SSL VPN Client unable to modify IP forwarding table

[jpkuehner]

I installed 4.7 on a 3015 VPN concentrator and I am trying to configure the new SSL client. The old webvpn still works OK but I can't get the new client to work.

When I try to log into the concentrator it installs the client but I get an error on the client that states

"The SSL VPN Cliet was unable to modify the IP forwarding table. An SSL VPN connection will not be established."

On the concentrator I see an error for the WebVPN seesion.

"Unable to make all necessary routing table modifications"

Has anyone seen this yet? If so were you able to fix it?

[fbroussard]

I've seen this also and have not been able to come up with a solution yet.

[jpkuehner]

I finally got this to work. What I noticed is that if your ip address of the remote user is 10.1.1.1 and you are encrypting 10.0.0.0 0.255.255.255 the ssl vpn can't change the forwarding table on the client. As soon as the address is changed to say a 192.168.0.1 address it works fine.

I know the ipsec client doesn't have this issue. If SSL can get around this issue it could be a great replacement for the ipsec client.