Our customer is complaining with his VPN connectivity, "During travel, I often have issues with the VPN connection. It often disconnects and then cannot connect again. I sometimes find that I have to shut my laptop down and reboot before it works again. When in the UK it may be due to the portable modem, however I notice it still does it when I connect to a normal wifi connection. In Germany I connected through hardwire landline but it often still disconnects."
But checking the Cisco ASA FW, other users our connected for long period of time already & even my own VPN connection is working fine. Is there any other things that we need to look into the VPN Network to further isolate the issue. As we are suspecting it could be the internet connection problem but he's saying that he tried to connect to different internet mediums still the same problem persist.
I would ask the user (if possible) to test connectivity with another computer/laptop for a period of time since the common factor in the problems seems to be the actual device rather than any WAN connection the user uses to connect with the VPN.
You could also consider a clean/fresh install of the VPN Client software for this user.
I would also check the logs for the reason his VPN connections are brought down and why the new connection fails.
If you are using Cisco IPsec VPN client then I would suggest moving into AnyConnect.
Logs on the ASA are useful as well (Please consider a Syslog server)
If the problem is with Anyconnect, please verify if this is regular connection or if Always on is being used, Always on should mantain the connection when the user logs in and when we lose it they will continually try to connect
If the problem persists you will need to gather the Dart file
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...