Cisco Anyconnect Compatible IKEv2 Options

[KGrev]

Hi,

Just curious if anyone know the upper and lower limits of Cisco Anyconnect? We are using version 4.6.04056 here.

Looking for D-H Groups, encryption, and hash settings.

I'm noticing on our system I'm unable to click on some options and my connection be succesful.

Sorry if this information is already plainly out there, my google fu was failing me.

Thank you for any help.

[Rob Ingram]

@KGrev did you try using a newer version of AnyConnect?

Can also take a packet capture and see what ikev2 policies are being offered from the client.

capture CAP type isakmp ikev2 interface OUTSIDE
show capture CAP
copy /pcap capture: tftp:

Upload the pcap file (send a direct message to me if you wish).

Also provide the full configuration for review please.

[KGrev]

@Rob IngramThanks. It will take some process to get the newer version of anyconnect but ill get it started. Gotta go through many hands on our system. And I'll look into your second advise on Monday.

Thanks for your help.

[KGrev · Accepted solution]

@Rob Ingram 

My issue is now resolved. I needed to disable Anyconnect Essentials as explained in this forum.

https://community.cisco.com/t5/vpn/how-does-the-anyconnect-client-decide-its-proposals/m-p/4812203#M288678