AnyConnect client versions compatibility (4.7.04056, 4.8.01090)

[fabio_federico]

Hi guys ! 

I need to VPN connect to two different Company's networks using my Mac. 

The two different Companies seem to use different versions of the Cisco AnyConnect mobile client (as by Title). 

Using one version I can not connect to the other Company (I receive a "Posture Assessment Failed: Failed to Launch the Hostscan CSD stub" error message).

I have each time (!) to uninstall and reinstall the correct version for that Company ... and I'm going crazy ! 

Thanks for any help ... 

[Spooster IT Services · Accepted solution]

Hello  fabio_federico,

The issue you are facing is not with compatibility. It seems you have pre-login policies defined on the ASA(s) who do the end client (your workstation) assessment to meet the company's security policies. Now the issue is that once you successfully connected to one company's VPN and disconnected and trying to connect other VPN, your Anyconnet VPN client version doesn't match that company's policies and your connection failing until you perform upgrade/downgrade the Anyconnect version. I would like to suggest you to ask for an upgrade of Anyconnect version on ASA from 4.7.04056 to 4.8.01090 so that both companies have the same versions if that possible.

Please rate if you find my answer is useful!!

[fabio_federico]

Thank you very much ! you've been very clear and exhaustive !

[Marvin Rhoads]

It's the hostscan component rather than AnyConnect per se. A newer AnyConnect can coexist with a VPN that uses an older AnyConnect release.

However there is a dependency between hostscan versions and AnyConnect. If they both use hostscan and one is on the older version it will not work if the connecting client has the newer version. There's no easy fix for this short of what you are doing unless the different companies both use compatible versions.

Those of us who have to do this sort of thing regularly sometime resort to using a VM for this purpose. That's not simple though and comes with problems of its own.

[fabio_federico]

Thank you Marvin ! it's quite clear now !