Hello,
On macOS 26.1, I install Cisco Secure Client version 5.1.13.177, after I give Cisco Secure Client - Any Connect VPN Service permission for App Background Activity, the network extension try to load, I receive the system alert to allow the network extension, but the extension is not in the list, it appears for a small time period and disappear after a short time period. System windows asking to allow the network extension appear continuously.
When I run in Terminal the `systemextensionsctl list` command I see a lot of entries:
334 extension(s)
--- com.apple.system_extension.network_extension (Go to 'System Settings > General > Login Items & Extensions > Network Extensions' to modify these system extension(s))
enabled active teamID bundleID (version) name [state]
DE8Y96K9QP com.cisco.anyconnect.macos.acsockext (5.1.13.174/5.1.13.174) Cisco Secure Client - Socket Filter Extension [terminated waiting to uninstall on reboot]
DE8Y96K9QP com.cisco.anyconnect.macos.acsockext (5.1.13.174/5.1.13.174) Cisco Secure Client - Socket Filter Extension [terminated waiting to uninstall on reboot]
.................................
DE8Y96K9QP com.cisco.anyconnect.macos.acsockext (5.1.13.174/5.1.13.174) Cisco Secure Client - Socket Filter Extension [terminated waiting to uninstall on reboot]
DE8Y96K9QP com.cisco.anyconnect.macos.acsockext (5.1.13.174/5.1.13.174) Cisco Secure Client - Socket Filter Extension [activated waiting to upgrade]
DE8Y96K9QP com.cisco.anyconnect.macos.acsockext (5.1.13.174/5.1.13.174) Cisco Secure Client - Socket Filter Extension [terminated waiting to uninstall on reboot]
..................................
In system log I see error messages like:
2025-11-29 14:30:03.940464+0200 0x4a29 Error 0x0 1526 7 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] com.cisco.anyconnect.macos.acsockext: Unsatisfied entitlements: com.apple.security.application-groups
2025-11-29 14:30:03.940465+0200 0x4a29 Error 0x0 1526 7 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] Disallowing: com.cisco.anyconnect.macos.acsockext
2
2025-11-29 14:30:04.160034+0200 0x5dd5 Error 0x0 1926 0 com.cisco.anyconnect.macos.acsockext: (libsqlite3.dylib) [com.apple.libsqlite3:logging-persist] cannot open file at line 51040 of [f0ca7bba1c]
2025-11-29 14:30:04.160037+0200 0x5dd5 Error 0x0 1926 0 com.cisco.anyconnect.macos.acsockext: (libsqlite3.dylib) [com.apple.libsqlite3:logging-persist] os_unix.c:51040: (2) open(/private/var/db/DetachedSignatures) - No such file or directory
2025-11-29 14:30:04.167329+0200 0x47e6 Default 0x3ffd2 438 0 trustd: [com.apple.securityd:SecWarning] Entitlement com.apple.application-identifier=2W3YPMAMJW.com.cisco.anyconnect.macos.acsockext is ignored because of invalid application signature or incorrect provisioning profile
2025-11-29 14:30:04.167354+0200 0x47e6 Default 0x3ffd2 438 0 trustd: [com.apple.securityd:SecWarning] Entitlement com.apple.security.application-groups=(
"DE8Y96K9QP.group.com.cisco.anyconnect"
) is ignored because of invalid application signature or incorrect provisioning profile
2025-11-29 14:30:04.182495+0200 0x51d9 Error 0x0 1727 0 vpnagentd: (libacsock_api_common.dylib) [com.cisco.anyconnect.acsock:acsockapi] Function: CNwExtIOControl::sendMessage Thread: 0x16b7df000 Extension is not fully initialized. Status: extension=ACTIVE contentFilter=INACTIVE/reason:none appProxy=INACTIVE/reason:none dnsProxy=INACTIVE/reason:none
2025-11-29 14:30:06.448259+0200 0x521c Error 0x0 500 0 sysextd: [com.apple.sx:Staging] Removing tree at
path: /Library/SystemExtensions/DD55F82D-8AFF-4AF5-B298-929FA1824B26
failed with
error: “DD55F82D-8AFF-4AF5-B298-929FA1824B26” couldn’t be removed.
Resetting flags and trying again!
I've tried reinstalling multiple times without success, first on macOS 15.7.2 then on macOS 26.1. I've checked the signature of /Applications/Cisco/Cisco Secure Client - Socket Filter.app, and it didn't show any problem.
Event when I was able to grant the network extension permissions, the upgrade loop continue, and no filter was added in Network section.
I've attached a system log with logs between to upgrades. What can I do to solve this problem?
Thanks
