AnyConnect on ASA: DTLS Sessions established despite it being disabled in Group-Policy

[Max-Morten Conrad]

Hi guys,

a strange issue I am observing right now on an ASA5515-X with ASA-OS 9.8(4)29:

- DTLS is disabled in group-policy via 'group-policy POLICYNAME attributes; webvpn; anyconnect ssl dtls none'

- despite this some users (that have said group-policy applied via LDAP map) show up in 'show vpn-sessiondb' as having DTLS tunnels established with TX/RX values going up

Can DTLS be disabled in other ways?

Thanks in advance and best regards

[Rob Ingram]

Hi @Max-Morten Conrad 

You can disable DTLS globally:-

webvpn svc dtls none

 Why do you need to disable DTLS? You get better performance with DTLS than TLS.