Link to home
Start Free TrialLog in
Avatar of lffit
lffitFlag for United States of America

asked on

IPAD Cisco VPN client - Disable transparent tunneling

Our Cisco ASA is configured to allow connections from the Cisco IPSec VPN client. Recently we've noticed our users with Verizon Internet are not able to connect to the gateway unless the Enable Transparent Tunneling option is disabled under transport settings. Once this checkbox is unchecked, the VPN connection is successful.

Some of our executives use the built-in Cisco client on the IPad to connect to the VPN. These users are not able to connect when on the Verizon network. I cannot find any way to check whether transparent tunneling is configured or not in the VPN Client.

So the question is "is there a way to make sure the built-in Cisco VPN c;lient is not using transparent tunneling?"
Avatar of ArneLovius
ArneLovius
Flag of United Kingdom of Great Britain and Northern Ireland image

You might have a better experience using Anyconnect and Anyconnect Mobile as instead of using IPSec and the issues that some mobile networks have with IPSec, connection onlyu requires connectivity over port 443, the same as a HTTPS website.

If you do not use any of the "Anyconnect Premium" features, you would need to get an Anyconnect essentials licence to change the Anyconnect capability from just two clients to the total VPN pool count, and for teh mobile users you would need the Anyconnect mobile licence which allows the iPhone and iPad client to connect, from memory the Anyconnect essentials licence is ~$150 for an ASA 5510 and the Anyconnect Mobile licence is similar.
Avatar of lffit

ASKER

This is not the solution that we're looking for since we can't update our ASA. I can't accept this as the solution.
ASKER CERTIFIED SOLUTION
Avatar of ArneLovius
ArneLovius
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of lffit

ASKER

We can try the anyconnect option since we do have 2 seats. Thanks for the detailed respsonse.