PIX Version 7 not pushing Group Policy to Cisco VPN Clients

[rweyand]

After upgrading a customer to PIX Version 7.0(1), the Cisco VPN Clients (Version 4.6.02.0011) can establish their tunnels ok, but their PPP Adapters no longer receive (group policy) attributes like DNS Server IPs, WIN Server IPs, Default Domain Name, etc. The client logs say, eg:

6 11:21:02.875 06/26/05 Sev=Info/4 CM/0x63100034

The Virtual Adapter was enabled:

IP=192.168.1.6/255.255.255.0

DNS=0.0.0.0,0.0.0.0

WINS=0.0.0.0,0.0.0.0

Domain=

Split DNS Names=

Thus the users cannot work normally unless these attributes are added manually. Has anyone else encountered this?

[umedryk]

Was the split tunneling configured before ?

[acmi]

I am having the same issue with DNS and Wins not being assigned to the remote vpn client session. I have also recently upgraded our PIX to version 7.0. My tunnel-group and group-policy groups have the correct dns and wins entries but will still not be assigned. I also don't have split tunnelling configured aswell.

[rweyand]

Good news, yesterday I found out that the problem is a bug, one of many in PIX Version 7.0(1). In this case CSCeh29328, which is resolved by an interim release. See "PIX 7.x Interim Releases" link on the Cisco PIX Security Appliance Software page.

[rweyand]

In this case we are not using split-tunneling.

Good news, yesterday I found out that my problem is a bug, one of many in PIX Version 7.0(1). In this case CSCeh29328, which is resolved by an interim release.