11-08-2023 04:36 AM - edited 11-08-2023 08:38 AM
Hello,
Got a really confusing and odd issue with the AnyConnect from one users home location. Up until yesterday all was working ok but now the AnyConnect prompts for the credentials but can't connect. All other locations and users connect to the AnyConnect just fine. I can connect as that user from several tested locations and that user can connect from their laptop if they tether via their iPhone. We have also tested a spare laptop, at this affected location, and that behaves in the same way - it can't connect. I thought this was simply an ISP/router issue, at the home location affected, BUT we can connect to other AnyConnect VPN's from this laptop and location (and these also run on the same ASA5506 hardware and firmware). We have tried swapping the ASA for another identical unit but that behaves in exactly the same way.
I'm really lost as to what might be the cause. Only info I've been able to find in the logs is below:
|302021|homeIPaddress|0|asaIPaddress|0|Teardown ICMP connection for faddr homeIPaddress/0 gaddr asaIPaddress/0 laddr asaIPaddress/0 type 11 code 1
|302020|homeIPaddress|0|asaIPaddress|0|Built inbound ICMP connection for faddr homeIPaddress/0 gaddr asaIPaddress/0 laddr asaIPaddress/0 type 11 code 1
If anyone has any ideas it would be greatly appreciated.
Thanks.
11-08-2023 04:39 AM
@davedutch hi, can you share the firewall side logs related to anyconnect? and user PC's event logs
03-03-2025 01:17 PM
It a known issue with location services in Microsoft, try toggling and see if that helps.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide