Always on VPN - Anyconnect cannot confirm it is connected to your secure gateway

[lmqtechnology]

I am configuring always on VPN with TND on a Cisco ASA 5508, the client downloads the profile correctly, and correctly recognises when it is on a trusted network, however when we move to an untrusted network I get the error

"anyconnect cannot confirm it is connect to your secure gateway.  The local network may not be trustworthy.  Please try another network."

We have a valid cert from GoDaddy on the ASA.

[Francesco Molino]

Which version of anyconnect are you using?
Have you tried upgrading or downloading to see if the behaviour is the same?

[lmqtechnology]

4.8.. have not tried a different version.

[Francesco Molino]

Can you try with another version? Latest one for example?
I didn't ask before but for precaution, your devices aren't through a proxy to access internet while on untrusted network (cloud proxy for example)

[gargolek99]

@lmqtechnology  did you resolve you issue? I have exact same symptoms.

[gargolek99]

I fixed this issue by generating local ca and applying to the anyconnect.

[Blueberry02]

I got in as a local admin,  unchecked the option "block untrusted networks", tried to connect inside local admin, clicked "connect anyway" and then gave me certicate error, i just updated policy (gpupdate force), and that solved the issue.