Internet problems after having disconnected the VPN session

I was wondering if someone could tell me a solution for this problem I have.  A year or more ago.

When I had Vista (32 bit), I used to use Cisco's VPN IPSEC client.  At the time, I found that when I disconnect a VPN session, something on my machine would get watered upward.  In other words, I could no longer RDP to my machine from another machine (which I would do so on the internet).  I also found that I could not access other services on my machine to other machines as well through the internet.

Basically, I found this case I disabled/re-enabled my NIC (do it manually or by restarting), I was able to connect once more to my machine.

Now I have Windows 7 (64-bit).  So now I also use Cisco SSL VPN client.  I had hope that this should disappear with the new operating system and the new VPN client, but the problem persists!  Fortunately, the Windows 7 Task Manager can be triggered based on the events that occur.  I created a task that will disable/re-enable my NIC whenever he sees the event of disconnection of SSL in the registry.  While this is a great workaround for me, I would go at the bottom of the issue.  I even helped others in my office with the same question by providing my elegant solution!

Side note: my friend just asked me why he couldn't TRACERT what either.  He spoke to me through our enterprise IM client while VPN was in our network.  I asked if he was on the VPN on the attempt, and he said that it has disconnected first thinking it was the case.  I suggested to him that he can hit the same question that I have, in that the VPN is somehow corrupt its TCP stack or something.  I asked to disconnect from the VPN, once again, turn his NIC, and lo-and-here it could once more tracert.

This issue is documented anywhere?  Are there patches?

TIA,

MCDONAMW

What version of AnyConnect you test with?  This could be related to bug CSCsz12568 that has been fixed in the 2.4 client later.  What you can do is capture a snapshot of the Windows routing table before connecting, once connected, disconnected and then again later to see if there is not strange roads that can be bad traffic orientation.

Tags: Cisco Security

Similar Questions

  • How to remove a schema after having connected the expdp session

    Dear Experts,

    How to remove a schema after you connect the expdp session?

    I'm not able to reach a work

    
    [oracle@orcl28 ~]$ expdp system/****  attach=SYS_EXPORT_SCHEMA_01
    
    
    Export: Release 12.1.0.1.0 - Production on Mon Jan 18 02:23:26 2016
    
    
    Copyright (c) 1982, 2013, Oracle and/or its affiliates.  All rights reserved.
    
    
    Connected to: Oracle Database 12c Release 12.1.0.1.0 - 64bit Production
    ORA-39002: invalid operation
    ORA-39000: bad dump file specification
    ORA-31640: unable to open dump file "/home/oracle/datapump/UREPJ.dmp" for read
    ORA-27037: unable to obtain file status
    Linux-x86_64 Error: 2: No such file or directory
    Additional information: 3
    

    You have this table in the schema of SYSTEM-SYS_EXPORT_SCHEMA_01?

    Delete this table, and then try again.

    Aman...

  • Database contains the session after having disconnected the DB!

    Dear friends,

    I use Oracle10g database (10.2.0.4) than our production server to AIX 6.1. Recently, we buy
    an application that is used for a banking module. The username "INCHEQS" application.

    Now the problem is, when we are connecting through this user from the client end then,
    many users logged on, even if the users are not logged. for example, if a disconnection from the user
    Since his session but it connected session always in my database.

    Please see the output:

    SQL > select count (*) in the session $ v where username = "INCHEQS";

    COUNT (*)
    ----------
    100

    SQL > select username, status from v$ session where username like ' INCHEQS %;

    STATUS OF USER NAME
    ------------------------------ --------
    IDLE INCHEQS
    IDLE INCHEQS
    IDLE INCHEQS
    IDLE INCHEQS
    IDLE INCHEQS
    IDLE INCHEQS
    .......................................
    .......................................

    100 selected lines.


    In the output above of my production database, all users above are not connected, but the
    continuous session on the database. Now, how can I solve the problem. Is there a partners
    Oracle parameter (rather than RESOURCE_LIMT) to remove all INACTIVE users above after awhile.
    Here, I mentioned that it is not possible to activate the 'RESOURCE_LIMIT' parameter in my database.
    Edited by: shipon_97 26 August 2010 14:04

    Hello

    Create a new profile with a few seconds idle (based on your observation and discussion with the owner of the application) and send it back to the user.

    Anand

  • Satellite A210 - 4 1: Winload.exe problem after having used the product recovery disc

    Hello

    I could really do with some help here. I have a PC laptop Toshiba Satellite A210 - 1 4. Disk partitioned with Vista home premium service pack 4.0.

    Last night, I used the product recovery disc supllied with the laptop in an attempt to restore its initial configuration.

    and the end of the procedure, I find myself with a prompt cmd with X:\windows\system32\cmd.exe in the high bit blue box indicating:

    Error: imageX could not apply vista F:\05993xsp.swm Index 2 of ODD to C:\!

    Press a key to continue. Box disappears then an administrator: X:\windows\system32\cmd.exe in the top blue bit indicating:

    waiting for ODD vacancies...
    STRANGE drive f: loan.
    Look for support in the F: drive...
    Failed to initialize the raid class.
    No RAID - continue normally...

    X:\Windows\System32 >

    Now every time the laptop trying to restart it just comes up with the error message:

    CANNOT START WINDOWS. A RECENT HARDWARE CHANGE OR SOFTWARE MAY BE THE
    CAUSE
    FILE: \WINDOWS\SYSTEM32\WINLOAD. EXE
    STATUS: 0XC000000E
    INFO: THE SELECTED ENTRY COULD NOT BE LOADED BECAUSE THE APPLICATION
    IS MISSING OR DAMAGED

    Below I have then have the possibility of esc or continue with the same result of the system attempts to restart.

    The recovery disc has no option of repair on this subject.

    need help please, I have no idea.

    Thank you

    Hello

    Looks like something was wrong during the recovery procedure.
    Have you tried to recover the laptop once more?
    If this isn't the case, you should definitely try this!

    You are right; hasn t drive recovery option for the repair because the recovery disk is not the same as a MS Vista drive. The recovery disk contains image files (it s a package) and the files contains Vista, Toshiba drivers, tools and additional software.

    So if something was happening well wrung out during the recovery procedure, you will not be able to repair the installation of the OS, but you need to run it again.

  • PC disconnects the VPN after several hours, can not reconnect until you restart the PC.

    Hello

    I started to use a VPN private for a video game in general since last month, but I started to run into a problem, I can't fix... my PC tends to disconnect the VPN after awhile (6 ~ 12 hours of use?) and I can't reconnect to any VPN until I restart my PC.

    However... my normal internet connection seems to work very well.

    When I try to reconnect to the VPN after I fell, I'm greeted by this error:
    http://PUU.sh/bicqT/0a6f1f8537.PNG

    I'm on Windows 7 64 bit and I use the VPN client by default windows... idk what's his name, it's putting you in the network and sharing Center.

    I tried the following things:
    * restart the network map
    diagnose the issue with windows network diagnostics 7
    * / Clear DNS cache
    * / release and / renew lease
    * reset the internet connection
    * using the internet connection of a neighbor and I am still unable to connect to any VPN until you restart the PC.

    -diagnosis after disconnecting from the VPN wireless adapter arrives leads to this...
    http://PUU.sh/bibQs/9873c02068.PNG
    http://PUU.sh/bibn7/93ec6f0934.PNG
    http://PUU.sh/biboF/3c9f865f15.PNG
    http://PUU.sh/bibpw/b204c59f01.PNG
    http://PUU.sh/bibq9/a10d3246d1.PNG

    I can't fix it through diagnostics.

    In any case, this is a problem on my end because I share the VPN with 2 other friends and they do not suffer this problem... > _

    If there is a lack of information, please tell me and I will provide.

    Thanks for any help!

    Hello

    The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums.
    TechNet Forum
    http://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w7itpro

    Hope this information helps.

  • How can you cancel the download of an update that was started by after having pressed the button "Check for Updates" in the window "On Firefox", please?

    How can you cancel the download of an update that was started by after having pressed the button "Check for Updates" in the window "On Firefox", please? If possible, please cover all platforms, Mac, Windows, Linux, although the first mentioned is what currently applies to my situation.

    Thank you.

    Such a download is usually recorded in a updates or updates folder in the program folder or the Firefox application.
    You can delete this folder to cancel the download.

    If the files have already been downloaded, then delete the files in the folder updates\0 and updates.

    Mac: /Applications/Firefox.app/updates "/path_to/Firefox.app/Updated.app"
    Linux: "/path_to/firefox/updated"
    Windows: C:\Users\<user>\AppData\Local\Mozilla\Firefox\Mozilla Firefox\updates
    
  • Keyboard does not work after authentication on the RDS Session host

    When you connect to the RDS through the access portal or app keyboard does not work after authentication on the RDS session host. Offline authentication works very well, past will guide you to the RDS host, then when you try to reset your password, the keyboard does not work.

    Has anyone else had that... ?

    Options (some better than others!) are:

    1. move all MS applications seamless

    2. have an application named "Reset your password" (or similar) which uses MS Seamless.then you can leave other applications, as they are

    3 disable authentication carried forward and implemented our service reset password instead so people reset their password before can connect you.

    4. use the full desktop instead of transparent

  • Why my drive showing full after having activated the bitlocker encryption? My d drive is 180 GB. only up to 20GB file is available

    Why my drive showing full after having activated the bitlocker encryption? My d drive is 180 GB. only up to 20GB file is available.

    If you want just a report of chkdsk on your C partition select Start, run, type "cmd" without the quotes in the box and press ENTER. Type chkdsk, and then press the ENTER key and a report, stating, among other things, a summary of how disk space is used, is provided. If you want a report on a partition or one drive other than C, you need to go to this partition. To access F, where F is the required partition you type F: and press the ENTER key.

    Copies of the reports from a command prompt can be tricky. Right click and select mark. This allows to highlight the selected text, and then click on copy. You will then open Word, Notepad or similar file, right click and paste. The selected text transfers your Clipboard to open the file. You can paste directly into a response message to the majority of the forums.

    In Windows 7, you can use a command-line high;
    http://www.SevenForums.com/tutorials/783-elevated-command-prompt.html

  • How install and run Acrobat Pro after having downloaded the trial without checking 'install '?

    How install and run Acrobat Pro after having downloaded the trial without checking 'install '?

    You can not.  You must check 'install' to install and run it.

  • Drives and airport Extreme Base Station to disconnect after connection to the VPN

    At home when I'm on WIFI, everything works fine. At the moment where I connect to the VPN to do office work, the base station will disconnect and accessible either.

    Any help?

    The problem you are experiencing is perhaps due to the type of VPN tunnel that you use to connect to your workplace. There are basically two types: 1) full or partial) 2. Note: The different VPN clients can use other words, but these are usually options when you set up a tunnel.

    When you use a complete tunnel, all traffic between your computer and the VPN of your working server, through the tunnel. No traffic is allowed on your local network, and therefore, all local resources are not available. With a partial tunnel, your computer data traffic, may as well go through the tunnel and also to your local network. One reason to use a partial tunnel, for example, is that you have a local printer, you need to perform printing. You can be connected to this type of tunnel for access to the documents and then, be able to print on this printer... otherwise, with a tunnel of full, you would print to a printer at your place of work.

  • Help, please! Cannot access the web after connected to the VPN

    Hello

    I'm a newbie on Cisco products.  I configured a Cisco ASA 5505 with VPN firewall.  However, I can't access the web after I connected to the remote IPSec VPN.  I also cannot connect to the bands using the intellectual property.  But I can connect to the internal servers in the office with no problems.

    Here is my setup, can someone help please?  Thank you very much

    ASA Version 8.2 (5)

    !

    host name asa

    xxxxxxxxx.com domain name

    enable the encrypted password xxxxxxxxxxx

    xxxxxxxxxxx encrypted passwd

    names of

    !

    interface Ethernet0/0

    switchport access vlan 2

    !

    interface Ethernet0/1

    !

    interface Ethernet0/2

    !

    interface Ethernet0/3

    !

    interface Ethernet0/4

    !

    interface Ethernet0/5

    !

    interface Ethernet0/6

    !

    interface Ethernet0/7

    !

    interface Vlan1

    nameif inside

    security-level 100

    IP 192.168.1.1 255.255.255.0

    !

    interface Vlan2

    nameif outside

    security-level 0

    IP address dhcp setroute

    !

    passive FTP mode

    area of zone clock - 8 schedule

    clock summer-time recurring PDT 1 Sun Apr 02:00 last Sun Oct 02:00

    DNS lookup field inside

    DNS server-group DefaultDNS

    Server name 107.204.233.222

    name-server 192.168.1.3

    xxxxxxxxx.com domain name

    inside_nat0_outbound list of allowed ip extended access all 192.168.1.96 255.255.255.240

    pager lines 24

    Enable logging

    asdm of logging of information

    Within 1500 MTU

    Outside 1500 MTU

    IP local pool sc-192.168.1.100 - 192.168.1.110 mask 255.255.255.0

    ICMP unreachable rate-limit 1 burst-size 1

    don't allow no asdm history

    ARP timeout 14400

    Global 1 interface (outside)

    NAT (inside) 0-list of access inside_nat0_outbound

    NAT (inside) 1 192.168.1.0 255.255.255.0

    NAT (inside) 1 0.0.0.0 0.0.0.0

    Timeout xlate 03:00

    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

    Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

    timeout tcp-proxy-reassembly 0:01:00

    Floating conn timeout 0:00:00

    dynamic-access-policy-registration DfltAccessPolicy

    the ssh LOCAL console AAA authentication

    Enable http server

    http 192.168.1.0 255.255.255.0 inside

    No snmp server location

    No snmp Server contact

    Server enable SNMP traps snmp authentication linkup, linkdown cold start

    Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

    Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

    Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac

    Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac

    Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

    Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac

    Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac

    Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac

    Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

    Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac

    life crypto ipsec security association seconds 28800

    Crypto ipsec kilobytes of life - safety 4608000 association

    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set

    Crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

    outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

    outside_map interface card crypto outside

    Crypto ca trustpoint _SmartCallHome_ServerCA

    Configure CRL

    crypto ISAKMP allow outside

    crypto ISAKMP policy 10

    preshared authentication

    3des encryption

    sha hash

    Group 2

    life 86400

    Telnet timeout 5

    SSH 192.168.1.0 255.255.255.0 inside

    SSH timeout 5

    Console timeout 0

    interface ID client DHCP-client to the outside

    dhcpd outside auto_config

    !

    dhcpd address 192.168.1.5 - 192.168.1.36 inside

    dhcpd dns 107.204.233.222 inside the 192.168.1.3 interface

    dhcpd allow inside

    !

    a basic threat threat detection

    Statistics-list of access threat detection

    no statistical threat detection tcp-interception

    WebVPN

    internal strategy group xxxxxxxx-sc

    attributes of xxxxxxxx-sc group policy

    value of 107.204.233.222 DNS server 192.168.1.3

    Protocol-tunnel-VPN IPSec

    XXXXXXXXXX.com value by default-field

    xxxxx xxxxxxxxxxx encrypted password username

    Strategy Group-VPN-xxxxxxxx-sc

    remote access to tunnel-group xxxxxxxx-sc type

    attributes global-tunnel-group xxxxxxxx-sc

    address sc-pool pool

    Group Policy - by default-xxxxxxxx-sc

    tunnel-group xxxxxxxx-sc ipsec-attributes

    pre-shared key *.

    !

    class-map inspection_default

    match default-inspection-traffic

    !

    !

    type of policy-card inspect dns preset_dns_map

    parameters

    maximum message length automatic of customer

    message-length maximum 512

    Policy-map global_policy

    class inspection_default

    inspect the preset_dns_map dns

    inspect the ftp

    inspect h323 h225

    inspect the h323 ras

    inspect the rsh

    inspect the rtsp

    inspect esmtp

    inspect sqlnet

    inspect the skinny

    inspect sunrpc

    inspect xdmcp

    inspect the sip

    inspect the netbios

    inspect the tftp

    Review the ip options

    !

    global service-policy global_policy

    context of prompt hostname

    call-home service

    anonymous reporting remote call

    call-home

    contact-email-addr [email protected] / * /

    Profile of CiscoTAC-1

    http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address

    email address of destination [email protected] / * /

    destination-mode http transport

    Subscribe to alert-group diagnosis

    Subscribe to alert-group environment

    Subscribe to alert-group monthly periodic inventory

    monthly periodicals to subscribe to alert-group configuration

    daily periodic subscribe to alert-group telemetry

    Cryptochecksum:5c1c99b09fb26fcc36a8bf7206af8e02

    : end

    Hello

    Try adding the following commands

    permit same-security-traffic intra-interface

    NAT (outside) 1 192.168.1.96 255.255.255.240

    Is there are always problems with VPN then I would maybe change VPN pool to anything other than something that comes into conflict with the LAN.

    In this case, these configurations should do the trick

    In order from top to bottom, they would do the following things

    • First remove the pool VPN and VPN configurations
    • Then remove the VPN pool
    • Remake of the VPN Pool with different network
    • Reattach the VPN pool for VPN configurations
    • Configure NAT0 to the new cluster of VPN
    • Remove the old line of the ACL of the configuration of NAT0

    attributes global-tunnel-group xxxxxxxx-sc

    no address-sc-swimming pool

    no ip local pool sc 192.168.1.100 - 192.168.1.110 mask 255.255.255.0

    IP local pool sc-192.168.2.10 - 192.168.2.254 mask 255.255.255.0

    attributes global-tunnel-group xxxxxxxx-sc

    address sc-pool pool

    inside_nat0_outbound to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.2.0 255.255.255.0

    no access list inside_nat0_outbound extended permits all ip 192.168.1.96 255.255.255.240

    Of course you also have the NAT configuration for VPN pools new Internet traffic

    NAT (outside) 1 192.168.2.0 255.255.255.0

    Please rate if the information has been useful if this resolved the issue as mark responded.

    -Jouni

  • No video after having replaced the graphics card and power supply

    I have a desktop HP Pavilion m9515y PC. The graphics card that came with it (NVidia GeForce 9600 GS, 768 MB) did not suit the minimum specification required by a game that I played. Things in the game has been very slow - I could see a delay of s ~0.5 to move my mouse on the splash screen for the game.

    Today, I bought a new graphics (NVidia Geforce GTX 550Ti, 1 GB) card and a Corsair 700W PSU to replace the 350W one that came with the system.

    From the outset that I messed up something. It's been a while since I opened the box and I thought wrongly that the top panel (with the rubber surface) to come off before the side panel could be deleted. I removed the two screws now the top panel in place and slipped it in the process it disconnect and two thin black wires which I do not know the function. It was attached near the power button and one was attached to the rear of the Panel. The sons have stripped the ends rather than a connector of some sort and I don't know how they connect back or if they are the cause of the problem that I see now.

    In any case, I advanced and removed the old PSU and video card and replace them with the new. Two of them are significantly larger than the components, they replaced, but they managed to adapt with some maneuvers. All cards are well-placed in the PCI slots.

    The power is connected hard disk, DVD drive, the motherboard and the new video card. I'm not aware of any other connections that need to be made to food. There was not much clearance between the power supply and the back of the DVD player, but I was able to get the data and clinging to the DVD of power cables.

    After having done all that, I hooked my monitor DVI cable, plugged in the power cable and turned on the power. When I plug it in, the power button on the top of the tower is illuminated and the power seems to work. However, my monitor indicates that there is no video signal. I tried to put the old return video card, but I don't always have a video signal. Because I can't get a video signal, I can't tell if the PC is start or not.

    Does anyone know the purpose of the wires that were connected to the top of the Tower?

    They would cause they cause this problem if they are not correctly connected?
    Any suggestions for the possible causes of the absence of a signal from a video card?

    I just took the PC to a repair shop and it turns out that the problem was quite simple: I don't have the PCU power cable 4 pins hanging. Everything seems to start fine when we hung out at the shop. Fortunately, the place that I took did not even charge me what as they don't charge co-pays and since it is such a simple fix.

    Now I feel kind of stupid, but I know better next time...

  • Internet problem after upgrade to 10.11.3

    someone at face safari connection problem after the upgrade

    I'm having exactly the same problem.

    Is it possible to uninstall the 10.11.3 update and revert to the previous version?

  • LaserJet 1150: Laserjet 1150 problems after you insert the new ink cartridge

    Hi, I am the owner of this very good printer for 10 years now.  Used only a single all these years ink cartridge (I use it only for work related missionery) with not a single problem.  When we bought it we also bought a replacement ink cartridge.  However, when I put in place the new ink cartridge, I have a problem of printing documents.  Each document gives me the same results.  I took it to the store of the local computer, which shook the cartrdige vigorously and I also ran the service option in the HP printer Toolbox. The guy at the computer said I need to print a lot of papers and see what is happening... what I did.  But the result in each impression remains exactly the same. The annex in the printed document.  Can we still do this ink cartridge work after having been stored for 10 years?  Thank you for reading my message.

    You have a bad toner cartridge.  Given that this printer is very old, there is a lot new in the old box of cartridges of toner there stock.  Over time, the wiper blade will hurt comes from there.  Think that buy you a new toner from a big box store which should have new actions and you will come back if the cartridge is bad.

  • Loss of internet connection after sleep and the computer will not be closed.

    I have a laptop GateWay w / Vista 32 bit OS.  Recently connected to the new internet connection and can connect without a problem.  However, after waking from sleep, the connection is lost, the icon indicates still active connection, can no longer open connection or the computer will restart.  It just hangs and I have to make a hard stop and start again.  If I remive the connection Wireless via safe mode things is back to normal.  However, the cycle repeats when the connection is restored and the computer enters mode "Eve".

    Hi bobert1953,

    This problem can occur when the power management profile turns off your network adapter.

    Method 1: To disable power management feature ent of network cards

    a. click on start

    b. right click on computer

    c. click on manage the

    d. click on Device Manager in the left pane of the window

    e. expand your network card.

    f. now you will see your network adapter or adapters if you have more than one. Right-click on the network component, and then click Properties.

    g. go to the power management tab.

    h. ensure that all check boxes are unchecked (check boxallow the computer to turn off this device to save power is off).

    i. When you have disabled the boxes, click ok and restart your system. Put the computer in mode 'sleep' and check if you still have any questions.

    Method 2: You're also talking about the steps mentioned in the article below, which deals with a similar question

    After you wake up, a Windows Vista-based computer or a Windows 7 sleep mode or Hibernate computer, the network icon and the speaker in the notification area icon do not show the correct state

    http://support.Microsoft.com/kb/937477

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer
    ---------------------------------------------------------------------------------------------------------
    Visit our Microsoft answers feedback Forum and let us know what you think.

Maybe you are looking for