Anyconnect issue

[Loc120287]

Hi,

I have an issue with Anyconnect.

When I try from my laptop from my home network to testsitevpn below, it works.  It meants my account and the testsitevpn are working well.

However, I try to test it from a window VM from my client's network, I got the issue below. 

I manage both testsitevpn's network and my client's network.

What do you think where is the issue, testsitevpn's firewall or client's firewall or the window VM ?

Thanks

Loc

[Mark Elsen]

          - FYI :  https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs72872

   M.

[Jonatan Jonasson]

By default, AnyConnect doesn't allow connections from a machine that you're logged into via Remote Desktop (RDP).

Unfortunately, this is expected behaviour IF the VPN headend isn't providing a VPN (XML) profile for the connection.
Having a VPN profile is valuable for a number of reasons and ease of use, and including to allow VPN from RDP connected machines.

If you don't have a profile, and if you're not in a position to have one deployed, the other workaround is to log in to the machine using console via vsphere/vcenter or similar, whatever the virtual environment is, before starting the VPN connection.
As mentioned in the bug ID that M. referenced.

Keep in mind though, when using HyperV, that using console with "enhanced session" is essentially a RDP session.

If you manage the headend, or you can influence the setup on the headend, there are some guides how to configure profiles.
With that in mind, here's a Cisco document based on the error message you had, describing how the profile config should be when configured from the headend:
https://www.cisco.com/c/en/us/support/docs/security/secure-access/221175-troubleshoot-secure-access-error-vpn-es.html

In the XML profile you would see the following value:
<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>