Cisco AnyConnect 4.5.02033

[stefandenhartog]

When I try to connect from my home network to my work network I get the following error:

Connection attempt has timed out. Please verify Internet connectivity.

Weird thing is, when I use my phone to connect to the network (use phone as wifi hotspot) it does work.

When I use Shrewsoft VPN client I also get a connection. Our network administrators couldn't see any problems on their side, so it must be my network.

Some things I've done:
Tried to reinstall anyconnect, didn't help
Reset my entire router to factory settings.
Used my desktop and my laptop, both had the same problem when using my home network.
Disabled firewall on my router.
Ping has been disabled at work servers but it does resolve the name to IP.
Using the IP instead of the vpn name doesn't help either.

It did work for a few months before this happened.

Dartbundle can be downloaded from:

http://www.codetalks.nl/DARTBundle_1011_2253.zip

I couldn't attach them to this discussion.

[JP Miranda Z]

Hi  stefandenhartog,

The DART shows connectivity issues:

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Warning
Source : acvpnagent

Description : Function: CNetEnvironment::logProbeFailure
File: NetEnvironment.cpp
Line: 1437
Invoked Function: CHttpProbeAsync::SendProbe
Return Code: -27066354 (0xFE63000E)
Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT
HTTP (host: x.x.x.x)

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Error
Source : acvpnagent

Description : Function: CNetEnvironment::TestAccessToSG
File: NetEnvironment.cpp
Line: 1390
Invoked Function: CNetEnvironment::analyzeHttpResponse
Return Code: -28966899 (0xFE46000D)
Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Error
Source : acvpnagent

Description : Function: CNetEnvironment::testNetwork
File: NetEnvironment.cpp
Line: 783
Invoked Function: CNetEnvironment::IsSGAccessible
Return Code: -28966899 (0xFE46000D)
Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Error
Source : acvpnagent

Description : Function: CNetEnvironment::TestNetEnv
File: NetEnvironment.cpp
Line: 230
Invoked Function: CNetEnvironment::testNetwork
Return Code: -28966899 (0xFE46000D)
Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Information
Source : acvpnagent

Description : Function: CNetEnvironment::TestNetEnv
File: NetEnvironment.cpp
Line: 268
Incomplete probe count is 2

******************************************

Date : 10/11/2017
Time : 22:53:09
Type : Information
Source : acvpnagent

Description : Function: CNetEnvironment::TestNetEnv
File: NetEnvironment.cpp
Line: 370
Network accessible. Retesting connectivity to the secure gateway in 20 seconds.

******************************************

Keep in mind AnyConnect works over port tcp/udp 443, the Shrewsoft VPN client works over udp 500 which will explain why that one works.

In this case i will recommend you to contact your ISP since looks like they are blocking you 443 traffic, if you need to troubleshoot further i will recommed you to take captures on the ASA from public to public ip and run wireshark on the PC while trying to connection from your home network.

Hope this info helps!!

Rate if helps you!!

-JP-

[stefandenhartog]

It's been a while, but the problem is still appearing.

I have contacted my ISP, and the first question was "Can you tell me what a VPN connection is."  so that wasn't very successful, and they stated they didn't do support for any client software support so that looks like a dead end.

I have attached Wireshark logs from my desktop while trying to connect to to my work vpn. 

I'll ask my colleague to send me log files from the ASA or do you need Wireshark logs from the same time as the ASA logs?

Thanks for your support!

[stefandenhartog]

Does this help?