ASA (default gateway is on the remote network)

I am testing implementation of AnyConnect where AnyConnect client, after establishing IPSec VPN tunnel, must exit to Internet via L3 device that is located on the same network as RA VPN clients, ...
John's user avatar
  • 812
3 votes
1 answer
6k views

ASA anyconnect VPN not able to access remote LAN (inside) network

I have setup ASA5506 for cisco anyconnect VPN and i am able to connect VPN but not able to ping or ssh or anything to any device on remote lan (inside) network 10.0.10.x/24 Here is the network ...
Satish's user avatar
  • 4,371
0 votes
1 answer
2k views

External DNS intermittent issue on anyconnect remote vpn

I have a anyconnect remote vpn profile where I am having the problem with intermittent issue with external dns. I can not open any external weblink and cant ping it with name but accessing them with ...
Rsingh's user avatar
  • 11
2 votes
2 answers
30k views

The VPN connection failed due to unsuccessful domain name resolution

We are having trouble when test the VPN remote-access with the above error. It returned domain name successfully when we run nslookup "router_IP" in window CMD but it keeps prompting the error window ...
SpiderlinK's user avatar
3 votes
1 answer
1k views

Cisco ASA, redirect Anyconnect SSL VPN to new address/url

We have changed our ASA's DNS name from vpn-1.old-domain.com to vpn-1.new-domain.com. A connection profile in a user PC contains the old one VPN host: vpn-1.old-domain.com. So, due to connection there ...
sharlino's user avatar
0 votes
1 answer
524 views

Remote VPN connectivity - international - DNS geolocation [closed]

I am setting up Anyconnect for multiple organizations with offices world wide. They are going to be sharing two Azure data centers which have vASAs, one is in Europe and the other is in the US. At ...
Nathan's user avatar
  • 3
7 votes
2 answers
4k views

Cisco ASA: Why does static NAT block access through VPN? [closed]

TL/DR I set up a static nat rule, so that I can use my public internet IP address to directly ssh into a dedicated machine on the inside network. As a result I cannot ssh into the dedicated machine ...
user1129682's user avatar
3 votes
1 answer
376 views

IKEv2 client authentication in tunnel RA vpn

When we where using Cisco VPN client, we configured preshared key, under tunnel configuration, and that preshared key had to be configured on VPN client, and on ASA. And client had to have this ...
John's user avatar
  • 812
0 votes
2 answers
2k views

Remote access vpn to connect company provided laptop only

I have a request from business where they need to have this feature which only allows users to connect to remote vpn only if they are using company provided laptop and restrict them if they use their ...
Rsingh's user avatar
  • 11
1 vote
1 answer
10k views

Anyconnect example configuration

I need to implement two types of Anyconnect. One has to be IPSec based, AAA authentication for users and certificate based authentication in tunnel (IKEv2). Second has to be SSL (tunnel mode), ...
John's user avatar
  • 812
2 votes
1 answer
8k views

How can I disable temporarily Cisco AnyConnect user from ASDM?

I created user under local users. Now I need to disable the user connecting through VPN for a while only. Platform is ASA 5512 with ASDM 7.6.
Tech's user avatar
  • 313
1 vote
1 answer
3k views

Ping LAN via Anyconnect VPN

I'm trying to configure the VPN on a Cisco ASA 5510. I can connect to it without any problem and I can ping my switch (172.16.1.2/24) but I can't ping the gateway (172.16.1.1/24) nor the Google public ...
jrmybeaud's user avatar
1 vote
1 answer
2k views

Anyconnect doesn't tunnel internet

I have set up the ASA as VPN Server (SSL). Everything works great. I can reach every office network and also the Internet. Now I noticed that on our old network, the configuration was different. When ...
SystemCookie's user avatar
3 votes
1 answer
691 views

ASA 5510 AnyConnect SSL VPN to Windows 3.1 client - connected but no traffic routed

ASA version 9.1 configured with SSL VPN to Windows AnyConnect Secure Mobility Client version 3.1. VPN Filter ACL is configured to allow all traffic and ICMP, and is attached to group policy. Problem: ...
nepdev's user avatar
  • 223
2 votes
2 answers
11k views

Cisco ASA AnyConnect - Authenticate using RSA token, Assign policy based on AD Group

I've successfully created a AnyConnect VPN configuration on my Cisco ASA and it authenticates to RSA secureID to use the token code. However what I'd like to do now is an AD lookup on the username and ...
tunnelsup's user avatar
  • 828
4 votes
1 answer
455 views

Cisco AnyConnect connection profiles affected by upgrades?

We are in the process of rolling out Cisco AnyConnect in our environment to replace the old IPSec client. We are purposely avoiding this deployment to machines that already have the client installed (...
ge0ff73's user avatar
  • 271
4 votes
1 answer
8k views

Trouble configuring AnyConnect to use a RSA token PIN only for authentication

I have a 5515X 9.1.2 configured with AnyConnect 3.1.04059. I have successfully configured it to accept RSA secureID tokens by means of using the PIN+TokenCode. Now I simply want to enable it so ...
tunnelsup's user avatar
  • 828
6 votes
1 answer
647 views

Migrating from PIX/VPN 3000 to ASA

In a project to replace the last Cisco PIXes and VPN 3000 Concentrators we have [finally], I've already spec'd out the new ASA 5515-X and 5545-X's. I have no experience with the X models; only exp ...
generalnetworkerror's user avatar
12 votes
2 answers
557 views

Can I use Cisco Anyconnect with mobile devices?

I've got a lot of clients with mobile devices that want to connect to our corporate network which uses Cisco Anyconnect. How can my clients connect to our VPN using a mobile device?
Lucas Kauffman's user avatar