AnyConnect version 2.4 second host entry gets host entry invalid, please re-enter

Hello

I have an ASA 5520, 8.21, anyconnect 2.4 running.  I have the profile on the SAA download with the customer.  I have a second ASA as a VPN server and backup, they are configured as identical as possible.

If I connect to the ASA first using the hostname "vpn1.companyx.com", everything works fine.     When I go to connect to the ASA second using the hostname "vpn2.companyx.com" on the anyconnect client, I receive the error "invalid host entry.  the xml profile test as fine, the host entries are both be resolved in dns and the system vpn2 repsonds fine using the IP address.  It seems to be a problem anyconnect...

thoughts?

-You use a url Group on an ASA and not the other?

-You have 'StandardUser' in your profile of xml. If you create a new profile with a new name that does not have this setting work?

-If you want to make it work with "StandardUser" in your xml profile, here is an example:

vpn.cisco.com
   vpn.cisco.com
   CSCVPNUsers

The ASA will initiate a connection to:

https://vpn.cisco.com/CSCVPNUsers

In order for the ASA to send back the proper information, that group URL would have to exist under your tunnel-group/connection profile
In the configuration:

tunnel-group CSCVPNUsers webvpn-attributes
group-url https://vpn.cisco.com/CSCVPNUsers enable

-heather

Tags: Cisco Security

Similar Questions

Maybe you are looking for