Solved: Anyconnect service port not enabled

khim_nino.moro · ‎10-20-2016

Hello All,

When trying to connect the anyconnect vpn to the gateway,im receiving this error on the client gui "Cannot update Anyconnect Vpn profile because the client service port is not enabled on the secure gateway.A Vpn connection cannot be established"

Anyone who encountered this issue and has resolved it?

Marvin Rhoads · ‎10-20-2016

It would happen if the administrator for an IKE v2 remote access VPN disabled the client services port (tcp/443 by default) yet had an update profile (profile.xml by default that would normally download using a tcp connection via that port.

crypto ikev2 enable outside client-services port 443

..would be the normal setting. If the last part of that is removed, it would cause the error you cited.

It would need to be checked and resolved by the ASA admin.

View solution in original post

Marvin Rhoads · ‎10-20-2016

It would happen if the administrator for an IKE v2 remote access VPN disabled the client services port (tcp/443 by default) yet had an update profile (profile.xml by default that would normally download using a tcp connection via that port.

crypto ikev2 enable outside client-services port 443

..would be the normal setting. If the last part of that is removed, it would cause the error you cited.

It would need to be checked and resolved by the ASA admin.

khim_nino.moro · ‎10-23-2016

Hello Marvin,

Thank you very much for sharing your thoughts on this issue. It did resolve the issue.