RV345 cannot login to SSL VPN after update to 1.0.03.26

[slashben]

We have updated our RV345 to the latest firmware: 1.0.03.26, we cannot connect with AnyConnect the router from remote anymore.

2022-Feb-21, 17:15:14 GMT
info
ssl-vpn
log_sslvpnac: facility=SslVpn;msg=INFO sslvpn_appl.c.295[745FF470] Received user credentials. User: bhirschb42. Sent for authentication.;
2022-Feb-21, 17:15:14 GMT
error
ssl-vpn
log_sslvpnac: facility=SslVpn;msg=ERROR sslvpn_aaa_stubs.c.107[745FF470] sbtg_authorize: user or passowrd not correct.;
2022-Feb-21, 17:15:14 GMT
error
ssl-vpn
log_sslvpnac: facility=SslVpn;msg=DEBUG sslvpn_aaa_stubs.c.105[745FF470] sbtg_authorize: ret 6.

Notes

1. All the users are in local DB

2. We have tried to change passwords, reboots and etc. - nothing helped!

We tried to rollback. We downloaded image 1.0.03.24 but could not rollback because firmware image was not ok (system: Failed : verification of image failed!)

Please help!

[marce1000]

 -  Create   TAC case/ticket : https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html

 M.

[CoreyP319]

Hi SlashBen,

Thank you for surfacing the issue you've encountered. As Marce1000 noted, open a case so that we can have an engineer's eyes on the issue. They will also be able to help rollback in the event that is required. 

[slashben]

Hi @CoreyP319 @marce1000 

I have tried to open a ticket, but I was told by your colleague that this device was not eligible for support anymore (it was purchased less than 2 years ago).

This is very bad customer experience, we have updated the firmware because the management portal was pushing us to update. When updated the device has become more or less useless for us (main use case is VPN) and we don't have minimal support from Cisco...

[AGNTI]

Same problem over here.

After several vulnerabilities in the previous version, Cisco has decided to release a new version of the firmware that only blocks some features of the equipment to run away from attacks.
But, that's only a superficial way to escape, in some cases, from court.
I always recommended Cisco equipment, over more than 10 years of work I never experienced anything like that. So now, we need to wait some new firmware release to fix everything (not only "close the doors" to solve security issues).
But it would be Cisco's job to release stable versions for equipment like this (not so cheap to disable features temporarily, even more over business series).
The only question is: Who will pay the associated losses?

[marce1000]

          https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html

[ReeceGriffin07811]

Same problem here. Very disappointing.