Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cisco-anyconnect]

For questions about or involving the Cisco Anyconnect VPN service, where this tag should only be used when configuring or troubleshooting Anyconnect on an on topic network device.

3
votes
1answer
26 views

Configuring Cisco ASA DAP policies from CLI! (Automating bulk task)

So I have given a task to add 1000s of DAP policies after main DAP file crashed and backup is not available due to unfortunate reasons. There is predefined way of doing it through ASDM which is very ...
0
votes
0answers
11 views

Limited internet connection when using Cisco Anyconnect VPN [closed]

This is a goofy problem I came across recently and I'm not sure how to fix it. I can VPN to my client successfully from home or office I can browse the internet when connected from home I cannot ...
0
votes
0answers
22 views

Anyconnect Cisco 5505 VPN Group cannot Access Inside Network

Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network. ASA Version 9.2(4)27 ! hostname AwBTech-ASA domain-name awbtech enable password ...
1
vote
0answers
29 views

Cisco ASA: Windows DHCP doesn't bind IP address after failover change active [closed]

Equipment and soft: Two Cisco ASA 5540, ASA ver. 9.1(7)32, active/standby failover DHCP server: Windows server 2016 Anyconnect VPN clients get IP addresses from DHCP servers. Everything works ...
1
vote
0answers
24 views

Why can I not see the default gateway when connecting to ASA through AnyConnect?

I've configured an ASA as an AnyConnect server. The IP address pool that'll be assigned to the connecting hosts is from 192.168.10.1-192.168.10.10. Now when I establish a remote access connection to ...
1
vote
1answer
63 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
1
vote
2answers
713 views

Cisco AnyConnect clients connects to Internet via L3 device on inside zone of ASA (default gateway is on the remote network)

I am testing implementation of AnyConnect where AnyConnect client, after establishing IPSec VPN tunnel, must exit to Internet via L3 device that is located on the same network as RA VPN clients, ...
2
votes
1answer
2k views

ASA anyconnect VPN not able to access remote LAN (inside) network

I have setup ASA5506 for cisco anyconnect VPN and i am able to connect VPN but not able to ping or ssh or anything to any device on remote lan (inside) network 10.0.10.x/24 Here is the network ...
0
votes
1answer
1k views

External DNS intermittent issue on anyconnect remote vpn

I have a anyconnect remote vpn profile where I am having the problem with intermittent issue with external dns. I can not open any external weblink and cant ping it with name but accessing them with ...
2
votes
1answer
16k views

The VPN connection failed due to unsuccessful domain name resolution

We are having trouble when test the VPN remote-access with the above error. It returned domain name successfully when we run nslookup "router_IP" in window CMD but it keeps prompting the error window ...
3
votes
1answer
428 views

Cisco ASA, redirect Anyconnect SSL VPN to new address/url

We have changed our ASA's DNS name from vpn-1.old-domain.com to vpn-1.new-domain.com. A connection profile in a user PC contains the old one VPN host: vpn-1.old-domain.com. So, due to connection there ...
0
votes
1answer
313 views

Remote VPN connectivity - international - DNS geolocation [closed]

I am setting up Anyconnect for multiple organizations with offices world wide. They are going to be sharing two Azure data centers which have vASAs, one is in Europe and the other is in the US. At ...
7
votes
2answers
2k views

Cisco ASA: Why does static NAT block access through VPN? [closed]

TL/DR I set up a static nat rule, so that I can use my public internet IP address to directly ssh into a dedicated machine on the inside network. As a result I cannot ssh into the dedicated machine ...
3
votes
1answer
353 views

IKEv2 client authentication in tunnel RA vpn

When we where using Cisco VPN client, we configured preshared key, under tunnel configuration, and that preshared key had to be configured on VPN client, and on ASA. And client had to have this ...
0
votes
2answers
517 views

Remote access vpn to connect company provided laptop only

I have a request from business where they need to have this feature which only allows users to connect to remote vpn only if they are using company provided laptop and restrict them if they use their ...
1
vote
1answer
6k views

Anyconnect example configuration

I need to implement two types of Anyconnect. One has to be IPSec based, AAA authentication for users and certificate based authentication in tunnel (IKEv2). Second has to be SSL (tunnel mode), ...
2
votes
1answer
3k views

How can I disable temporarily Cisco AnyConnect user from ASDM?

I created user under local users. Now I need to disable the user connecting through VPN for a while only. Platform is ASA 5512 with ASDM 7.6.
1
vote
1answer
1k views

Ping LAN via Anyconnect VPN

I'm trying to configure the VPN on a Cisco ASA 5510. I can connect to it without any problem and I can ping my switch (172.16.1.2/24) but I can't ping the gateway (172.16.1.1/24) nor the Google public ...
1
vote
1answer
2k views

Anyconnect doesn't tunnel internet

I have set up the ASA as VPN Server (SSL). Everything works great. I can reach every office network and also the Internet. Now I noticed that on our old network, the configuration was different. When ...
3
votes
1answer
520 views

ASA 5510 AnyConnect SSL VPN to Windows 3.1 client - connected but no traffic routed

ASA version 9.1 configured with SSL VPN to Windows AnyConnect Secure Mobility Client version 3.1. VPN Filter ACL is configured to allow all traffic and ICMP, and is attached to group policy. Problem: ...
2
votes
2answers
10k views

Cisco ASA AnyConnect - Authenticate using RSA token, Assign policy based on AD Group

I've successfully created a AnyConnect VPN configuration on my Cisco ASA and it authenticates to RSA secureID to use the token code. However what I'd like to do now is an AD lookup on the username and ...
4
votes
1answer
397 views

Cisco AnyConnect connection profiles affected by upgrades?

We are in the process of rolling out Cisco AnyConnect in our environment to replace the old IPSec client. We are purposely avoiding this deployment to machines that already have the client installed (...
4
votes
1answer
7k views

Trouble configuring AnyConnect to use a RSA token PIN only for authentication

I have a 5515X 9.1.2 configured with AnyConnect 3.1.04059. I have successfully configured it to accept RSA secureID tokens by means of using the PIN+TokenCode. Now I simply want to enable it so ...
6
votes
1answer
618 views

Migrating from PIX/VPN 3000 to ASA

In a project to replace the last Cisco PIXes and VPN 3000 Concentrators we have [finally], I've already spec'd out the new ASA 5515-X and 5545-X's. I have no experience with the X models; only exp ...
12
votes
2answers
466 views

Can I use Cisco Anyconnect with mobile devices?

I've got a lot of clients with mobile devices that want to connect to our corporate network which uses Cisco Anyconnect. How can my clients connect to our VPN using a mobile device?