Anyconnect vpn and proxy!!!

alex-naxos · ‎09-25-2012

Hello to all,

I am currently working on a client's company and i am trying to connect to my company's network using cisco's anyconnect client.

I am running redhat linux and i have Cisco AnyConnect VPN Client Version 2.5.6005 which my company provides...

I am using gnome to setup the proxy of the client's network. But is seams that the cisco client does not get the proxy setting from therer although gnome configurers system-wide...

The error i am getting is : The client could not connect because of a secure gateway address resolution failure...

Can you advice me please as to where the cisco client gets its network setting and where i can configure the proxy so as the vpn client can use it and resolve the connecting addrerss..

Javier Portuguez · ‎09-25-2012

Hi Alexandros,

Please check it out:

Local Proxy Connections

By default, AnyConnect lets users establish a VPN session through a transparent or non-transparent proxy on the local PC.

Some examples of elements that provide a transparent proxy service include:

•Acceleration software provided by some wireless data cards

•Network component on some antivirus software, such as Kaspersky.

Local Proxy Connections Requirements

AnyConnect supports this feature on the following Microsoft OSs:

•Windows 7 (32-bit and 64-bit)

•Windows Vista (32-bit and 64-bit)—SP2 or Vista Service Pack 1 with KB952876.

•Windows XP SP2 and SP3.

Support for this feature requires either an AnyConnect Essentials or an AnyConnect Premium SSL VPN Edition license.

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac03vpn.html#wp1336176

So it looks like this is not supported on Linux.

Thanks.

Portu.

Please rate any helpful posts.

alex-naxos · ‎09-25-2012

can you please explained to me because i can not understand what i am reading

Javier Portuguez · ‎09-25-2012

Alexandros,

Local proxy connections are not supported on Linux.

Thanks.

alex-naxos · ‎09-25-2012

but the client does get the network settings from some where right ?????

from some where in the linux system it gets those setting

the question is from where ??

phydroxide · ‎12-17-2013

That is my question too. Cisco's site says they support Ubuntu 11 and 12, and yet when you go into the gnome-control-panel and set http_proxy and https_proxy to manual, then "apply system wide" it will set your /etc/environment, and export your http_proxy and https_proxy variables. You can verify the settings in gsettings list-recursively | grep proxy (it stops short of setting proxy in dconf-editor), and you can see wget grabs the proxy correctly. After all of that you can tell that proxy does not work because "netstat -nao | grep [endpoint ip]" shows that it tried to reach out directly (syn_sent) and the proxy wasn't even tried. This is in Anyconnect 3.1.03103, and I haven't tried any newer client, but this should work in Linux right? is that what "local proxy connections are not supported in Linux" means? that doesn't sound right, this is a perfectly reasonable scenario to support.