Avatar of lffit
lffit
Flag for United States of America asked on

IPAD Cisco VPN client - Disable transparent tunneling

Our Cisco ASA is configured to allow connections from the Cisco IPSec VPN client. Recently we've noticed our users with Verizon Internet are not able to connect to the gateway unless the Enable Transparent Tunneling option is disabled under transport settings. Once this checkbox is unchecked, the VPN connection is successful.

Some of our executives use the built-in Cisco client on the IPad to connect to the VPN. These users are not able to connect when on the Verizon network. I cannot find any way to check whether transparent tunneling is configured or not in the VPN Client.

So the question is "is there a way to make sure the built-in Cisco VPN c;lient is not using transparent tunneling?"
iPadiOSHardware Firewalls

Avatar of undefined
Last Comment
lffit

8/22/2022 - Mon
ArneLovius

You might have a better experience using Anyconnect and Anyconnect Mobile as instead of using IPSec and the issues that some mobile networks have with IPSec, connection onlyu requires connectivity over port 443, the same as a HTTPS website.

If you do not use any of the "Anyconnect Premium" features, you would need to get an Anyconnect essentials licence to change the Anyconnect capability from just two clients to the total VPN pool count, and for teh mobile users you would need the Anyconnect mobile licence which allows the iPhone and iPad client to connect, from memory the Anyconnect essentials licence is ~$150 for an ASA 5510 and the Anyconnect Mobile licence is similar.
lffit

ASKER
This is not the solution that we're looking for since we can't update our ASA. I can't accept this as the solution.
ASKER CERTIFIED SOLUTION
ArneLovius

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
lffit

ASKER
We can try the anyconnect option since we do have 2 seats. Thanks for the detailed respsonse.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck