Anyconnect SSL client uses IPSec?

[tato386]

I am trying to setup an AnyConnect SSL VPN connection and receiving an IPsec error?  The error I am getting is:

"The IPsec VPN was terminated due to an authentication failure or timeout"

The Group policy that I am using has only SSL AnyConnect checked off. So I am confused as to why the error mentions IPSec.   Furthermore,  I found the error in the AnyConnect documentation but if only serves to further confuse me.  It states that this error is caused due to  authentication error or certificate issues.

But the error comes after I authenticated at the portal and the client has been downloaded.  I also hit "connect anyway" at the SSL cert warning appears.  So it would seem that the issues the documentation mentions do not apply to this situation.

Any ideas?

TIA.

[Marvin Rhoads · Accepted solution]

What is the transport protocol specified in your locally-stored connection profile? (xml file stored in "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile" on Windows 7).

That setting determines what transport is used / attempted. You will generally still use SSL for client services (updating AnyConnect and profile updates most commonly) and thus see the SSL certificate being used whether or not the VPN is SSL or IPsec with IKEv2.

[tato386]

That did the trick!

Thank you sir.

Diego

[DeanSundquist5904]

Thanks, 6 years later still relevant.  Think this was a product of connecting my AnyConnect to many locations, one of which downloaded a profile, than affected my connection to another VPN.  Just deleted everything in that folder (C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile), and was on Windows 10.