Solved

AnyConnect and iPhone

Posted on 2013-01-10
8
478 Views
Last Modified: 2013-01-14
i am trying to get my iPhone to connect using the Cisco AnyConnect. I have installed the correct certificate (i believe) but still receiving an error that it requires a client certificate.
I tested the installed certificate by navigating to my vpn connection via safari and it allowed me in. Any ideas what might be the issue?

Thanks

Using iPhone 5 (6.02ios)
0
Comment
Question by:progjm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 1

Author Comment

by:progjm
ID: 38767239
thank you!
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 38767333
If it is asking for a client certificate, I would presume that the configuration on the ASA  requires a client certificate.

A copy of the ASA config would be useful
0
 
LVL 1

Author Comment

by:progjm
ID: 38767472
Here you go
5510-test.txt
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
LVL 37

Expert Comment

by:ArneLovius
ID: 38767710
From your config

tunnel-group Company-SSL-VPN webvpn-attributes
 authentication aaa certificate

Open in new window


By having the word "certificate", you are requiring client certificates, to remove the requirement, I woudl try the following in a console session

tunnel-group Company-SSL-VPN webvpn-attributes
 no authentication aaa certificate
 authentication aaa 

Open in new window


Then exit and save the config
0
 
LVL 1

Author Comment

by:progjm
ID: 38767747
Will this conflict with the current users and their SSL certs on laptops?
0
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38768888
It will remove the requirement for client certificates.

Alternatively, use client certificates on the iPhones. Lokking at your config, you are running a CA on your ASA, the iPhones can enrol directly from the ASA in a similar method to laptop clients.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
Part One of the two-part Q&A series with MalwareTech.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question