Connectivity to PIX/ASA is not attained by the Cisco VPN client when DES with SHA is configured, and the user receives the "atts not acceptable" error message

[TCC_2]

Core issue

This happens because the Data Encryption Standard (DES)/Secure Hash Algorithm (SHA) is not supported by the VPN client.

Resolution

In order to resolve this issue, try this workaround:

Configure the encryption to 3DES instead of DES with SHA. If the PIX Firewall is not configured for 3DES, try DES with Message Digest 5 (MD5).

Refer to these documents for more information:

• The Configuring the PIX Firewall section of Managing VPN Remote Access
  
  
• The Certificate Authorities (CA) section of Supported VPN Standards
  
  
• Remote-Access VPN Configuration on ASA