?
Solved

AnyConnect and iPhone

Posted on 2013-01-10
8
Medium Priority
?
479 Views
Last Modified: 2013-01-14
i am trying to get my iPhone to connect using the Cisco AnyConnect. I have installed the correct certificate (i believe) but still receiving an error that it requires a client certificate.
I tested the installed certificate by navigating to my vpn connection via safari and it allowed me in. Any ideas what might be the issue?

Thanks

Using iPhone 5 (6.02ios)
0
Comment
Question by:progjm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 1

Author Comment

by:progjm
ID: 38767239
thank you!
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 38767333
If it is asking for a client certificate, I would presume that the configuration on the ASA  requires a client certificate.

A copy of the ASA config would be useful
0
 
LVL 1

Author Comment

by:progjm
ID: 38767472
Here you go
5510-test.txt
0
Learn how to optimize MySQL for your business need

With the increasing importance of apps & networks in both business & personal interconnections, perfor. has become one of the key metrics of successful communication. This ebook is a hands-on business-case-driven guide to understanding MySQL query parameter tuning & database perf

 
LVL 37

Expert Comment

by:ArneLovius
ID: 38767710
From your config

tunnel-group Company-SSL-VPN webvpn-attributes
 authentication aaa certificate

Open in new window


By having the word "certificate", you are requiring client certificates, to remove the requirement, I woudl try the following in a console session

tunnel-group Company-SSL-VPN webvpn-attributes
 no authentication aaa certificate
 authentication aaa 

Open in new window


Then exit and save the config
0
 
LVL 1

Author Comment

by:progjm
ID: 38767747
Will this conflict with the current users and their SSL certs on laptops?
0
 
LVL 37

Accepted Solution

by:
ArneLovius earned 2000 total points
ID: 38768888
It will remove the requirement for client certificates.

Alternatively, use client certificates on the iPhones. Lokking at your config, you are running a CA on your ASA, the iPhones can enrol directly from the ASA in a similar method to laptop clients.
0

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Considering cloud tradeoffs and determining the right mix for your organization.
What we learned in Webroot's webinar on multi-vector protection.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question