Anyconnect through RDP

[alyautdinov]

Hi.

We have Anyconnect (ver. 4.2.10135) configured on ASR1000RP1 (IPSec IKEv2).

VPN is working from desktop, but doesn't work through RDP connection.

In the XML file the following settings about remote session:

<WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>

but anyconnect doesn't work: error "VPN establishment capability from a remote desktop is disabled.  A VPN connection will not be established."

Can you help with this issue?

[Rohan Padwal]

please check the XML downloaded to the client pc do you see the setting getting pushed?

location in pc.......C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

have you mapped the correct xml to the group-policy?

eg:

#Rohan

[alyautdinov]

Rohan,

I found settings anyconnect profile:

crypto vpn anyconnect profile "name" bootflash:anyconnect.xml

but I can't find how to attach it to the ikev2 policy