Cisco Anyconnect Secure Mobility Client 4.4.03034 hangs after credentials are entered

[rwparsons]

Hello,

We are experiencing an issue with some of our Lenovo Windows 7 laptops where Cisco Anyconnect Secure Mobility Client 4.4.03034 hangs after the RSA credentials are entered.

It is primarily affecting Lenovo P50 laptops but is also affecting a few T430/T530 laptops.

The behaviour is as follows:

1. User double-clicks on the Cisco Anyconnect Secure Mobility Client shortcut to launch the application.

2. User selects one of 2 possible data centre locations to connect to and clicks Connect.

3. The credentials window pops up and they enter their RSA credentials and click Connect.

4.) The credentials window then disappears but no further progress messages appear. Eventually it returns to step 2.

There are no connection attempts in the RSA database log.

I have tried the following fixes:

Disabled IP V6 in the Cisco Anyconnect adapter and the Wireless network adapter.

Enabled automatic DNS and automatic IP address in the Cisco Anyconnect adapter and the Wireless network adapter.

Uninstalled Microsoft hotfixes KB4467106 and KB3172605.

Re-installed Cisco Anyconnect Secure Mobility Client 4.4.03034.

These fixes worked with a couple of laptops but not with all of them.

Does anyone have any ideas what might be causing this and how to resolve?

Thanks!

[Pablo]

Is hostscan/csd enabled under the webvpn config module?

[rwparsons]

Hello,

Both hostscan/csd are enabled in the Anyconnect client.

Hostscan looks like it's going to start the update check process but never completes it.

Thanks.

[Pablo]

Likely, that's the root cause of your issue.

Run a "debug dap trace 255" and a "debug dap errors" from the ASA CLI when the user with the issue tries to VPN in. Capture a DART bundle afterwards and search for hostscan/csd related errors.

You can post a sanitized copy of the errors/logs if they're are not clear enough.

HTH