VPN AnyConnect issues

[AdamBudzinski]

Hello,

We have the following problem. We are using a encryption product (software installed on endpoints, mostly Windows clients) that have to connect to the Management Server to download a security policy (this is happening via TLS). As soon users connect remotely using AnyConnect the updates fail but we are able to ping the server Encryption management server .... 

My question is. After the end user establishes a VPN tunnel with ASA will it pass the client request while downloading policy or will the VPN somehow modify it ? 

Thanks 

Adam 

[Greg Smalley]

Possibly an MTU issue where the ASA is dropping fragmented large packets.  You can try "anyconnect ssl df-bit-ignore" under your "webvpn" profile to allow the fragmented packets through the ASA.  If that works, you may want to adjust your MTU settings under your webvpn profile to something lower than 1300.