Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Research Computing does not manage or maintain the CiscoVPN. It is maintained by the Enterprise Technology (ET) group. Below are some troubleshooting steps you can take. If none of these steps work, please reach out to ET for support.

Note

Important Update – February 7, 2025

On Friday, February 7, 2025, Enterprise Technology implemented a change to the Cisco VPN service to enhance the sign-in experience.

This update has caused compatibility issues with alternate VPN clients such as OpenConnect. Users attempting to connect via OpenConnect may encounter authentication or connection errors.

To ensure a smooth and reliable VPN connection, we strongly recommend using the official Cisco VPN client, which can be obtained from: https://sslvpn.asu.edu

MacOS Users - See This Section

Ubuntu Users - See This Section

DNS

DNS and Routing

First, ensure that you are connected to the VPN. Once you are connected, a small globe with a lock icon will appear. Hovering over it will display the "connected" status.

...

You may also need to run: docker network prune

MacOS Systems

The VPN Service is Unavailable

A common error on Mac OS systems is “Connect capability is unavailable because the VPN service is unavailable”

...

This is a known issue with the Cisco VPN on MacOS. Enterprise Technology (ET) has provided a patch for this, and it is available from ASU MyApps page under the heading “Is the SSL VPN failing to connect on your Mac?”

Note

When using the patch from ET, you must right-click and select “Open” from the menu, otherwise an error will appear.

Alternatively, you can run the following commands on your Mac:

Code Block
sudo cp /opt/cisco/secureclient/bin/Cisco\ Secure\ Client\ -\ AnyConnect\ VPN\ Service.app/Contents/Resources/com.cisco.secureclient.vpnagentd.plist /Library/LaunchDaemons/

sudo launchctl bootstrap system /Library/LaunchDaemons/com.cisco.secureclient.vpnagentd.plist

If prompted about blocked actions, click “Open System Settings”, and then “Allow” to allow the CiscoVPN to install the necessary network settings.

Then restart the Cisco VPN, and connect.

Uninstalling the VPN on MacOS

If you have to uninstall Cisco VPN, you will need to use the command line to remove it with the uninstall tool. MIT has some great documentation on this already:Cisco Anyconnect Manual uninstall Mac OS - Community Contributions - Hermes

Code Block
sudo /opt/cisco/secureclient/bin/vpn_uninstall.sh

Disable IPv6 on MacOS

In the System Settings, search for “IPv6” and change the “Configure IPv6” option to “Manually”.

...

Ubuntu Systems

Missing Required Libraries

On newer Ubuntu systems, the default installation of Ubuntu and the CiscoVPN client does not include the necessary libraries required for successful VPN connections. When attempting to connect to the VPN, you may encounter the following error:

...

To resolve this issue, install the missing webkit2gtk library from the Jammy repository by running the following commands:

Code Block
sudo add-apt-repository deb http://gb.archive.ubuntu.com/ubuntu jammy main
sudo apt update
sudo apt install libwebkit2gtk-4.0-dev 

Once installed, restart the CiscoVPN client and attempt to connect again.

Additional Troubleshooting for Visiting Student Accounts

...

WSL2 , problem with network connection when VPN used (PulseSecure) · Issue #5068 · microsoft/WSL wsl 2 ubuntu 18.04 unable to connect to IP resources with Cisco Annyconnect active · Issue #4277 · microsoft/WSL

Expand
titleOutdated Information

Using an Alternate Client

Openconnect on Ubuntu23

 

Step #1: Open the terminal and enter the following command to install the OpenConnect network manager:

Code Block
sudo apt-get install openconnect network-manager-openconnect network-manager-openconnect-gnome

 

Step #2: Click on the Network icon in the top corner, and then click the settings gear to open the network settings. Then click the “+” sign next to VPN.

Image ModifiedImage Modified

 

Step #3: Select Multi-protocol VPN client (openconnect).

Image Modified

 

Step #4: Enter the following info:

Image Modified

 

Step #5: Click on IPv6 and select Disable. Then click “Add” on the top right side.

Image Modified

 

Step #6: Your VPN profile has been created. Turn on its switch to connect to the VPN.

Image Modified

 

Step #8: Enter your ASURITE in the Username box, put your ASURITE password in the first password box, and then the second password box would be your DUO method, for example. “push” for a push notification to your device. Once these have been entered, click on “Login”.

Image Modified

Openconnect on MacOS

  1. Install Homebrew

  2. Open a terminal window and install Openconnect and Openconnect-GUI via homebrew

Code Block
brew install openconnect openconnect-gui
  1. Run Openconnect-GUI (you will need to right-click on the icon and choose open the first time you launch it)

  2. - Click on the Gear icon and choose New Profile (advanced)

Image Modified

 Enter the following:

Name: ASU Cisco VPN

Gateway: sslvpn.asu.edu

Username: yourasurite

Click Save

Click Connect

 

Image Modified

The first time you try to connect it will pop up this window.

Image Modified

 

  1. Click Accurate Information

  2. Click Connect again, the first Password Dialog is your ASURITE Password

Image Modified
  1. Click OK, the second Password is your preferred 2 factor authentication method, i.e. Push, Phone

On successful login the Lock icon will turn Green.

Image Modified

Additional Help 
Insert excerpt
Contact RC Support excerpt
Contact RC Support excerpt
nameContact RC Support
nopaneltrue

...