Anyconnect error message

[Jay Cambell]

I have a customer getting this error message when connecting to anyconnect 4. Error message 'vpn established capability from a remote desktop is disabled.  A vpn connection will not be established.  

[Dinesh Moudgil]

Hi Jay,

Please configure the anyconnect profile (.xml file) to be configured for "AllowRemoteUsers" as shown in the attached snippet.
This will allow the VPN sessions to be originated from remote machines as well.

For future reference:-
http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/anyconnectadmin30/ac13vpnxmlref.html#40060

This change would have to be done on the ASA since whenever you try to connect again with the modified policy, it gets updated by the policy pushed from the ASA and the changes are reverted.

Please have your ASA configured for the mentioned setting so that it can be pushed from the firewall to all the clients.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.