some Anyconnect Users experience frequent disconnects:
Oct 9 14:10:08 fw : %ASA-4-113019: Group = A, Username = W, IP = a.b.c.d, Session disconnected. Session Type: SSL, Duration: 0h:03m:44s, Bytes xmt: 555379, Bytes rcv: 479046, Reason: Connection Preempted
Oct 9 14:14:49 fw : %ASA-4-113019: Group = A, Username = W, IP = a.b.c.d, Session disconnected. Session Type: SSL, Duration: 0h:04m:41s, Bytes xmt: 705887, Bytes rcv: 586615, Reason: Connection Preempted
Oct 9 14:26:18 fw : %ASA-4-113019: Group = A, Username = W, IP = a.b.c.d, Session disconnected. Session Type: SSL, Duration: 0h:11m:29s, Bytes xmt: 660791, Bytes rcv: 653513, Reason: Connection Preempted
When placing "ping -t <destination through the tunnel>" the Anyconnect session is not disconnected. The idle timeout is set to 60 min.
Can anyone give me a hint?
Cisco Anyconnect Secure Mobility Client, Version 3.1.05182
# sh ver
Cisco Adaptive Security Appliance Software Version 9.1(4)
Device Manager Version 7.3(1)101
Compiled on Thu 05-Dec-13 19:37 by builders
System image file is "disk0:/asa914-k8.bin"
Config file at boot was "startup-config"
# up 23 days 9 hours
failover cluster up 1 year 124 days
Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz,
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xfff00000, 1024KB
Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode : CNLite-MC-SSLm-PLUS-2_05
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.09
Number of accelerators: 1
Connection preempted. Indicates that the allowed number of simultaneous (same user) logins has been exceeded. To resolve this problem, increase the number of simultaneous logins or have users only log in once with a given username and password.
To increase the number, you must have a change on the group policy assigned to the user (group).
group-policy VPN attributes
many thanks for your suggestion. Actually the "vpn-simultaneous-logins 3" is configured but still "Connection Preemted" messages can be found in the the logfile. I will upgrade to asa915-k8.bin and see what happens.