Client AnyConnect and connections without client hang for two users

ASA 5525, v.19 9.1 (5)

AnyConnect client 3.1.02026

I have two users who are unable to connect through the AC client or no client via the web portal. The use of the client, it will get stuck in a loop of "check updates". On the portal, the connection will proceed to point "Cisco Secure Desktop validated successfully... Success... Reloading... Please wait. "Then it crashes here.

This problem occurs for the user, no matter which company laptop it connects to. A help desk technician can use his laptop computer and connect properly, but she could not connect on his own laptop computer or on another laptop. (Same for the other user.) So the question does not appear to be linked to his laptop or the installation of the CA. (Helpdesk reimage her machine early in the process of solving problems before they realized that the question seems to follow the user.)

I've updated the hostscan - no change in the results file.  Client and clientless connections seem to work for all users. We are puzzled.  Suggestions, anyone?  Thank you!

The LDAP protocol must be people - Active Directory server.  Chances are the one who manages the SAA should have access at least to look at Active Directory to look that up.  If they are not they need.

Of course, I don't know a lot about what you use the devices, but if you use ISE, there should be a type of device MNT (monitoring and troubleshooting) - collecting newspapers and, hopefully, they are sent to a certain type of overall collection of syslog (splunk?) tool.

Otherwise, there should be a device called a CAM (Clean Access Manager) who collects newspapers - which can also be spread to a global tool for syslog - but with cam, you can pull reports from the output in a file delimited by commas (.csv) and pass through them that way.

-The thing that annoys me, is he gets to two users any computer, they try to connect to any network to which they connect, and other users can authenticate and access network on these same devices.

-That is why it is rather confused.  Pretty much saying, there must be something with:

-the pool of intellectual property that they get an IP of

-their powers AD

-user name

-something in this sense, if the information provided is accurate.

Tags: Cisco Security

Similar Questions

  • OIM11g R2 - if two roles (ACF2 and AD) are selected together for a user req

    Hello

    We are facing a problem in the catalog, if two roles (ACF2 and AD) are selected together for a user and check. The request goes to the approval process. We have not created any approval process workflow.

    Please let me know how to deliver and provide an option to configure two roles at the same time to a user without going into the approval process.

    Steps to reproduce:
    1. create a user in the IOM.
    2. search for this user. Administration-> users-> user to MSN Search
    3. click the "Rôles" tab and select "Request for role" on this tab.
    4. "catalog" tab opens. Click on the search icon and add AD and ACF2 role to the basket.
    5. click on "Check out".
    6. click on the "submit" button
    7 ask tab summary opens with the situation as "Getting Request Approval" and the Type of request as 'assign roles.
    Note: If we assign AD and ACF2 individually to the user and race evaluate user strategies, we are able to see configured state tab account user accounts and demand does not go to the approval process

    Thanks in advance

    Section 2.3

    http://docs.Oracle.com/CD/E27559_01/admin.1112/e27149/appr_policies.htm#CHDFEFCB

  • Two users on the same PC. How to run the application even for two users at the same time?

    Hello friends,

    I have two user accounts on my pc. Is it possible to run the same application (for example: DEFRAG or disc cleanup utlities) for two users at the same time? I mean, these utlilities work by all of the computer or user account? That would mean the same application to perform for a single user in the background and foreground to the user, or I'm totally lost in space?

    Thank you for your comments

    You should run Disk Cleanup in each user account. Do not try to shut it down or change user when defragmentation; system files may be damaged. You must stop the defragmentation, log off, restart the defragmentation and don't really no point for it. MS - MVP - Elephant Boy computers - don't panic!

  • I bought a CS5 photoshop (for two users). If I add a user more, what can I do?

    I bought a photoshop CS5, and indicated for two users only. If I want to add a user, so what can I do?

    Buy another license.

    You can activate the two copies of the software and they are supposed to be for the same person and not used simultaneously.

  • HOWTO enable Adobe pdf-plugin and add packs of langugate for all users

    I have firefox installations on many terminalservers and my users are tapped daily with a prompt to enable Adobe PDF plugin view PDF files in the browser.

    We use a Group Policy object to substitute different parameters on the homepage by default and disabled the built-in PDF reader.

    How can I activate the plug-ins for all users?
    How to install the langugate packs and a dictionary for all users for Norwegian?

    Unfortunately, you can install is no longer extensions including Linguistics by the record of distribution/bundles in the Firefox program folder.

    • Bug 1144127 - Remove support for distribution/bundles (39 +)

    For language packs, see:

    A file to mozilla.cfg in the Firefox program folder can be used to lock the prefs or specify new values (default).

    A file local - settings.js must be placed in the folder "by default/pref" also the file prefs.js - channel where to specify using mozilla.cfg.

    pref("general.config.filename", "mozilla.cfg");
    pref("general.config.obscure_value", 0);
    

    These functions can be used in the mozilla.cfg file:

    defaultPref();	// set new default value
    pref();		// set pref, allow changes in current session
    lockPref();	// lock pref, disallow changes
    

    See the Configuration:

    See also:

    You can try this in the mozilla.cfg file:

    //
    pref("plugin.state.nppdf", 2);
  • Find my phone turned off and still can not activate for new user

    Hello

    I bought a 6 s 64 GB Iphone to a friend yesterday and immediately restored to use for my part, but now it asks me to enter the my friend apple ID to activate, even tought "find my phone" was not enabled on this device. The thing is that my friend can't access his account from apple, since he is unable to access his e-mail account so that he can not give me the papers.

    I'll double check the IMEI on this site https://www.icloud.com/activationlock/ and it tell me that activation lock is off and the unit is ready to be used by a new user.

    Can you help me with this? I can give you the IMEI of the device

    Did you reset all data and settings? (Reset) And could you give me more information about the popup? It asks for your Apple ID friends inside to find my iPhone, or is it a notification system?

  • is there a way to tell firefox allow and remember the java plugin for all users via the command line or a script?

    Hello

    I have about 200 computers I want to push the next to parameter

    allow and remember the java plugin for firefox for all users
    

    is it possible to do this via a script or configuration file?

    You must create two files in the Firefox program folder.

    • local - settings.js file in the defaults\pref folder where you will find the channel - prefs.js
    • mozilla.cfg in the main folder of the Firefox program
  • Update Adobe Acrobat DC is hung up to 35% and has been like this for two days.  How can I update?

    That's what happened for two days... He is suspended and update end... How can I get to download?

    Screen Shot 2015-04-08 at 6.43.47 AM.png

    Hello

    Please see the thread below where this issue was discussed:

    DC Adobe Acrobat installation stuck

    You can also check the help below document:

    FREQUENTLY ASKED QUESTIONS | Adobe Acrobat DC

    Kind regards

    Sheena

  • Can I use symbolic links to share the file abook.mab for two users

    If I delete all the user profile .mab files and replace it with a symbolic link pointing to the same file in the other profile will be what sync my address for two profiles books. I have win7.
    The object is to have two user accounts Windows sharing the same e-mail data. I already have them show up on the same basis of messages.
    I would like to know if deleting a .mab file will only cause it be re-created.
    I hesitate to experiment.
    Thank you

    Remove files two default mab, abook.mab (PAB) or history.mab (collected addresses) will result in empty files with these names are automatically re-created on reboot of TB.

    There are a few ideas for sharing here address books:

    http://KB.mozillazine.org/Sharing_address_books

  • AnyConnect and connections to the secure gateway are not allowed

    Hello

    I'm trying to understand a problem I'm having with AnyConnect 2.5.  After I connect to the SSL VPN portal and download and install the client I get this message.  Once the customer installs I have also no network connectivity at all.  Once I have uninstall the client that I can't access Internet connectivity and network is restored.  Its obviously a config issue, but I can not understand where I am going wrong.  I am also unable to change the link to the field like its locked down.

    This happens because you, in your profile config file, set it to always on the VPN connectivity.  2.5 AC and ASA 8.3 introduced the ability to apply always on connectivity to provide more control and security on endpoints.  This can be corrected by editing your profile or an exception through DAP or ASA GP.  I posted a link to the doc below. Please see the sections under detection network reliable and always on the VPN.

    http://www.Cisco.com/en/us/docs/security/vpn_client/AnyConnect/anyconnect25/Administration/Guide/ac03features.html

    I hope this helps.  Let me know if you have any other questions.

    Thank you

    Christopher

  • iPad App AnyConnect and Webproxy without Split Tunneling

    Hello

    Is it possible to use a web proxy server to make iPad VPN SSL connections to use an internal navigation proxy server when connected.  Split tunneling is not allowed, but I want to allow users to be able to browse the internet through our internal proxy.

    Is there a solution for this?

    Thank you

    You can look in the Internet EXPLORER on the SAA proxy feature which will allow you to set values of dynamic proxy for AnyConnect connection customers.  This feature was originally designed for IE but has been tested to work with the iPhone and iPod Touch 4.1.

    http://www.Cisco.com/en/us/customer/docs/security/ASA/asa82/configuration/guide/vpngrp.html#wp1178024

    Todd

  • Unable to access client ARD for specific users

    I have ARD Admin 3.8 and manage more than 100 computers at my company.

    Methods standard in my company, the setting System Preferences > sharing > Remote managementt > allow access to: is set to "only these users: ' field is empty.

    I tried to add an account in the Terminal. I SSH into a machine and run various commands, but they do not work:

    Here are the commands I tried:

    sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart - activate - configure - access - on - users [username] - privs - all - restart - agent-menu

    sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart - set - users [username] - access - on - privs-all

    sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart - activate - configure - users [username] - access - suite - restart - agent - privs-all - allowAccessFor - specifiedUsers

    None of them worked, I still can't authenticate on this machine with my admin of ARD.

    Am I missing something? Is there anything else I can try?

    Thank you.

    Nevermind, I figured it.

    For some reason, the first name and the account name were different and I was using the full name in the command. Once I used the name of the account, it worked.

  • Got the new iphone 4S and connected to my computer for synchronization and a message says that I need to download the latest version of itunes (10), but whenever I try to do an error message appears

    Error message: "there is a problem with this Windows Installer package. A program run as part of the Setup did not finish as expected. Contact your provider to support personal or package. " !! It's me and I have no idea what to do. Please can someone help. Thank you.
    I'm on Windows XP.

    Hi GemmaCrabtree,

    Follow these methods.

    Method 1: Follow the steps in the article.

    http://support.Apple.com/kb/TS1421

    http://support.Apple.com/kb/HT1925

    Method 2: Perform a clean boot to see if there is a conflict of software like the clean boot helps eliminate software conflicts.

    How to configure Windows XP to start in a "clean boot" State

    http://support.Microsoft.com/kb/310353

    Note: After the boot minimum troubleshooting steps, follow section How to configure Windows to use a Normal startup state of the link to return the computer to a Normal startupmode.

    After the clean boot used to resolve the problem, you can follow these steps to configure Windows XP to start normally.

    (a) click Start and then click Run.

    (b) type msconfig and click OK.

    (c) the System Configuration Utility dialog box appears.

    (d) click the general tab, click Normal Startup - load all services and device drivers and then click OK.

    (e) when you are prompted, click on restart to restart the computer.

    If the problem persists, contact Apple support for more help and information.

    http://support.Apple.com/kb/HE57

  • KB2770816 fails and "Configuration Windows Updates" hangs for 30 minutes at the stop/restart to 15%

    Hi Chris,

    It would be great if you remember to do it when you return, there is no problem for me to wait before the end of the month.

    I'll catch up with you then.

    Kind regards

    Chris.

    Hi everyone who has problems with the installation of patch number KB2770816 especially those with a Medion computer. I had this problem since early August and contacted Microsoft. They worked on my PC in the last two days and have now to rectify the problem. They will post how to solve this problem in due course. The information on the pages of the community regarding the evolution of the registry entries are incomplete. Until the correct information is available, I would recommend that 'hide you' this update to avoid delays when you restart your PC, etc. After you installed the updates. I can not praise Microsoft technicians quite strongly on how they have dealt with this problem for me and would recommend others to use its easy when things go wrong.

  • Windows XP starts with a black screen and hangs for two minutes before the end of the boot process.

    Original title: Windows xp slow at startup delayed to the office after you download the updated April 8,2011

    First time after updating, would start then black screen can see the cursor then took 20 minutes before Office input... now does the same thing but just a few minutes. What happens all started after the recent update April 8... something about a NET update? any IDE how to fix?

    Hi kaeli,.

    ·         Have you checked the problem in safe mode?

    Step 1: Try to start in safe mode to see if you can start fine.

    Step 2: If he is able to start fine then try try perform a clean boot to normal mode to check whether a third-party program is causing the problem.

    How to configure Windows XP to start in a "clean boot" State

    You can also read the following article to resolve the problems on the issue.

    Perform a clean boot to determine if background programs interfere with your game or program.

    Note: Make sure that you put the computer to a Normal startup once you are finished.

    See also:

    Computer stops responding with a black screen when you start Windows XP

Maybe you are looking for

  • Windows XP Home Edition... no restore CD?

    I have a little problem. I want to do a clean XP on my Equium A60 installation because it becomes very slow. However, it seems that no CD was closed when I bought the laptop. Apparently, this is not unusual, but in my opinion, it's a very bad practic

  • Problem printing with HP OFFICEJET PRO8500A PREMIUM

    I have to print certain documents yesterday, disappeared for a few hours and pick up where I left off.  When I went to print my document following that nothing happened.  He entered in the queue of the printer but would not print and I don't have the

  • want to 7640: printing on envelopes

    I want to 7640. I love it when I never use the document on the top feeder. The other problem is that I can not create a different size on Stamps.com envelope. I had a printer Photosmart I forgot the model number? I was able to create a new envelope o

  • HP ENVY 17-j020us

    Consider the purchase of the HP ENVY 17-j020us Quad Edition Notebook. Laptop HP ENVY 17 - j020us Quad edition has the possibility to add a second hard drive?  Want to add a SSHD for the boot drive and use the 1 TB Hd as the secondary drive.

  • Installed New Netgear Wireless Range extender but new network doesn't have internet access.

    I just installed a machine net universal range extender for WiFi and the signal over the Wan is very strong, but when I connect to him he says that have no internet access. What should I change? I post what I'm on the Ext network.but when I try to ac