Cisco RA VPN Issue only on mobile devices

[justclash4]

Hi there,

We have a weird issue. We can connect to our RA VPN with cisco secure client on Windows, MacOS and Linux but can not connect to that on both Android and IOS devices.

I turned on debug level for VPN troubleshooting and checked debug logs.

When connecting to RA VPN with a laptop, FTD sends username and password to AAA servers after TLS handshake and everything works well. But when connecting to RA VPN with mobile device, debug logs are different. I attached the screenshots of both situations.

Environment: FMCv standalone 7.2.8 - FTDv standalone 7.2.8

Thank you for your assistance

[justclash4 · Accepted solution]

I installed Patch-9 on our ISE 3.1 and then issue has been resolved.

[Marvin Rhoads]

There are some internal debug logs on ISE that could be examined to ascertain why the latency (as shown in the details you provided) is unusually high but only for the Android and iOS devices.Cisco TAC can best assist with that but this presentation explains some of them:

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2024/pdf/BRKSEC-3412.pdf

I wonder - are those devices that you test on connecting to the same local network when they try to connect to your VPN?