Cisco ASA - FPR-2130 - Anyconnect Timeouts with VPN

[Amen]

Users connecting with SSL-VPN (Anyconnect Client) receive a “Connection timeout” message when connecting. It will take a few retries until the window where you can enter the credentials pops up.

While users experience this problem, ASA responds very slowly and stops monitoring itself. Traffic still flows through and we haven’t heard anyone complaining about performance when they are finally connected.

Rebooted the cluster but didnt help.

[Aref Alsouqi]

This could be an indication of some asymmetric routing that is affecting the traffic destined to the firewall. I think it could also be an indication of L3 loop at somewhere. I would suggest to try to issue "traceroute" command at the time this issue happens and see if a loop or asymmetric routing is detected.

[MHM Cisco World]

can you more elaborate
can you clear are you use FW HA for anyconnect?

Thanks A Lot
MHM