Cisco anyconnect, ASA version 9.14.x anyconnect version 4.10

[Amen]

Many of our users are facing constant reconnect
while using the Cisco AnyConnect Client.

[balaji.bandi]

is this for all devices ? only some ?

[Amen]

for around 20 Users only 

[balaji.bandi]

how about rest ? (compare to other user what % is this )

[Marvin Rhoads]

I see IKEv2 referenced in the error message. Are these users the only ones using a profile with IKEv2?

Was it working OK before now? If so, has anything changed since then?

[Amen]

Users see only reconnect error, no  changes were done at all, and  yes it was working before , very few people affected. all users have the same configs 

error : SOCKETTRANSPORT_ERROR_GET_RESULT_FAILURE

[Amen]

Looks like windows issue :- https://answers.microsoft.com/en-us/windows/forum/all/windows10-password-authentication-fails-to-unlock/a1fa38d8-f00e-4fb8-810f-c411b4afa50a but not sure , any recommends 

[Amen]

Please see the screenshot

[Amen]

Hello Marvin, from the DART file i found this error which means that certificate error from Client side 

[Marvin Rhoads]

Are you using IKEv2 with certificate-based authentication?

[Amen]

yes 

[Marvin Rhoads]

In the case, the error message appears to be relevant: "Ignoring client certificate because it does not contain the required EKU extension." Perhaps the template used to issue those client certificates is incorrect.

[Amen]

Iam sorry , You mean from the windows side or from the annyconnect side ? if you can prehaps explain!! what i think to do is 

delete the certificate and enroll for a new one, with a new key pair.

[Amen]

The certificate errors are normally seen when the user start the PC after having it in standby. I can confirm that these cert errors are not to be seen when the users have the problem. I myself have this error on my DART file without having any problem with my VPN sessions.

Unfortunately a user, from which we updated the WLAN and LAN drivers and disabled the switching feature, is having the same problem, he gets many reconnections, just as before.

[Amen]

I have learnt, that for the user AZ the problem was solved, it was due to the fact that the user had active WLAN and LAN at the same time. After disabling one of the he could work with no problems.

trying to solve the other users