05-12-2014 08:10 AM
Hi gurus
Everytime I start annyconnect it goes through all the steps but hangs on
" hostscan is waiting for next scan" and do nothing
Thanks a bunch gurus
05-15-2014 06:20 PM
Having this problem too recently with one of company machines. It gets stuck on the hostscan phase and just keeps looping with that same error " hostscan is waiting for next scan". If I disable the hostscan on the ASA for that specific VPN profile it works fine. We have hundreds of other machines that work fine, so this is limited issue being experienced on one machine so far.
Would appreciate it if anyone has found a solution for this. AnyConnect Version 3.1.04072, hostscan version 3.104072, Windows 7
Thanks
11-14-2014 06:25 AM
Hello,
I had this problem too. It happens when there is to much information being sent back to the ASA regarding this host (hotfixes, certificates, ect) and it goes past (I believe) 200KB in data. This is similar to behavior in CSCui27773 or CSCue68555.
(config)#service internal
(config)# webvpn
(config)# hostscan data-limit 300
I had bumped up my data-limit 100KB and everything seems to be working just fine, for now.
Kyle
05-30-2014 06:25 AM
Having the same issue here. It just suddenly happen on a few of our machines. Cisco AnyConnect 3.1.05152..
04-08-2015 11:17 AM
I came across this on a machine which turned out to have a massive quantity of certificates in certmgr.msc / Personal generated by Fiddler. This produced the following in the ASA syslog:
Apr 8 13:10:57 asa %ASA-3-716600: Rejected 781KB Hostscan data from IP <xx.yyy.zzz.aa>. Hostscan results exceed default limit of 200KB
Cleaning out the Personal store resolved the issue (as well as revoking the root cert) and we'll be watching for any reappearance.
I would rather not up the limit the ASA accepts since this revealed an undesirable condition.
07-31-2015 11:06 AM
Hello Mark,
Your solution worked just as you explained.
Thank you for sharing your results with all of us.
07-31-2015 11:21 AM
Thanks for letting me know :)
10-21-2015 08:41 AM
Thank god you posted this. I thought I was done for.
10-21-2015 09:35 AM
That's great to hear - we've all had those moments!
02-22-2016 06:36 AM
Thanks for your solution. Deleting all the Fiddler certs worked for me.
03-30-2017 09:25 AM
Tried this but didn't work out. Eventually worked after completely uninstalling CA softwares on Win7.
07-21-2017 04:40 PM
Thank you, thank you thank you thank you tha........
This is such an obscure reason for failure, I would have -never- figured it out! The *real* problem here is that the fact that the hostscan is failing isn't being shown to the user. It just keeps trying, then waiting for the next scan. Horrible design and user experience - they should fix :<
Programs shouldn't fail, but when they do, they should never do so silently!
04-26-2018 05:57 AM
Mark - you solved my problem too! Great work!
01-15-2020 10:48 PM
05-21-2020 10:16 AM
I can confirm bunch of certificates generated by Fiddler as cause of this problem for me too.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide