topic Re: How to avoid anyconnect untrusted server alert in Network Security

How to avoid anyconnect untrusted server alert

l.buschi — Mon, 02 May 2022 13:25:51 GMT

Hello,

my costumer migrated his antivirus and now he has issues with anyconnect.

He need to upload a certificate to avoid the alert on anyconnect connection.

He need to contnue in local username AAA, no certificate authentication for user.

Is there a way to upload a certificate to solve this problem?

In attachement the alert.

Many tks

Johnny

Re: How to avoid anyconnect untrusted server alert

Marcelo Morais — Mon, 02 May 2022 13:33:06 GMT

Hi @l.buschi ,

at AnyConnect > click the Cog Wheel > Preferences > you are able to disable the Block Connections to Untrusted Servers.

Hope this helps !!!

Re: How to avoid anyconnect untrusted server alert

Marvin Rhoads — Mon, 02 May 2022 13:36:36 GMT

The headend device (ASA or FTD) must have a certificate issued by a trusted Certificate Authority (CA) matching the Fully Qualified Domain Name (FQDN) of the device. If you access it via IP address it will typically always give you the untrusted alert.

Using local authentication (or not) and the type of authentication (username and password vs. certificate) is completely unrelated to this problem.

Re: How to avoid anyconnect untrusted server alert

l.buschi — Mon, 02 May 2022 13:41:01 GMT

Many tks Marvin.

where is the section on ASDM I can upload a certificate?

Re: How to avoid anyconnect untrusted server alert

Marvin Rhoads — Mon, 02 May 2022 13:46:48 GMT

You're welcome.

Here's a complete guide to setting up a certificate:

https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

Once you have it installed, be sure to select it under the Remote Access VPN setup as the device certificate to be used.

Re: How to avoid anyconnect untrusted server alert

MHM Cisco World — Wed, 04 May 2022 12:53:32 GMT

check this link.