anyconnect secure mobility client support for server name indication

[ippolito]

Hi,

I'm trying to configure an ASA running 9.5.2.2 to use SNI (server name indication), so that I can have multiple certs on it.

It works if I connect to the device in the browser, but I get a certificate mismatch error with the Cisco AnyConnect Secure Mobility Client v4.2.01022.

I see this link indicating that SNI was submitted as an enhancement request prior to Anyconnect Client v3.1, but I'm wondering if it was ever implemented.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCue35947/?referring_site=bugquickviewclick

Thanks in advance,

Mike

[Karsten Iwen]

When looking at a wireshark dump of an AnyConnect 4.2.03013 under MacOS and 4.2.01022 under Win 8.1 connection attempt, there is no SNI-extention visible. Doesn't seem to be implemented yet.

[ippolito]

Thanks for confirming. Is there a Cisco rep listening in that can tell me if it's on the radar for a future release?

Thanks,

Mike