Anyconnect VPN issue for citrix users

[sambillings459]

Hello Experts,

I need your help guys.. I have some third parties trying to access few Citrix services inside our internal network.

To access these servcies, first the third parties would have to use Cisco Anyconnect VPN, when they are connected to VPN successfully then they do RDP to the citrix servers or SAP servers. as soon as they try to connect these servers their connection drops and they would have to connect to VPN again and again.

And this happens atleast 15 to 20 times a day..sometimes it works and sometimes it doesn't

I suspect this couldn't be a Firewall issue. because they can successfully connect to VPN, but when they try to access the server their connection drops.

And my management wants us to do some troubleshooting for this.

I really dont understand what role we would have to play in this, as the VPN connection seems to be ok.

I would really appreciate if you guys could help me with some troubleshooting things like what needs to be done or to make sure that this couldn't be a firewall issue.

Thanks

Sam

[Aditya Ganjoo]

Hi Sam,

Without proper set of syslogs it would be difficult to comment what is leading to this disconnections.

You can share the syslogs on the firewall when this issue happens.

Also, can you enable this command on the ASA and see if it helps to resolve the issue:

sysopt connection preserve-vpn-flows

Regards,

Aditya

Please rate helpful and mark correct answers

[Mohammad Alhyari]

Please reduce the mTU under the group policy to 1300. Or change the tcp mss on the ASA to 1300.

Moh,