Anyconnect & FIPS

[jeff6strings]

We are testing using Anyconnect for our VPN needs and I have a question or concern regarding FIPS. Our test ASA is a 5510 with 8.2 and we are using the Anyconnect client version 3.1 and testing on Windows 7 Pro (32 bit). The VPN works fine but we noticed when the Anyconnect client is installed FIPS is enabled in the local security policy and when manually disabled the VPN won't connect. FIPS does cause a couple local applications to not function properly so is there a way of not using FIPS with the Anyconnect client?

Thanks for any help.

Jeff

[npokhriy · Accepted solution]

We can disable FIPS on client machine from following location.

On Windows 7 machine, you need to go to following location:-

C:\ProgramData\Cisco\Cisco AnyConnect VPN Client

and open a file named "AnyConnectLocalPolicy.xml"

You need to make following change:-

<FipsMode>false>

Please let me know if it helps.

[jeff6strings]

Naresh,

That worked. On my computer the path is "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client"

Thank you.

Jeff

[john.minorini1]

I know this is an old post but this was the exact answer I needed. Setting

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\fipsalgorithmpolicy

to 0 would reset back to 1 after every restart. changing the fipsmode in 

C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client

fix the issue. thank you !