Cisco AnyConnect VPN failed to get configuration because AnyConnect cannot confirm it is connected to your secure gateway

[lukal]

I am using Ubuntu server 16.04 LTS and I installed Cisco AnyConnect VPN according to this tutorial.

AnyConnect is working but when I try to connect I get following error:

Cisco AnyConnect Secure Mobility Client (version 4.6.02074) .

Copyright (c) 2004 - 2018 Cisco Systems, Inc.  All Rights Reserved.


  >> state: Disconnected
  >> state: Disconnected
  >> notice: Ready to connect.
  >> registered with local VPN subsystem.
VPN> connect XXX.XXX.XXX.XXX
connect XXX.XXX.XXX.XXX
  >> contacting host (XXX.XXX.XXX.XXX) for login information...
  >> notice: Contacting XXX.XXX.XXX.XXX.
AnyConnect cannot verify server: XXX.XXX.XXX.XXX
    - Certificate does not match the server name.
Connecting to this server may result in a severe security compromise!

Most users do not connect to untrusted servers unless the reason for the error condition is known.

Connect Anyway? [y/n]: y

  >> Please enter your username and password.

Username: XXX
Password:
  >> state: Connecting
  >> notice: Establishing VPN session...

gzip: stdin: unexpected end of file
The AnyConnect Downloader is analyzing this computer. Please wait...
Initializing the AnyConnect Downloader...
The AnyConnect Downloader is performing update checks...
  >> notice: The AnyConnect Downloader is performing update checks...
  >> notice: Checking for profile updates...
Failed to get configuration because AnyConnect cannot confirm it is connected to your secure gateway. Contact your system administrator.
  >> notice: Connection attempt has failed.
  >> error: AnyConnect was not able to establish a connection to the specified secure gateway. Please try connecting again.
  >> state: Disconnected

 Can somebody give me some hint how to solve this problem?

[Marius Gunnerud]

It looks like you are using the ASA self signed certificate when you are connecting to the AnyConnect.  two ways around this

1. buy a 3rd party certificate and install it on the ASA and use it for AnyConnect

2. install the ASA self signed certificate on your PC.