AnyConnect 3.1.04072 Allow Remote Users

[Pavlo Zabudskyi]

I can't find Windows VPN Establishment with "Allow Remote Users" in Profile editor. Is it deprecated?

[Marcin Latosiewicz · Accepted solution]

Pavlo,

Could be a limitation of profile editor you're running (standalone or from ASDM?)

The value exists in VPN XML reference:

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/apxAvpnxmlref.html

and was not retired to my knowledge.

M.

[Pavlo Zabudskyi]

Yeap it was limitation of standalone one.

I upgraded ASDM and created profile with it

webvpn
 svc profiles AnyConnect_profile_allow_RU disk0:/anyconnect_profile_allow_ru.xml
group-policy anyconnect attributes
 webvpn
  svc profiles value AnyConnect_profile_allow_RU
more disk0:/anyconnect_profile_allow_ru.xml
 AllowRemoteUsers

But wasn't able to connect to VPN with RDP connection.

I have ASA Version 8.2(1), but there is no record about ASA version limitation.

AnyConnect version is anyconnect-win-3.1.04072-k9.pkg

[Marcin Latosiewicz]

Collect DART package and check whether the profile is/was used by anyconnect during the failure.

I'm not aware of restrictions either, but it's hard to map things 1-1 at a glance, all the time.

M.