topic AnyConnect on Server 2012 R2 in DevNet Sandbox

AnyConnect on Server 2012 R2

ryan.salim — Tue, 04 Jun 2019 09:21:53 GMT

Hi, I have been trying to get this working to no avail. The same setup works through Windows 10, but not in 2012 R2.

Have anyone been successful?

Re: AnyConnect on Server 2012 R2

jokearns1 — Wed, 20 Jan 2016 11:33:44 GMT

What sandbox are you connecting to? Can you paste in the error message you are receiving?

Thanks

Joe Kearns

Re: AnyConnect on Server 2012 R2

ryan.salim — Wed, 20 Jan 2016 16:43:46 GMT

devnetsandboxlabs.cisco.com/rave12

Re: AnyConnect on Server 2012 R2

jokearns1 — Wed, 20 Jan 2016 17:51:20 GMT

Hi Ryan,

I just tested it here one and its good on this side. We don't have a 2012 R2 machine to test on right now. Trying to source one.

Is there any way you can try on a separate PC? I can verify it it works on 2007 and 2010. Also, if there is a firewall on the server, please turn it off. Also try rebooting the 2010 servers and attempt the connection again. If you connecting from within a corporate network, make sure that VPN is allowed out.

Joe

Re: AnyConnect on Server 2012 R2

ryan.salim — Wed, 20 Jan 2016 18:40:48 GMT

It works on my Windows 10 computer. This Windows 10 computer is connected to the same subnet as the 2012 R2, so it is unlikely a network issue. No firewalls or antiviruses on both systems.

Also, pardon me if below does not make sense:

After some Wireshark sessions, it looks like the failure is during TLS handshake. Furthermore, the 'Server Hello' packet to the Win10 machine accepted the TLS_RSA_WITH_RC4_128_MD5

After much reading, I believe 2012R2 disables all RC4 ciphers. Sure enough, the 'Client Hello' from 2012R2 did not offer any RC4 ciphers.

My guess is that the sandbox only allows TLS 1.0 with this cipher whereas 2012R2 does not allow it.

Again, this is not my expertise, so please take my findings with a grain of salt.

Re: AnyConnect on Server 2012 R2

jokearns1 — Fri, 22 Jan 2016 12:07:38 GMT

Hi Ryan,

Thanks for troubleshooting the problem on your side. We will check the requirements our side regarding RC4 ciphers.

Is this affecting your testing? do you have a workaround or do you need to the 2012 R2 server connected?

Please note that we are experiencing WAN connectivity issues. We will update you shortly when these are resolved.

Joe Kearns