Connection attempt has timed out. Please verify Internet connectivity.

[nvnijo]

Hi,

Our clients facing issues with Cisco AnyConnect while connecting in the office getting the error "Connection attempt has timed out. Please verify Internet connectivity.". It is connecting fine outside networks (home, hotspot, etc)

What could be the issue..please help in this regard.

I have attached the tracert for the VPN URL.Tracert reaching the URL but cisco AnyConnect while connecting  in the office getting the error "Connection attempt has timed out

Anyone, please help on this 

Thanks,

Nijo

[nvnijo]

Any one please help me with a solution

[johnd2310]

Hi,

Check the routing on the ASA. Does it allow internal ip addresses to connect to the outside interface? The ASA might be receiving the packets on outside interface, but trying to route the packets back via the inside interface, because the routing on the ASA points to the inside interface for the internal network.

Thanks

John

[nvnijo]

Thanks, John for your quick reply

If I connected through any hotspot or any other networks except our office network I am able to connect the VPN through the Cisco AnyConnect.But if I connected to my office network it's giving the error "Connection attempt has timed out. Please verify Internet connectivity."

The thing is, if I  tracert the VPN URL from office network then the URL is reaching.I have already attached that screenshot earlier.Through Cisco AnyConnect we are not able to connect.

The VPN is not located in the same office its in remote place.So let me understand that Adaptive Security Appliance(ASA) available in a remote location right? then they need to check their routing? or from our office, we are using Cyberoam (CR 35 ing)device for the security appliance.Actually where we need to check the same?

Can you please guide me or elaborate clearly on your reply.

Thanks

Nijo 

[johnd2310]

Hi,

On the ASA vpn device do a "show route" for your internal network and for the hotspot network

e.g.

 show route 192.168.1.1

 show route "hot spot ip address"

 Is the routing for these networks correct for vpn to work.

Thanks

John

[nvnijo]

Hi John,

Thanks for your suggestions.We have fixed the issue by adding the new firewall rule.Actually the Problem is that the application filter in the  UTM device is blocking this URL.

Thanks to all for your support.Especially to John

Thanks

Nijo