cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1813
Views
0
Helpful
1
Replies

Anyconnect Client Profile Invalid Content

sprocket10
Level 2
Level 2

I am having issues editing a xml profile. From ADSM i am getting the error 'Input in not a well-formed.....'

If I export and validate I get the error 'The profile file has invalid content'.

 

This is the profile for our main VPN connection for users. It was editing a few weeks ago and clients can still connect.

I wish to make a change to the profile, so i thought I would export, fix the issue and import.

 

Please would someone identify the issue in the file settings.

 

<?xml version="1.0" encoding="UTF-8"?>

-<AnyConnectProfile xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.xmlsoap.org/encoding/">


-<ClientInitialization>

<UseStartBeforeLogon UserControllable="false">false</UseStartBeforeLogon>

<AutomaticCertSelection UserControllable="false">true</AutomaticCertSelection>

<ShowPreConnectMessage>false</ShowPreConnectMessage>

<CertificateStore>All</CertificateStore>

<CertificateStoreMac>All</CertificateStoreMac>

<CertificateStoreOverride>false</CertificateStoreOverride>

<ProxySettings>IgnoreProxy</ProxySettings>

<AllowLocalProxyConnections>true</AllowLocalProxyConnections>

<AuthenticationTimeout>12</AuthenticationTimeout>

<AutoConnectOnStart UserControllable="false">false</AutoConnectOnStart>

<MinimizeOnConnect UserControllable="false">true</MinimizeOnConnect>

<LocalLanAccess UserControllable="false">true</LocalLanAccess>

<DisableCaptivePortalDetection UserControllable="true">false</DisableCaptivePortalDetection>

<ClearSmartcardPin UserControllable="false">true</ClearSmartcardPin>

<IPProtocolSupport>IPv4,IPv6</IPProtocolSupport>


-<AutoReconnect UserControllable="false">
true
<AutoReconnectBehavior UserControllable="false">DisconnectOnSuspend</AutoReconnectBehavior>

</AutoReconnect>

<SuspendOnConnectedStandby>false</SuspendOnConnectedStandby>

<AutoUpdate UserControllable="false">false</AutoUpdate>

<RSASecurIDIntegration UserControllable="false">Automatic</RSASecurIDIntegration>

<WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>

<LinuxLogonEnforcement>SingleLocalLogon</LinuxLogonEnforcement>

<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>

<LinuxVPNEstablishment>LocalUsersOnly</LinuxVPNEstablishment>


-<AutomaticVPNPolicy>
true
<TrustedDNSDomains>REMOVED</TrustedDNSDomains>

<TrustedDNSServers>REMOVED</TrustedDNSServers>

<TrustedNetworkPolicy>Disconnect</TrustedNetworkPolicy>

<UntrustedNetworkPolicy>Connect</UntrustedNetworkPolicy>

<AlwaysOn>false </AlwaysOn>

</AutomaticVPNPolicy>


-<PPPExclusion UserControllable="false">
Disable
<PPPExclusionServerIP UserControllable="false"/>

</PPPExclusion>

<EnableScripting UserControllable="false">false</EnableScripting>


-<EnableAutomaticServerSelection UserControllable="false">
false
<AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>

<AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>

</EnableAutomaticServerSelection>

<RetainVpnOnLogoff>false </RetainVpnOnLogoff>

<CaptivePortalRemediationBrowserFailover>false</CaptivePortalRemediationBrowserFailover>

<AllowManualHostInput>true</AllowManualHostInput>

</ClientInitialization>


-<ServerList>


-<HostEntry>

<HostName>REMOVED</HostName>

<HostAddress>REMOVED</HostAddress>

</HostEntry>

</ServerList>

</AnyConnectProfile>

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

Some of your sections have a "-" prepended incorrectly. Remove all of them and it should work.

Hint - run any XML through xmlgrid.net for syntax validation. Also I suggest using the offline AnyConnect profile editor rather than editing using text editing tools.

View solution in original post

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

Some of your sections have a "-" prepended incorrectly. Remove all of them and it should work.

Hint - run any XML through xmlgrid.net for syntax validation. Also I suggest using the offline AnyConnect profile editor rather than editing using text editing tools.