Enabling AnyConnect on ASA

[tylerhall]

I'm getting the 'AnyConnect is not enabled on the VPN server' error when trying to connect.   I assume it's because I never loaded the AnyConnect image on the ASA.

The Cisco docs state to download it on their website after logging in, but I can't seem to find it anywhere.... Can someone point me in the right direction?

[Tarik Admani · Accepted solution]

Its not in the ASA software area, if you go to www.cisco.com/go/anyconnect, there is download software link. You will select the *pkg file based the devices.

Tarik Admani
*Please rate helpful posts*

[Javier Portuguez · Accepted solution]

Hi,

Please go to http://tools.cisco.com/squish/D9CBd and select:

Web deployment package for Windows platforms.

anyconnect-win-3.0.08057-k9.pkg

Let me know if you run into any issues.

Thanks in advance.

Please rate this post if you find it useful.

[tylerhall]

I have a Mac, so I grabbed the file, uploaded it via tftp and ran:

vpn(config-webvpn)# svc image flash:/anyconnect-macosx-i386-3.0.08057-k9.pkg

However, when I go to http://myVPN.hostname, it asks me to log in and afterwards, I'm expecting it to ask me to install the Mac client, but it gives me this portal instead:

http://i.imgur.com/TbbKX.png

Thanks!

[Greg Dickinson]

I think you have to go into the portal customization in ASDM and enable the "AnyConnect" tab.  I can grab a screen shot tomorrrow if you need more help.  There's probably a way to do it in the CLI but I don't know how off the top of my head.

[Tarik Admani]

Here is some good reference material on how to configure anyconnect connections:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_anyconnect.html#wp1074591

Thanks,

Tarik Admani
*Please rate helpful posts*

[Javier Portuguez]

Hi Tarik,

Good link to share, you get 5

[Javier Portuguez]

Hi Greg,

Nice post and I agree with you about the Customization option.

[Javier Portuguez]

Please make sure you have the SSL client protocol (AnyConnect) enable in the group-policy.

Also and as mentioned previously by Greg, make sure you have it enabled on the customization file.

Additional steps:

Prompting Remote Users

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_anyconnect.html#wp1090443

Let us know.

Please rate any post that you find useful.