Cisco Anyconnect issue

[hsilgnede]

Hi, 

I have been using Cisco Anyconnect while working from hom for 10 months without any major issue. Last Friday it stopped working. I can still use it to connect on other wifi or my mobile phone hotspot. 

I've been through everything with my employers IT helpdesk including a re-install, flushing DNS and updating all drivers etc on the laptop. 

Sky were not able to offer any real assistance when I phoned their tech team this morning. 

Welcome any thoughts or assistance. 

Thank you

[Chrisee]

@hsilgnede given the lack of replies I suspect your issue is not something other users are experiencing and given Cisco Any connect is quite widely used if a Sky change was causing issues we would have had a number of posts. Sky do not support apps normally but where a number of customers are involved it can be referred to the experts.

Do any other of the employees of your company who use Sky Broadband have the same problem? 

[Dibley1973]

Out of the blue I started having a similar issue in laste November or early December 2023.  I cant remeber exactly but I finally raised the ticket with my organisation's It dept on 12 December.

When I try to connect to the CISCO Anyconnect VPN with my Sky broadband I get a dialog with the words "Failed to get configuration from secure gateway. Contact your administrator."

I contacted my organisations IT dept, and they reported they have not had any other reports of this issue. Apart from updating the AnyConnect to the latest version, which I had already done, they had no other suggestions, stating "There's been no recent changes to the VPN that would effect profile or connectivity."

I have tried connecting the CISCO AnyConnect VPN using the following ways:

- Tried via one home Wifi (via Sky broadband): FAIL
- Tried via another home Wifi (via Sky broadband): FAIL
- Tried via Ethernet  (via Sky broadband): FAIL
- Tried via Wifi from my phone hotspot connected to home Wifi (via Sky broadband): FAIL
- Tried via my phone hotspot connected to 02 mobile data : Success

Once I have done the initial connection using my phome mobile data plan, I can swicth back to the sky boradband via Wifi or ethernet for the rest of the day without issue.

This happened out of the blue. Has Sky started to restrict some jkind of data traffic which CISCO anyconnect uses for its initial handshake, or to get the configuration?

[Dibley1973]

Information I did get from my IT department that may be of use is:

Cisco Anyconnect all runs on port 443. It uses TCP/TLSV1.2 for the handshake then DTLS on UDP over port 443 for the actual tunnel. So as long as you can connect to https online and allow TCP/UDP traffic over the port without any advanced inspection then it should be absolutely fine. 

Does that help identify if SKY Broadband are restricting connectivity over any of these ports?