Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

AnyConnect Secure Mobility Client Slow Login

Hello,

I am planning to role out with this new AnyConnect client as the IPSEC client is now EOL.   I have seen a few threads about slowness with Anyconnect but this does not answer my question as to why the SSL client takes a long time just to come back with a login prompt when trying to connect to a site.   

The IPSEC client is so much faster.  I fear the users are going to complain when this does get rolled out.

I am using the Anyconnect client with Cisco 3925 routers IOS 15.4.2 on Windows 7 laptops and IPhone.  

 

Any ideas how I can resolve this ASAP ?

 

 

 

 

 

 

 

 

Everyone's tags (1)
8 REPLIES
Hall of Fame Super Silver

I've never heard anyone

I've never heard anyone complain about this issue. SSL VPN using AnyConnect is slightly slower that IPsec VPN using the legacy client as it does some checks for software and profile updates - features that aren't available on the old client.

I just measured an ASA system that supports both clients (using my watch, not precise) and see about 7 seconds (old IPsec client) vs. 15 seconds (AnyConnect SSL VPN). Both have the same tunneled network list and login banner configured.

New Member

I get 45 seconds to 1min

I get 45 seconds to 1min delay with AnyConnect before I get login prompt but zero delay with IPSEC.

 

 

Hall of Fame Super Silver

Something is misconfigured if

Something is misconfigured if you are having to wait 45+ seconds just for the login prompt.

New Member

 Where is the

 

Where is the misconfiguration ?

 

 

Hall of Fame Super Silver

It's hard to say having seen

It's hard to say having seen none of your configuration. You experience is very atypical though and is not based on any inherent inability of the AnyConnect Secure Mobility client perform responsively.

Feel free to post your config here for review. If you have Smartnet support, you can contact the TAC for an in depth review and troubleshooting.

New Member

I have logged a case with TAC

I have logged a case with TAC.

New Member

I see a similar delay in the

I see a similar delay in the AnyConnect client displaying the login prompt.  Checking the logs on both the client and the ASA indicate that the client doesn't even attempt to talk to the ASA until the very end, so it is all "client-side" slowness.

 

My initial suspicion is in the network provider order, but I was wondering if you found anything out from the TAC.

Re: I see a similar delay in the

I see the same delay on 40 seconds after upgrading my Client frm 4.0 to 4.5.01044. Wireshark does not show traffic between Client ant ASA in the delay period. Any solution?

1034
Views
0
Helpful
8
Replies
CreatePlease to create content