https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017030#M918758 <P>Hello - when i confogure my asa 5520 with software 8.0(3) I have next problem:</P><P>When i enter to secure desktop and print my login and passwd i see "incorrect login"</P><P>on asa i see this:</P><P>INFO: debug webvpn enabled at level 200.</P><P>HMCIS-Firewall# webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_portal.c:ewaFormSubmit_webvpn_login[1826]</P><P>ewaFormSubmit_webvpn_login: tgCookie = 0</P><P>ewaFormSubmit_webvpn_login: cookie = c9938928</P><P>ewaFormSubmit_webvpn_login: tgCookieSet = 0</P><P>ewaFormSubmit_webvpn_login: tgroup = NULL</P><P>webvpn_portal.c:http_webvpn_kill_cookie[632]</P><P>webvpn_auth.c:http_webvpn_pre_authentication[2009]</P><P>WebVPN: calling AAA with ewsContext (-932106496) and nh (-932109336)!</P><P>WebVPN: started user authentication...</P><P>webvpn_auth.c:webvpn_aaa_callback[4537]</P><P>WebVPN: AAA status = (REJECT)</P><P>webvpn_portal.c:ewaFormSubmit_webvpn_login[1826]</P><P>ewaFormSubmit_webvpn_login: tgCookie = 0</P><P>ewaFormSubmit_webvpn_login: cookie = c9938928</P><P>ewaFormSubmit_webvpn_login: tgCookieSet = 0</P><P>ewaFormSubmit_webvpn_login: tgroup = NULL</P><P>webvpn_auth.c:http_webvpn_post_authentication[1233]</P><P>WebVPN: user: (evkuzin) rejected.</P><P>http_remove_auth_handle(): handle 76 not found!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P></P><P>But radius logs a clean!!! </P><P></P><P>what wrong?</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 12:56:38 GMT vadim.kharchenko 2019-03-11T12:56:38Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017030#M918758 <P>Hello - when i confogure my asa 5520 with software 8.0(3) I have next problem:</P><P>When i enter to secure desktop and print my login and passwd i see "incorrect login"</P><P>on asa i see this:</P><P>INFO: debug webvpn enabled at level 200.</P><P>HMCIS-Firewall# webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P>webvpn_portal.c:ewaFormSubmit_webvpn_login[1826]</P><P>ewaFormSubmit_webvpn_login: tgCookie = 0</P><P>ewaFormSubmit_webvpn_login: cookie = c9938928</P><P>ewaFormSubmit_webvpn_login: tgCookieSet = 0</P><P>ewaFormSubmit_webvpn_login: tgroup = NULL</P><P>webvpn_portal.c:http_webvpn_kill_cookie[632]</P><P>webvpn_auth.c:http_webvpn_pre_authentication[2009]</P><P>WebVPN: calling AAA with ewsContext (-932106496) and nh (-932109336)!</P><P>WebVPN: started user authentication...</P><P>webvpn_auth.c:webvpn_aaa_callback[4537]</P><P>WebVPN: AAA status = (REJECT)</P><P>webvpn_portal.c:ewaFormSubmit_webvpn_login[1826]</P><P>ewaFormSubmit_webvpn_login: tgCookie = 0</P><P>ewaFormSubmit_webvpn_login: cookie = c9938928</P><P>ewaFormSubmit_webvpn_login: tgCookieSet = 0</P><P>ewaFormSubmit_webvpn_login: tgroup = NULL</P><P>webvpn_auth.c:http_webvpn_post_authentication[1233]</P><P>WebVPN: user: (evkuzin) rejected.</P><P>http_remove_auth_handle(): handle 76 not found!</P><P>webvpn_auth.c:webvpn_auth[476]</P><P>WebVPN: no cookie present!!</P><P></P><P>But radius logs a clean!!! </P><P></P><P>what wrong?</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 12:56:38 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017030#M918758 vadim.kharchenko 2019-03-11T12:56:38Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017031#M918760 <HTML><HEAD></HEAD><BODY><P>Did you check the Radius connectivity with the AAA server using the 'test' command on the ASA?</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 09 Jun 2008 09:22:40 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017031#M918760 Farrukh Haroon 2008-06-09T09:22:40Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017032#M918762 <HTML><HEAD></HEAD><BODY><P>Yes - i'm sure that the connection to radius work propertly because beside webvpn i configure remote ipsec vpn with authentification on this radius and it's work.</P></BODY></HTML> Mon, 09 Jun 2008 10:14:13 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017032#M918762 vadim.kharchenko 2008-06-09T10:14:13Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017033#M918763 <HTML><HEAD></HEAD><BODY><P>I'm assuming your WebVPN connections are landing on "tunnel-group test", Why do you have "authentication certificate" command there?</P><P></P><P>Also make sure you follow the instructions on the following link:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809888e5.shtml#topicsubsub" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809888e5.shtml#topicsubsub</A></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 09 Jun 2008 10:58:15 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017033#M918763 Farrukh Haroon 2008-06-09T10:58:15Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017034#M918765 <HTML><HEAD></HEAD><BODY><P>Also try to compare your debugs with the following page, and if possible post them over here:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c18ff.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c18ff.shtml</A></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 09 Jun 2008 11:02:58 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017034#M918765 Farrukh Haroon 2008-06-09T11:02:58Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017035#M918767 <HTML><HEAD></HEAD><BODY><P>Were you able to get this working?</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Tue, 10 Jun 2008 06:36:01 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017035#M918767 Farrukh Haroon 2008-06-10T06:36:01Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017036#M918769 <HTML><HEAD></HEAD><BODY><P>It's not work <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span></P><P>But i noticed the following issue:</P><P>If i write login &amp; pass any users from AD, then i see "incorrect login" and in debug webvpn "AAA status = (REJECT)"</P><P>If i write login &amp; pass my admin user with priv 15 - i see on debug webvpn "AAA status = (ACCEPT) and on login page "Login denied, unauthorized connection mechanism, contact your administrator."</P><P>I don't know why... (((</P></BODY></HTML> Tue, 10 Jun 2008 08:26:03 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017036#M918769 vadim.kharchenko 2008-06-10T08:26:03Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017037#M918774 <HTML><HEAD></HEAD><BODY><P>I think that in the settings webvpn I should enter tunnel-group test. But where... <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P></BODY></HTML> Tue, 10 Jun 2008 10:12:37 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017037#M918774 vadim.kharchenko 2008-06-10T10:12:37Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017038#M918775 <HTML><HEAD></HEAD><BODY><P>I think your current WebVPN is landing on the DefaultRAGroup (the configuration of which is missing from the text file you attached in your first post), use this link to configure your ASA such that you can 'select' the tunnel-group at logon time:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808bd83d.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808bd83d.shtml</A></P><P></P><P>This way, at least you know no which tunnel-group you are landing.</P><P></P><P>Regards</P><P></P><P>Farrukh</P><P></P></BODY></HTML> Tue, 10 Jun 2008 12:12:03 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017038#M918775 Farrukh Haroon 2008-06-10T12:12:03Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017039#M918776 <HTML><HEAD></HEAD><BODY><P>Yes - thank you. Now it's working. But in cfg i don't see DefaultRAGroup... </P><P></P></BODY></HTML> Tue, 10 Jun 2008 16:16:02 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017039#M918776 vadim.kharchenko 2008-06-10T16:16:02Z https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017040#M918777 <HTML><HEAD></HEAD><BODY><P>Did you try </P><P></P><P>"show run all tunnel-group"</P><P></P><P>It should be there</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Wed, 11 Jun 2008 06:32:22 GMT https://community.cisco.com/t5/network-security/some-trouble-with-webvpn/m-p/1017040#M918777 Farrukh Haroon 2008-06-11T06:32:22Z