Mac OS X Maverick - AnyConnect

Endorsed Question
Oct 23rd, 2013

Hello - I just installed OS X 10.9 (Maverick), and my Cisco AnyConnect VPN Client has began acting strange.  Prior to the upgrade, the connection was always stable, however after the upgrade it disconnects and reconnectes about every 1-2 minutes continuously.  This is an unworkable situtation and wondering if there is something I can change with the configuration to alleviate this issue.

Thanks

I have this problem too.
24 votes
Endorsed by Marcin Latosiewicz
psd about 5 months 2 weeks ago

Apple has been extremely helpful and a very good partner in root causing the source of this problem.

We are pleased to announce that we have made available a temporary workaround (CSCuh73010) for the AnyConnect Mac OS X 10.9 connection instability / compatibility issue (Apple Bug Report ID 15261749) via an updated version of AnyConnect (3.1.04074). There are caveats associated with this temporary workaround which are noted in the release notes. Due to replication delays, the release notes may not be updated until Monday.


http://software.cisco.com/download/release.html?mdfid=283000185&flowid&softwareid=282364313&release=3.1.04072



(It is located in the 4072 directory.)

Release Notes:

http://www.cisco.com/en/US/products/ps10884/prod_release_notes_list.html


Note: A SMARTnet-enabled login is required to download AnyConnect Software from Cisco.com.

Here's the release note excerpt: This update is a temporary workaround to resolve the problem of frequent reconnects/disconnects of the  AnyConnect VPN on systems running Mac OS X 10.9. Apple is aware of this issue and you can reference Apple Bug Report ID 15261749 if you want to  open your own case with them. This patch is a workaround and we are not able to guarantee that it will work as reliably as a fix provided by a future OS patch. A future OS fix will not require you to update AnyConnect 3.1.0472 to operate reliably. Once  Apple provides a fix in OS X 10.9, we may choose to retract this workaround, and unpatched versions of AnyConnect 3.1.04072 will also work reliably.

Best Regards,

Pete Davis

Product Owner, Cisco AnyConnect

ac-mobile-feedback@cisco.com

@AnyConnect

http://facebook.com/anyconnect

Endorsed by Marcin Latosiewicz
psd about 5 months 3 weeks ago

Apple has been extremely helpful and a very good partner in root causing the source of this problem. 

We are pleased to announce that we have made available a temporary workaround (CSCuh73010) for the AnyConnect Mac OS X 10.9 connection instability / compatibility issue (Apple Bug Report ID 15261749) via an updated version of AnyConnect (3.1.04074). There are caveats associated with this temporary workaround which are noted in the release notes. Due to replication delays, the release notes may not be updated until Monday.


http://software.cisco.com/download/release.html?mdfid=283000185&flowid&softwareid=282364313&release=3.1.04072



(It is located in the 4072 directory.)

Release Notes:

http://www.cisco.com/en/US/products/ps10884/prod_release_notes_list.html


Note: A SMARTnet-enabled login is required to download AnyConnect Software from Cisco.com.

Here's the release note excerpt: This update is a temporary workaround to resolve the problem of frequent disconnects of the  AnyConnect VPN on systems running Mac OS X 10.9. Apple is aware of this issue and you can reference Apple Bug Report ID 15261749 if you want to  open your own case with them. This patch is a workaround and we are not able to guarantee that it will work as reliably as a fix provided by a future OS patch. A future OS fix will not require you to update AnyConnect 3.1.0472 to operate reliably. Once  Apple provides a fix in OS X 10.9, we may choose to retract this workaround, and unpatched versions of AnyConnect 3.1.04072 will also work reliably.

Best Regards,

Pete Davis

Product Owner, Cisco AnyConnect

ac-mobile-feedback@cisco.com

@AnyConnect

http://facebook.com/anyconnect

  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 4 (5 ratings)
josemed Wed, 10/23/2013 - 14:15

Hello Joe,

Unfortunately Anyconnect is not compatible with Maverick (10.9) yet. It's being tracked under CSCuh73010

-Gustavo Medina

roberdenitro Thu, 10/24/2013 - 07:08

Thanks for tracking this, i have the same issue. disconnects every 1-2 minutes with 10.9+Anyconnect 3.1

Looking at stats seems that Control Frames are not being received to me during outages.

Worth mention i have the problem within my corporate network, from my home DSL it works ok.

rleighhennig Thu, 10/24/2013 - 08:25

I can't even connect. I receive an error that says "Posture Assessment Failed: Hostscan Initialize error"

UPDATE

I have been able to get a solid, stable VPN connection using the standalone install package "anyconnect-macosx-i386-3.1.04072-k9.dmg" - when installing, I only installed the VPN module - I did not install the posture module or any of that other stuff. I've had zero problems with it since then. The download files for this version of AnyConnect are available here:

http://software.cisco.com/download/release.html?mdfid=283000185&softwareid=282364313&release=3.1.04072&relind=AVAILABLE&rellifecycle=&reltype=latest

The particular one that worked for me was "Standalone DMG package for Mac OS X "Intel" Platforms"

jpvh12345 Sun, 10/27/2013 - 13:19

I concur with r. Leigh. I have10.9 and wasn't even aware of any issues, but I had originally installed any connect 3.1 by itself.

Sent from Cisco Technical Support iPad App

robwillett.cisco Tue, 10/29/2013 - 01:04

I have Macbook Pro Retina Display 13" Early 2013 model.

I've installed Cisco Anyconnect Secure Mobility Client 3.1.04072 (just the core package, no optional extras) and I've found it works fine so far. We do not have wireless at work so cannot comment on the wired vs wireless debate. With a Thunderbolt -> Ethernet adaptor it has been up and working for around an hour with no problems.

Powernap is enabled.

The older version of Anycionnet SMC (I suspect V3.something) had an issue with the libcurl library which I could not resolve. I used older versions of libcurl to try and get round it and gave up after a couple of hours.

Whilst this is early days, it's only been a few hours, it's looking OK so far.

I've looked through some of the comments and I would suggest people document exactly which version of the client they are using. 3.1 doesn't get close to the details, it may well be that the latest version might (or might not) work for you.

I hope this positive if not conclusive report helps people and gives them some hope there is a resolution. This appears to work for me anyway.

Rob

desbutcher Thu, 10/24/2013 - 08:08

Any solution would be much appreciated, completly breaks my off site working solution.

Update

The soluton below worked for me, just took the VPN client part of the package and service has been solid. Why would I need the posture part ? I know how to sit up or lie down

kidbrax00 Thu, 10/24/2013 - 07:07

Why is AnyConnect always behind?  There was plenty of time for Cisco to have this prepared ahead of time.  I have had issues before when OS X was upgraded.  It's unacceptable from such a large company.

Seriously, that's why they have developer releases, so that developers can get their software ready ahead of time.  What is Cisco doing during this time?

josemed Thu, 10/24/2013 - 08:02

Hello Guys,

The problem has been isolated to a bug in OS X 10.9. We are examining all possible workarounds while we wait for an OS X 10.9 update which fixes this regression.

If you are reaching out to Apple to open your own case, you are welcome to reference our Apple bug report ID: 15261749

-Gustavo Medina

dhunjib123456 Thu, 10/24/2013 - 08:53

I contacted Apple and they have no knowledge of this as an issue, either reported by users or Cisco.  They are not aware of any pending fix related to this as a result or, of any on-going discussion with Cisco about this?

Has anyone found a cue to this issue?

saudbeig1 Thu, 10/24/2013 - 01:47

It has completely disrupted my offsite work situtation. And this is the only software that I'm having issues with on 10.9.

magnuslarsson1 Wed, 03/26/2014 - 21:43

I am having three issues running Cisco AnyConnect Secure Mobility Client Version 3.1.05152 on Mac OS X 10.9.2;

1. When I start the client it errors out with the error: "No vaild certificate available for authentication. Connection attempt has failed due to server communication errors. Please retry the connection." - The orange wheel keeps spinning and application is hung - when I relaunch 25-30 times it eventually works and gives me the password prompt...

2. Dropping connection every 10-15 minutes causing Java applications to fail...

3. When I click on Preferences I see a blank window (attached)

 

Attachment: 
jrcamacho25 Thu, 10/24/2013 - 17:28

I am also experiencing this issue and it so frustrating.  Has any progress been made on this and an expected time to resolution?

support_gyml Fri, 10/25/2013 - 05:55

Be aware: the behavior is depending as wheather you use

- WiFi

and / or

- power supply plugged in.

I have no problem using eathernet cable plugged in and the power supply attached (using 3.1.04072).

I guess it has something to do with the new introduced power save functions ... so I opened a case with Apple too!

jrcamacho25 Fri, 10/25/2013 - 06:17

I hope this helps, but I am on a 13" Mac Air and even plugged in I still experience the issue.  Unfortunately, I don't have the ethernet option since Mac Air's don't have a network port.

billbackstrom1 Fri, 10/25/2013 - 06:26

Yesterday I was seeing a reconnect every 2 minutes (plugged in, on wifi, 3.1.04072). Today it has been solid for nearly an hour. I'm connecting from a different location, but I was having the same issue with an earlier version of AnyConnect from the location. PowerNap is disabled for AnyConnect, but that did not fix the issue yesterday.

support_gyml Fri, 10/25/2013 - 06:57

Ok - I am on a MacBookPro Retina connected to the Ethernet by Thunderbolt (from display). So this might leave the problem to the WiFi connection!

psd Fri, 10/25/2013 - 06:58

We have definitely seen varied behavior between WiFi and Wired.

psd Fri, 10/25/2013 - 07:06

Apple has been extremely helpful and a very good partner in root causing the source of this problem. 

We are pleased to announce that we have made available a temporary workaround (CSCuh73010) for the AnyConnect Mac OS X 10.9 connection instability / compatibility issue (Apple Bug Report ID 15261749) via an updated version of AnyConnect (3.1.04074). There are caveats associated with this temporary workaround which are noted in the release notes. Due to replication delays, the release notes may not be updated until Monday.


http://software.cisco.com/download/release.html?mdfid=283000185&flowid&softwareid=282364313&release=3.1.04072



(It is located in the 4072 directory.)

Release Notes:

http://www.cisco.com/en/US/products/ps10884/prod_release_notes_list.html


Note: A SMARTnet-enabled login is required to download AnyConnect Software from Cisco.com.

Here's the release note excerpt: This update is a temporary workaround to resolve the problem of frequent disconnects of the  AnyConnect VPN on systems running Mac OS X 10.9. Apple is aware of this issue and you can reference Apple Bug Report ID 15261749 if you want to  open your own case with them. This patch is a workaround and we are not able to guarantee that it will work as reliably as a fix provided by a future OS patch. A future OS fix will not require you to update AnyConnect 3.1.0472 to operate reliably. Once  Apple provides a fix in OS X 10.9, we may choose to retract this workaround, and unpatched versions of AnyConnect 3.1.04072 will also work reliably.

Best Regards,

Pete Davis

Product Owner, Cisco AnyConnect

ac-mobile-feedback@cisco.com

@AnyConnect

http://facebook.com/anyconnect

alennard4604 Wed, 10/30/2013 - 12:22

Just an FYI, we've been using AnyConnect 3.1.04059 w/ OSX 10.9 over WiFi and haven't seen any disconnects.

mb.generali Thu, 10/31/2013 - 08:03

I'm using anyconnect ver 3.1.04066 and didn't notice any issue. Today I worked 8h connected without any problem. So maybe there is a problem with specific vpn configuration. What is specification of VPN configaruration with an issues? Certificates, RSA or something else?

ibrennannetgrade Thu, 10/31/2013 - 16:05

+1, also on 3.1.04066 and haven't noticed any VPN drops.  I do however have an issue with Maverick s (forums won't let you post proper name??) crashing during sleep/wake. 

Some of the console logs point to AnyConnect, but it might also be caused by my Thunderbolt display.

psd Fri, 11/01/2013 - 11:46

It's unlikely that AnyConnect is related to your OS X 10.9 sleep/wake problems. First step I would follow would be to reset your SMC if it's simply not waking up reliably. If you have a 3rd party SSD, I suggest going in to System Pref -> Energy and turning off put hard disks to sleep (Battery/Power) and wake for network access as any tweaks you made with these settings could have been wiped out with your upgrade.

rharrison79 Fri, 11/01/2013 - 14:48

I was able to get around this by building a new VPN connection via IPsec instead of using the AnyConnect client

psd Fri, 11/01/2013 - 17:00

Apple has been extremely helpful and a very good partner in root causing the source of this problem.

We are pleased to announce that we have made available a temporary workaround (CSCuh73010) for the AnyConnect Mac OS X 10.9 connection instability / compatibility issue (Apple Bug Report ID 15261749) via an updated version of AnyConnect (3.1.04074). There are caveats associated with this temporary workaround which are noted in the release notes. Due to replication delays, the release notes may not be updated until Monday.


http://software.cisco.com/download/release.html?mdfid=283000185&flowid&softwareid=282364313&release=3.1.04072



(It is located in the 4072 directory.)

Release Notes:

http://www.cisco.com/en/US/products/ps10884/prod_release_notes_list.html


Note: A SMARTnet-enabled login is required to download AnyConnect Software from Cisco.com.

Here's the release note excerpt: This update is a temporary workaround to resolve the problem of frequent reconnects/disconnects of the  AnyConnect VPN on systems running Mac OS X 10.9. Apple is aware of this issue and you can reference Apple Bug Report ID 15261749 if you want to  open your own case with them. This patch is a workaround and we are not able to guarantee that it will work as reliably as a fix provided by a future OS patch. A future OS fix will not require you to update AnyConnect 3.1.0472 to operate reliably. Once  Apple provides a fix in OS X 10.9, we may choose to retract this workaround, and unpatched versions of AnyConnect 3.1.04072 will also work reliably.

Best Regards,

Pete Davis

Product Owner, Cisco AnyConnect

ac-mobile-feedback@cisco.com

@AnyConnect

http://facebook.com/anyconnect

totarajendra Tue, 11/05/2013 - 07:35

Peter,

Is it possible to make AnyConnect (3.1.04074) version available to everyone without Service Contract? It's asking service contract number to download it from Cisco website and unfortunately I don't have it.

I really appreciate it as it's blocking most of our work schedule and its really frustrating.

Thanks,

Raj

psd Tue, 11/05/2013 - 07:42

Hi Raj,

We are unable to do this. Customers are required to have active support contracts to get access to software update. Please contact us via email at ac-mobile-feedback@cisco.com to discuss your specific situation and we will see if we can help.

totarajendra Tue, 11/05/2013 - 07:56

Thanks Pete for the quick response. I have sent an email to the above mentioned address.Hope I will get some help from you guys

Thanks,
Raj

psd Thu, 01/09/2014 - 06:18

Hi Jeff,

The folks in the Apple thread are running the wrong version of AnyConnect (one that does not have a workaround for the bug in 10.9). Version 3.1.04074 OR Later is required, but they are running 3.1.04072.  Since you are supposedly running 3.1.04074, please send a Diagnostics bundle to ac-mobile-feedback@cisco.com with your problem report and we will be glad to help look in to this for you.

munozm Tue, 12/17/2013 - 18:35

Anyone know if the latest apple patch fixes this?  It doesn't seem to suggest so in

the latest release notes but just checking if there is a new update on the matter.

billbackstrom1 Wed, 12/18/2013 - 06:29

I'm no longer having the reconnect issue.

But I am having stability issues after running anyconnect.

Usually a reboot will fix things, but two days ago I could not get an IP address over wi-fi (anyconnect not running).

Rebooting did not help. An uninstall of anyconnect and then a reboot fixed things.

I can't isolate this to an anyconnect or 10.9 issue since I need to use anyconnect nearly every day, but the combination sure is not a happy one.

psd Mon, 12/23/2013 - 11:04

Apple has not released a fix in OS X 10.9.1, so you would need AnyConnect 3.1.04074 or beyond to function until Apple releases a fix.

drichards21 Thu, 01/09/2014 - 14:02

Will Apple supply a fix, or are there plans for them to?

I have tested on 3.1.04074, and currently on 3.1.05152 without any issues.  Does Cisco officially support these releases, or should we  wait on Apple?

psd Thu, 01/09/2014 - 14:04

These versions are officially supported by Cisco.  Whether or not you wait for Apple is your choice.  We can assume Apple will release a fix, but we are not able to speak for them as to when their fix will be released.

Actions

Login or Register to take actions

This Discussion

Posted October 23, 2013 at 7:21 AM
Stats:
Replies:37 Avg. Rating:4
Views:113080 Votes:24
Shares:15
Categories: AnyConnect
+

Related Content

Discussions Leaderboard