Cisco Anyconnect Issues

[PIKEYMIKEY]

Issue 1

Some users have issues with the Anyconnect Client connecting and reconnecting many times before it is able to establish a solid connection. We have modified the MTU settings in the Anyconnect Client profile on the firewall but this has not worked.

Output from log

08:02:56 Ready to connect.
08:02:56 Contacting Sovereign VPN.
08:03:01 Establishing VPN session...
08:03:02 The AnyConnect Downloader is performing update checks...
08:03:02 Checking for profile updates...
08:03:02 Checking for product updates...
08:03:02 Checking for customization updates...
08:03:02 Performing any required updates...
08:03:02 The AnyConnect Downloader updates have been completed.
08:03:02 Establishing VPN session...
08:03:02 Establishing VPN - Initiating connection...
08:03:02 Establishing VPN - Examining system...
08:03:02 Establishing VPN - Activating VPN adapter...
08:03:06 Establishing VPN - Configuring system...
08:03:07 Establishing VPN...
08:03:07 Connected to Sovereign VPN.
08:04:10 Reconnecting to Sovereign VPN...
08:04:10 Establishing VPN - Examining system...
08:04:17 Establishing VPN - Activating VPN adapter...
08:04:21 Establishing VPN - Configuring system...
08:04:22 Establishing VPN...
08:04:22 Connected to Sovereign VPN.
08:04:22 Reconnecting to Sovereign VPN...
08:04:22 Establishing VPN - Examining system...
08:04:22 Establishing VPN - Activating VPN adapter...
08:04:22 Establishing VPN - Configuring system...
08:04:23 Establishing VPN...
08:04:23 Connected to Sovereign VPN.

After around 3-4 attempts it connects...

Issue 2

We have some power users who RDP from a PC to a Laptop. The laptop runs Anyconnect.

When the Anyconnect client is establish from the laptop before RDPing it remains up after the RDP session is made from the PC to the Laptop. However, if the user connect to the Laptop from the desktop and then tries to bring up the VPN it refuses to connect.

Any ideas for both of these issues, thanks!

[erwindebrouwer]

Hi PIKEYMIKEY,

So, about Issue 1: we should check your DTLS settings for webvpn/anyconect. What's your config and are you able to reach the VPN-gateway (ASA/FTD?) using UDP/443 (for DTLS)?

About Issue 2: I don't understand exactly what you mean... I can imagine some issues with the NIC you would connect to with the PC and the one AnyConnect is using..

[PIKEYMIKEY]

Hi, thanks for your reply.

Issue 2.

Say I have Anyconnect running on a laptop, I then RDP to that laptop from my PC it works OK. VPN is up.

Say I RDP to my laptop and then try to initiate the Anyconnect client. The VPN will not come up and I get the error.

[stsargen]

You may be preventing VPN from and RDP connection in your profile.  Check the setting for "Windows VPN Establishment" in the AnyConnect profile you are using.