Cisco AnyConnect does not function consistently

[ravikumarsri2001]

My company-issued laptop is running Cisco AnyConnect Secure Mobility Client version 4.10.07061. I have a fixed-line broadband internet connection at my home. Upon connecting to my client network through Cisco AnyConnect, it shows that I am "connected." Nevertheless, I am unable to access the client network. After a wait of about 15 to 20 minutes, I can then access the client network. There are instances when I can access the client network immediately after entering my credentials in Cisco AnyConnect. This problem has been ongoing for more than a year. It is noteworthy that I can browse any other websites without issue, even when I encounter problems with Cisco AnyConnect. When I report this situation to my company, they state that they cannot provide assistance as the issue seems to be occurring at my residence. Meanwhile, my internet provider claims that since I can access other websites, I should contact my company's infrastructure team. I find myself caught in the middle and unable to take further action.

Could you please provide assistance regarding this matter?

[ccieexpert]

please get a dart bundle

https://www.cisco.com/c/en/us/support/docs/security/secure-client/221919-collect-dart-bundle-for-secure-client.html

[Aref Alsouqi]

Is it SSL or IPsec VPN? I would agree with what your ISP said. If the issue was with your broadband line your would see it with any connection, not only the remote corporate resources over the VPN. Did you try to ping the remote resources rather than trying to access their applications? also, when you try to access the remote resources, do you try with their IP addresses or FQDNs?

[ravikumarsri2001]

I am not sure anout SSL or IPsec VPN. I supply client URL in the Cisco Anyconnect. Yes I tried to ping when I face issue with VPN and I did not get reply.  When I dont face issue, I get reply for the ping command. I have collected dart bundle. I am checking with my company infra team if there is a way to share the bundle thru them to Cisco team

[Aref Alsouqi]

Did you use the remote resources FQDNs with ping or you ping the IP addresses directly? From the sound of it it seems an issue on the remote corporate side. I would recommend running some Wireshark capture on your endpoint and see what it returns and also I would recommend asking the corporate firewall team to do the same on the firewall. It might be challenging as this issue doesn't seem to happen always though. Another thing come to mind is that maybe this issue is related to some routing issues in the corporate environment, maybe the traffic loops at somewhere due to some routing convergence or load balancing, worth checking this as well.