Anyconnect Was Not Able To Establish A Connection

| Posted on by



Troubleshooting (Windows-specific)

Anyconnect Was Not Able To Establish A Connection To The Specified Secure

I am not having any luck on Windows 8 after following the instructions. I ran regedit as administrator and just tried running vpn client as administrator. AnyConnect fails with the message 'AnyConnect was not able to establish a connection to the specified secure gateway. Please try connection again '. If you are using the Kaspersky AV firewall you need to add AnyConnect as a firewall exception. Q: What should be done when an attempt to connect to VPN using Cisco AnyConnect generates this message: AnyConnect was not able to establish a connection to the specified secure gateway. Please try connecting again. In the Windows Control Panel navigate to Internet.

ProblemsPossible Causes and Solutions
Establishing the connection in Windows 8.1 fails with the message'Failed to initialize connection subsystem'
  • The problem is caused by a security update of Windows 8.1. By now,Microsoft released a fixed update. Please connect your computer to theInternet, choose Start→ Control Panel → WindowsUpdate and install all available updates. After a Windows restartyour AnyConnect connection should work properly again. If you needsupport, please contact IT-Servicedesk ofHRZ.
Establishing the connection fails with the message 'The VPNclient agent was unable to create the interprocess communicationdepot'.
  • The Internet Connection Sharing (ICS) is enabled. In thiscase AnyConnect is on principal not trying to establish aconnection.
    Change the properties of thenetworkconnection thatconnects you totheinternet and disable the ICS asfollowing:
    Choose Start → Control Panel → Network and Internet → Changeadapter settings → Right-click on theshared network connection and choose Properties →Sharing tab. Then deactivate thecheckbox 'Allow other network users to connect through thiscomputer's Internet connection'. After that, confirm the dialogvia OK.
AnyConnect fails with the message 'AnyConnect was not able toestablish a connection to the specified secure gateway. Please tryconnection again'.
  • If you are using the Kaspersky AV firewall you need to addAnyConnect as a firewall exception. It might be more useful to use thefree anti-virussoftware provided by the HRZ.
  • The Internet Connection Sharing (ICS) is enabled. In thiscase AnyConnect is on principal not trying to establish aconnection.
    Change the properties of thenetworkconnection thatconnects you totheinternet and disable the ICS asfollowing:
    Choose Start → Control Panel → Network and Internet → Changeadapter settings → Right-click on theshared network connection and choose Properties →Sharing tab. Then deactivate thecheckbox 'Allow other network users to connect through thiscomputer's Internet connection'. After that, confirm the dialogvia OK.
  • You have encountered a software bug in AnyConnect. If you find avalue like '@oem20.inf,%vpnva_Desc%;Cisco AnyConnect VPNVirtual Miniport Adapter for Windows x64' for the registry key'ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvpnvaDispayName'in the Windows registry (regedit.exe), please delete all charactersbefore the word 'Cisco' in the value. After that, close theregistry editor, start AnyConnect and try to connect again.
AnyConnect fails with the message 'VPN Service not available.The VPN agent service is not responding. Please restart thisapplication after a minute'.

  • The AnyConnect VPN service does not start automatically. Theerror message 'VPN Service not available. The VPN agent service isnot responding. Please restart this application after a minute'means, that the Cisco AnyConnect VPN service currently is not running.This could be caused by a Windows boot accelerator software, thatmodifies the start order of the Windows services in a way, someservices cannot be started anymore. In the past such problems werecaused by e.g. Lenovo Rapid Boot(also: RapidBoot HDDAccelerator, RapidBoot Shield) and CCleaner. After uninstalling suchsoftwares, the problem should be solved (Windows XP:Control Panel →Add/RemovePrograms, Windows Vista/7/8:Control Panel → Programs andFeatures).

AnyConnect fails with the message 'Connection attempt failed.Please try again'.

  • In AnyConnect the wrong VPN-Gateway was specified. Please enter theVPN-gateway vpn.uni-marburg.de and try to connect again.
AnyConnect fails with the message 'Could not connect to server.Please verify Internet connectivity and server address'
  • The computer's Internet connection does not work. Please make sureyour computer has a working Internet connection and try to connectagain.
Establishing the connection works, but secured content of UMRnetcan not be accessed.
  • A firewall or internet security software fromComodo manages the connection and prevents CiscoAnyConnect from working properly. Choose Start → ControlPanel → Network and Internet → Change adapter settings →right-click on the Cisco Anyconnect SecureMobility Client and chooseProperties. In the list of supported items ofthe connection deactivate the checkboxComodo Internet Security Firewall Driver andconfirm the dialog via OK.
The installation fails with the message: 'Failed to installAnyConnect Secure Mobility Client with installer error: Incorrectfunction. A VPN connection cannot be established'.
  • An additional firewall, anti-virus or internet security softwareprevents the installation of AnyConnect. Please temporarily deactivatethis software and try the installation of AnyConnect again. If thisalso fails, please uninstall this software, restart your Windowscomputer and try the installation of AnyConnect again. If youuninstalled your anti-virus software, please install another anti-virussoftware, for example the free anti-virus-software for students andstaff of university.

Establish

Date: Oct 10, 2013
By: Mike Khzouz (Mike@bostonIT.com)
Scenario:
When using the Linux Cisco AnyConnect client x64 (like MAC, Ubuntu, Redhat RHEL and Debian) you might get the error above or if you connect through command like you might get the following errors:
Resolution:
1- Before you start troubleshooting the issue on the client side, make sure SSL certificates are installed and configured properly on the ASA. Go to http://www.digicert.com/help/ and test your server SSL certificate, if you see any issues, talk to your system admin to fix. In addition to your company SSL certificate, intermediate certificate from the ssl provider needs to be installed on the asa too, and that web tool can show you any issues in that regard (this is a common issue - missing intermediate cert) .
2- Important: Upgrade to the latest Cisco AnyConnect client. You can download that from the cisco TAC site but you need a username and a password. The latest version of Anyconnect as of this article is 3.1.04066.
3- In one of the cases the Cisco ASA had a Go Daddy SSL Certificate. Copying Go Daddy certificate from that Linux SSL Certificate folder to Cisco SSL certificate folder on the linux machine forced Anyconnect to trust that certificate.
sudo cp /etc/ssl/certs/Go* /opt/.cisco/certificates/ca/
If you are using a different 3rd party SSL certificate on the ASA, then you need to copy that certificate the same way
You can also copy all the certificates from /etc/ssl/certs/ to /opt/.cisco/certificates/ca/ if you are not sure what certificate you are using.
If you get this error in Windows make sure you stop Internet Sharing service in Windows services
If you find this article helpful, please click to like our facebook page below so we can keep on adding quality hands-on articles.
Anyconnect Was Not Able To Establish A Connection
[SOLVED] AnyConnect was not able to establish a connection to ...Anyconnect Was Not Able To Establish A ConnectionCisco AnyConnect failures - Spiceworks

Safari Cannot Establish A Secure Connection