Cisco Anyconnect Disconnecting



Open the Cisco AnyConnect application on your computer. Open Finder, then navigate to Applications Cisco Cisco AnyConnect Secure Mobility Client; Click the Cisco AnyConnect Secure Mobility Client to launch the application. Step 2 Type in vpnconnect.rochester.edu then click Connect. Step 3 Enter your NetID and password. Open the Cisco AnyConnect application on your computer. In the Start menu, click All Programs Cisco Cisco AnyConnect Secure Mobility Client; Click the Cisco AnyConnect Secure Mobility Client to launch the application. Step 2 Type in vpnconnect.rochester.edu then click Connect. The problem was that every time when I tried to connect via Cisco AnyConnect Client it kept looping through the connection and never made it connect. The fix is quite simple actually, go to Network Connections from Control Panel, right-click Cisco AnyConnect Security Mobility Client Connection, and choose Properties. When you're done using the VPN connection, disconnect it. Tap the Cisco AnyConnect app icon. Slide the AnyConnect VPN switch from On to Off. Troubleshooting and the Statistics and Details screens. The Cisco AnyConnect VPN client gathers information that can help you with troubleshooting speed or connectivity issues.

Cisco

I use Cisco AnyConnect on my Windows 7 computer to make VPN connections. It also has capability to connect to WiFi. But I always had problems in connecting toWiFi with AnyConnect. Connection drops frequently and it keeps saying ‘Acquiring IP address‘.

AnyConnect installs a service called ‘Network Access Manager‘ which seems like takes over the native Windows WiFi connecting client. So when I click on the network icon in the System tray it says ‘No connections are available'(See below snapshot). Without AnyConnect, it always displays the WiFi connections available.

If you are facing the problem then you can try the following solution that worked for me.

Cisco
  • Open Services management console by running Services.msc from Run
  • Find the service ‘Cisco AnyConnect Network Access Manager‘.
  • Right click and stop the service.
  • Now Cisco AnyConnect will say ‘NAM service unavailable
  • Now Windows will use the native WiFi client to connect to the WiFi
  • When you reboot your system, the NAM service will start and may cause problem again. You can disable this service in Services management console to prevent that.

AnyConnect has settings to disable the NAM feature. But that did not work for me. Even after disabling NAM service, I could not connect to WiFi. Windows network icon shows the WiFi connection but gives the error ‘Windows was not able to connect to…‘. I followed the below steps to do this.

Cisco anyconnect disconnecting often

Cisco Anyconnect Disconnecting Wifi

  • Opened Anyconnect window and click on Advanced.
  • Clicked on ‘Networks’ tab in the left side pane.
  • Clicked on Configuration tab. Changed the NAM to disabled as shown below.
TL;DR If Cisco AnyConnect is disconnecting, reconnecting every few minutes, try blocking UDP in/out ports for the vpnagent executable/service.
Cisco AnyConnect Secure Mobility Client version 4.7.04056
This one drove me nuts for the longest time until I found time to dedicate to troubleshooting it myself. Symptoms were that my AnyConnect client had been disconnecting, reconnecting every few minutes (2:50 to be exact!), which would, in turn, timeout my RDP session. Total reconnect time was only a few seconds, but you can imagine how having your concentration broken every three minutes is a productivity killer!
Cisco anyconnect vpn keeps reconnectingI had troubleshot this with my ISP, Comcast/Xfinity and my customer (whose site I was connecting to via VPN). Both essentially were pointing fingers at each other. It would be easy to blame the ISP because the problem didn't happen over my hotspot, but I can't help but think that the VPN server wasn't configured to properly handle such situations. Anyway, I decided to live with it (for far too long) until I could do some troubleshooting myself and figure out next steps.

Cisco Anyconnect Vpn Keeps Reconnecting


Cisco Anyconnect Vpn Client Download

My troubleshooting steps are below, in case anyone is interested.

Cisco Anyconnect Disconnect In Progress


Wireshark

Wireshark VPN test-2019-12-09-A.pcapng

Wireshark VPN test-2019-12-09-G-Comcast.pcapng

Wireshark VPN test-2019-12-09-F-Hotspot.pcapng

Wireshark VPN test-2019-12-09-E-Comcast-Reconnect at 129 sec.pcapng

Wireshark VPN test-2019-12-09-D-Hotspot.pcapng

Wireshark VPN test-2019-12-09-C-Comcast-Reconnect at 91 sec.pcapng

Wireshark VPN test-2019-12-09-B.pcapng

Noticed that most application traffic happens via DTLS (OpenSSL) over UDP, but every 20 seconds, there's a TLSv1.2 transmission from the client [PSH, ACK], but no response from the server.Client retransmits the [PSH, ACK] in intervals of 0.3, 0.6, 1.2, 2.4, 4.8, 9.6 seconds, and then sends a RST.

Google search

cisco vpn client tls every 20 seconds no ack

Article above references this, which was the most helpful

As long as DTLS is enabled, the client applies the DTLS MTU (in this case 1418) on the VPN adapter (which is enabled before the DTLS tunnel is established and is needed for routes/filters enforcement), to ensure optimum performance. If the DTLS tunnel cannot be established or it is dropped at some point, the client fails over to TLS and adjusts the MTU on the virtual adapter (VA) to the TLS MTU value (this requires a session level reconnect).

Block UDP (in & out) for VPN client in Windows Firewall

C:Program Files (x86)CiscoCisco AnyConnect Secure Mobility Clientvpnagent.exe