Solved

Error using SSL Web VPN Client

Posted on 2008-10-18
9
5,411 Views
Last Modified: 2012-05-05
Hi,

We are getting following error while connecting to ASA 5510 firewall using Mozilla web browser.

The installer was not able to start the Cisco SSL VPN Client.
Please contact your IT administrator for more information.
Click here to logout.

I have gone through some links, but most of them are for those who are facing above error on unsupported OS ( Like Vista ). Can you please advice what is required to configured. I have new problem connecting through IE.

Vijay

0
Comment
Question by:vsupreti
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 22752062
What version SSL VPN client?
What version OS on the ASA?
What OS on the client PC? XP/sp3?
Have you tried installing the client using the offline installer?
What version of Java? It is java based, so you have to have java installed first.
0
 

Author Comment

by:vsupreti
ID: 22752103
As I mentioned its Web VPN ASA 5100 solution. VPN client automatically get installed onto client PC. I am currently trying out on Windows XP, with Java version 1.5 ( SSL 3.0 and TLS 1.0 enabled ). I have no difficulty connecting to the firewall using Internet Explorer on the same machine. But hsing Mozilla I gt above error. Are there any specific settings required. Here are inline answers
What version SSL VPN client? SSL VPN Client for WebVPN ( Version 1.1.4.176 )
What version OS on the ASA? ASA 5100
What OS on the client PC? XP/sp3? XP
Have you tried installing the client using the offline installer? Not
What version of Java? It is java based, so you have to have java installed first. 1.5

Thanks and Regards
Vijay
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 22752483
I don't think that Mozilla supports the standard java VM 1.5
Here's some info from mozilla
http://plugindoc.mozdev.org/faqs/java.html

0
Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 

Author Comment

by:vsupreti
ID: 22754967
I have installed Java version 1.6 but even then I get the same error. Is there any specific Mozilla tunable required? Or any configuration changes at ASA5100?

Thanks
Vijay
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 22756733
If it works with IE and not with Mozilla, then it is not a ASA issue.
0
 

Author Comment

by:vsupreti
ID: 22758645
Then what's the solution?
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 50 total points
ID: 22759118
I found this information if it helps. Not sure if you even get to the accept certificate stage.
In Response to a Netscape, Mozilla, or Firefox "Certified by an Unknown Authority" Window

The following procedure explains how to install a self-signed certificate as a trusted root certificate on a client in response to a "Web Site Certified by an Unknown Authority" window. This window opens when you establish a Netscape, Mozilla, or Firefox connection to a ASA 5500 or VPN Concentrator that is not recognized as a trusted site. This window shows the following text:

Unable to verify the identity of <Hostname_or_IP_address> as a trusted site.

Install the certificate as a trusted root certificate as follows:

1. Click the Examine Certificate button in the "Web Site Certified by an Unknown Authority" window.
The Certificate Viewer window opens.
2. Click the "Accept this certificate permanently" option.
3. Click OK.
The ASA 5500 or VPN Concentrator window opens, signifying the certificate is trusted.

>Then what's the solution?
Don't use Mozilla.?.?.
Try an updated VPN client? 1.4.179 ?
This is from the release notes for .179 version

Resolved Issues:

The following issues were resolved in this release:

 CSCsm28133      SVC install fails when using Java installer with Firefox



0
 
LVL 1

Expert Comment

by:nhuanvn
ID: 22910969
I face the same error message:

****************************
The installer was not able to start the Cisco SSL VPN Client.
Please contact your IT administrator for more information.
Click here to logout.
****************************

on my Vista Home Premium for both IE7.0.6001.18000 and Mozilla 3.0.3. I don't know what to do yet.

0
 

Author Closing Comment

by:vsupreti
ID: 31507501
This solution works well.
1. Upgrade VPN client to 1.4.179
2. Upgrade Firefox to 3.0.5

Thanks
Vijay
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ASA AnyConnect tunneling 3 52
RV042 site to site vpn can ping but not access server via rdp 6 39
ASA 5505 latency problem 8 64
RDP- Windows 7 home Premium to 7 Pro via VPN 10 39
When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question