"AnyConnect is not enabled on the VPN server" on Cisco ASA, SecurID environment

Mchenry Brandon Lance (NCS) mbrandon at ncs.com.sg
Mon Oct 7 23:42:20 EDT 2013


Hello,

I have the below problem trying to connect to our Cisco ASA, SecurID environment. 

While it seems to successfully authenticate I am getting an "AnyConnect is not enabled on the VPN server" error.  I have attempted with the version of Openconnect on Ubuntu's repositories and have downloaded v5.01, both with the same results

Here is the verbose output:

POST https://myserver/
Attempting to connect to server myserver:443
SSL negotiation with myserver
Server certificate verify failed: unable to get local issuer certificate
Connected to HTTPS on myserver
Got HTTP response: HTTP/1.0 302 Object Moved
Content-Type: text/html
Content-Length: 0
Cache-Control: no-cache
Pragma: no-cache
Connection: Close
Date: Tue, 08 Oct 2013 03:20:13 GMT
Location: /+webvpn+/index.html
Set-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
HTTP body length:  (0)
GET https://myserver/
SSL negotiation with myserver
Server certificate verify failed: unable to get local issuer certificate
Connected to HTTPS on myserver
Got HTTP response: HTTP/1.0 302 Object Moved
Content-Type: text/html
Content-Length: 0
Cache-Control: no-cache
Pragma: no-cache
Connection: Close
Date: Tue, 08 Oct 2013 03:20:13 GMT
Location: /+webvpn+/index.html
Set-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
HTTP body length:  (0)
GET https://myserver/+webvpn+/index.html
SSL negotiation with myserver
Server certificate verify failed: unable to get local issuer certificate
Connected to HTTPS on myserver
Got HTTP response: HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/xml
Cache-Control: max-age=0
Set-Cookie: webvpn=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
Set-Cookie: webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
Set-Cookie: webvpnlogin=1; secure
X-Transcend-Version: 1
HTTP body chunked (-2)
Please enter your username and password.
Username:user
Password:
Username:user
Password:
POST https://myserver/+webvpn+/index.html
Got HTTP response: HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/xml
Cache-Control: max-age=0
Set-Cookie: webvpn=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
Set-Cookie: webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure
Set-Cookie: webvpnlogin=1; secure
X-Transcend-Version: 1
HTTP body chunked (-2)
AnyConnect is not enabled on the VPN server
Please enter your username and password.




More information about the openconnect-devel mailing list