5

I'm trying to set up connection via VPN. I need to use Cisco AnyConnect. First I was getting error Cerfitication validation error. Then I added certificate (.pfx format) through firefox. Then When I tried to connect again with AnyConnect, it popped me to enter username and password.

I entered both username and password, but when I pressed to log in, I got this error:

The AnyConnect package on the secure gateway could not be located. You may be experiencing network connectivity issues. Please try connecting again.

I also tried OpenConnect, I managed to connect with it (I get response that I successfully connected). But when I tried to enter client website, it just start loading and nothing happens. When I tried to ping client's website, it returns IP only once and stops.

What could be the cause?

P.S. My client said that using OpenConnect, might not let to see website, because of OpenConnect not knowing what kind of access I got to their site.

Update My log when connecting via AnyConnect (anynimized info):

Jun 18 16:55:39 user-Dell acvpnagent[1373]: Function: logInterfaces File: ../../vpn/AgentUtilities/Routing/InterfaceRouteMonitorCommon.cpp Line: 477 IP Address Interface List: 111.111.111.111 FE80:0:0:0:868F:69FF:FEBD:5983 
Jun 18 16:55:39 user-Dell dbus[691]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Jun 18 16:55:39 user-Dell avahi-daemon[799]: Withdrawing workstation service for vpn0.
Jun 18 16:55:39 user-Dell NetworkManager[1042]:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/vpn0, iface: vpn0)
Jun 18 16:55:44 user-Dell NetworkManager[1042]: <info> VPN service 'openconnect' disappeared
Jun 18 16:55:58 user-Dell acvpnui[5515]: Initializing vpnapi version 3.1.03103 ().
Jun 18 16:55:58 user-Dell acvpnui[5515]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 103 No profile is available.
Jun 18 16:55:58 user-Dell acvpnui[5515]: Function: getCurrentState File: ../../vpn/Api/ClientIfcBase.cpp Line: 2058 API service not ready
Jun 18 16:55:58 user-Dell acvpnui[5515]: Current Preference Settings: ServiceDisable: false CertificateStoreOverride: false CertificateStore: All ShowPreConnectMessage: false AutoConnectOnStart: false MinimizeOnConnect: true LocalLanAccess: false AutoReconnect: true AutoUpdate: true ProxySettings: Native AllowLocalProxyConnections: true PPPExclusion: Disable PPPExclusionServerIP:  EnableScripting: false TerminateScriptOnNextEvent: false AuthenticationTimeout: 12 IPProtocolSupport: IPv4,IPv6 AllowManualHostInput: true BlockUntrustedServers: false PublicProxyServerAddress:  
Jun 18 16:55:58 user-Dell acvpnui[5515]: Function: CvcGtkNotifyBalloon File: ../../../vpn/GUI/Linux/CvcGtkNotifyBalloon.cpp Line: 87 Invoked Function: dlopen Return Code: -33554427 (0xFE000005) Description: libnotify.so.1: cannot open shared object file: No such file or directory 
Jun 18 16:55:58 user-Dell acvpnui[5515]: Function: OnNegotiateMessageTypesComplete File: ../../vpn/Api/ApiIpc.cpp Line: 726 Master Agent Connection started.
Jun 18 16:55:59 user-Dell acvpnui[5515]: VPN state: Disconnected Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined
Jun 18 16:55:59 user-Dell acvpnui[5515]: Function: setConnectRequestComplete File: ../../vpn/Api/ConnectMgr.cpp Line: 9127 Connect request complete. Proceeding to cleanup.
Jun 18 16:55:59 user-Dell acvpnui[5515]: Function: activateConnectEvent File: ../../vpn/Api/ConnectMgr.cpp Line: 1351 NULL object. Cannot establish a connection at this time.
Jun 18 16:55:59 user-Dell acvpnui[5515]: Message type information sent to the user: Ready to connect.
Jun 18 16:55:59 user-Dell acvpnui[5515]: Function: attach File: ../../vpn/Api/ClientIfcBase.cpp Line: 629 Client successfully attached.
Jun 18 16:56:00 user-Dell acvpnui[5515]: An SSL VPN connection to some_host has been requested by the user.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getHostInitSettings File: ../../vpn/Api/ProfileMgr.cpp Line: 876 Profile () not found. Using default settings.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 103 No profile is available.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host
Jun 18 16:56:00 user-Dell acvpnui[5515]: Using default preferences. Some settings (e.g. certificate matching) may not function as expected if a local profile is expected to be used. Verify that the selected host is in the server list section of the profile and that the profile is configured on the secure gateway.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getHostInitSettings File: ../../vpn/Api/ProfileMgr.cpp Line: 876 Profile () not found. Using default settings.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getCertList File: ../../vpn/Api/ApiCert.cpp Line: 325 Number of certificates found: 1
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: setConnectionData File: ../../vpn/Api/ConnectMgr.cpp Line: 1875 Certificate retrieved from preferences: Subject Name: DC=lt, DC=vlk, DC=vlkad, OU=Kiti, OU=Kontraktoriai, OU=Companies, CN=user Issuer Name : DC=lt, DC=vlk, DC=vlkad, CN=VLK CA Store : Firefox
Jun 18 16:56:00 user-Dell acvpnui[5515]: Message type information sent to the user: Contacting some_host.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Initiating VPN connection to the secure gateway https://some_host
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Using default preferences. Some settings (e.g. certificate matching) may not function as expected if a local profile is expected to be used. Verify that the selected host is in the server list section of the profile and that the profile is configured on the secure gateway.
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Function: processConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 11423 Received connect notification (host some_host, profile N/A)
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Function: GetSupportedIPProtocols File: ../../vpn/Api/PreferenceMgr.cpp Line: 231 The endpoint does not fully support IPv6. IPProtocolSupport value IPv4,IPv6 is being overridden and only IPv4 will be used.
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Function: logResolutionResult File: ../../vpn/Common/Utility/HostLocator.cpp Line: 913 Host some_host has been resolved to IP address 111.111.111.111
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Writing to hosts file:  111.111.111.111#011some_host ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed. 
Jun 18 16:56:00 user-Dell acvpnagent[1373]: Function: respondToConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 4850 The requested VPN connection to some_host will target the following IP protocols and addresses: primary - IPv4 (address 111.111.111.111), secondary - N/A.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1928 PasswordEntry username is user
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 355 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok 
Jun 18 16:56:00 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 355 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok ]
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 857 Return success from VerifyServerCertificate
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: handleRedirects File: ../../vpn/Api/ConnectIfc.cpp Line: 826 Redirecting to: https://some_host/+webvpn+/index.html
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: setPromptAttributes File: ../../vpn/Api/ConnectMgr.cpp Line: 4058 The certificate authority is disabled on the secure gateway.
Jun 18 16:56:00 user-Dell acvpnui[5515]: The following error message was received from the secure gateway: Certificate Validation Failure
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 267 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 43 
Jun 18 16:56:00 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 267 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 43 ]
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: isSWEnabled File: ../../vpn/Api/SDIMgr.cpp Line: 1027 Invoked Function: PreferenceMgr::getPreference Return Code: -30343157 (0xFE31000B) Description: PREFERENCEMGR_ERROR_PREFERENCE_NOT_FOUND SafeWordSofTokenIntegration
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 336 Authentication is not token based (OTP). 
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: nextClientCert File: ../../vpn/Api/ConnectMgr.cpp Line: 5193 Subject Name: DC=lt, DC=vlk, DC=vlkad, OU=Kiti, OU=Kontraktoriai, OU=Companies, CN=user Issuer Name : DC=lt, DC=vlk, DC=vlkad, CN=VLK CA Store : Firefox
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1928 PasswordEntry username is user
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 355 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok 
Jun 18 16:56:00 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 355 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok ]
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 857 Return success from VerifyServerCertificate
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1928 PasswordEntry username is user
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: setPromptAttributes File: ../../vpn/Api/ConnectMgr.cpp Line: 4058 The certificate authority is disabled on the secure gateway.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 267 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 43 
Jun 18 16:56:00 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 267 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 43 ]
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: isSWEnabled File: ../../vpn/Api/SDIMgr.cpp Line: 1027 Invoked Function: PreferenceMgr::getPreference Return Code: -30343157 (0xFE31000B) Description: PREFERENCEMGR_ERROR_PREFERENCE_NOT_FOUND SafeWordSofTokenIntegration
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 336 Authentication is not token based (OTP). 
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Function: getHostInitSettings File: ../../vpn/Api/ProfileMgr.cpp Line: 876 Profile () not found. Using default settings.
Jun 18 16:56:00 user-Dell acvpnui[5515]: Message type prompt sent to the user: Please enter your username and password.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: userResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 1316 Processing user response.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: send File: ../../vpn/Api/ConnectIfc.cpp Line: 1061 Auth Cookie acquired
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: send File: ../../vpn/Api/ConnectIfc.cpp Line: 1069 Config Cookie acquired
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 2878 Authentication succeeded
Jun 18 16:56:22 user-Dell acvpnui[5515]: VPN state: Connecting Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined
Jun 18 16:56:22 user-Dell acvpnui[5515]: Message type information sent to the user: Establishing VPN session...
Jun 18 16:56:22 user-Dell acvpnui[5515]: The group policy on the secure gateway does not have an AnyConnect profile configured. Though there may one or more local copies of AnyConnect profiles, the hardcoded default settings will be used.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: SendRequest File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1375 Invoked Function: curl_easy_perform Return Code: -30015438 (0xFE360032) Description: CTRANSPORT_ERROR_HTTP_RETURNED_ERROR:The HTTP server returned an error code (>= 400) HTTP status code received 404
Jun 18 16:56:22 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: SendRequest File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1375 Invoked Function: curl_easy_perform Return Code: -30015438 (0xFE360032) Description: CTRANSPORT_ERROR_HTTP_RETURNED_ERROR:The HTTP server returned an error code (>= 400) HTTP status code received 404]
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: getPackageURL File: ../../vpn/Api/ConnectIfc.cpp Line: 2513 Redirect encountered after authentication. This indicates the secure gateway did not receive a valid credential. Check the security settings in Internet Explorer; they may be set too high.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: getUpdateFileContent File: ../../vpn/Api/ConnectIfc.cpp Line: 1366 Unable to locate Update file
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: TranslateStatusCode File: ../../vpn/Api/ConnectIfc.cpp Line: 2990 Invoked Function: TranslateStatusCode Return Code: -30080998 (0xFE35001A) Description: CONNECTIFC_ERROR_UPDATEFILE_NOT_FOUND Connection attempt failed.  Please try again.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: useCachedDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 6687 Invoked Function: ConnectIfc::getUpdateFileContent Return Code: -30080998 (0xFE35001A) Description: CONNECTIFC_ERROR_UPDATEFILE_NOT_FOUND 
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: SendRequest File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1375 Invoked Function: curl_easy_perform Return Code: -30015438 (0xFE360032) Description: CTRANSPORT_ERROR_HTTP_RETURNED_ERROR:The HTTP server returned an error code (>= 400) HTTP status code received 404
Jun 18 16:56:22 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: SendRequest File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1375 Invoked Function: curl_easy_perform Return Code: -30015438 (0xFE360032) Description: CTRANSPORT_ERROR_HTTP_RETURNED_ERROR:The HTTP server returned an error code (>= 400) HTTP status code received 404]
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: getPackageURL File: ../../vpn/Api/ConnectIfc.cpp Line: 2513 Redirect encountered after authentication. This indicates the secure gateway did not receive a valid credential. Check the security settings in Internet Explorer; they may be set too high.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: getDownloader File: ../../vpn/Api/ConnectIfc.cpp Line: 1243 ConnectIfc::getPackageURL() is empty, unable to locate downloader
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: TranslateStatusCode File: ../../vpn/Api/ConnectIfc.cpp Line: 2990 Invoked Function: TranslateStatusCode Return Code: -30081007 (0xFE350011) Description: CONNECTIFC_ERROR_DOWNLOADER_NOT_FOUND The AnyConnect package on the secure gateway could not be located. You may be experiencing network connectivity issues. Please try connecting again.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: launchRemoteDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 7091 Invoked Function: ConnectIfc::getDownloader Return Code: -30081007 (0xFE350011) Description: CONNECTIFC_ERROR_DOWNLOADER_NOT_FOUND 
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: launchDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 7275 Invoked Function: ConnectMgr::launchRemoteDownloader Return Code: -30081007 (0xFE350011) Description: CONNECTIFC_ERROR_DOWNLOADER_NOT_FOUND 
Jun 18 16:56:22 user-Dell acvpnui[5515]: Using default preferences. Some settings (e.g. certificate matching) may not function as expected if a local profile is expected to be used. Verify that the selected host is in the server list section of the profile and that the profile is configured on the secure gateway.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host.
Jun 18 16:56:22 user-Dell acvpnui[5515]: message repeated 2 times: [ Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 796 No profile available for host some_host.]
Jun 18 16:56:22 user-Dell acvpnui[5515]: Function: reloadPreferencesAfterUpdates File: ../../vpn/Api/ConnectMgr.cpp Line: 9314 Secure gateway (some_host) was not found in profile .
Jun 18 16:56:22 user-Dell acvpnui[5515]: Message type information sent to the user: Connection attempt has failed.
Jun 18 16:56:22 user-Dell acvpnui[5515]: Message type error sent to the user: The AnyConnect package on the secure gateway could not be located. You may be experiencing network connectivity issues. Please try connecting again.

Log when 'successfully connected via OpenConnect, but actually can't open clients website and ping give response only once':

Jun 18 17:02:31 user-Dell dbus[691]: [system] Activating service name='org.some_other_domain.hostname1' (using servicehelper)
Jun 18 17:02:31 user-Dell dbus[691]: [system] Successfully activated service 'org.some_other_domain.hostname1'
Jun 18 17:15:20 user-Dell NetworkManager[1042]: <info> Starting VPN service 'openconnect'...
Jun 18 17:15:20 user-Dell NetworkManager[1042]: <info> VPN service 'openconnect' started (org.some_other_domain.NetworkManager.openconnect), PID 7555
Jun 18 17:15:20 user-Dell NetworkManager[1042]: <info> VPN service 'openconnect' appeared; activating connections
Jun 18 17:15:25 user-Dell acvpnui[5515]: Function: detach File: ../../vpn/Api/ClientIfcBase.cpp Line: 438 Shutting down vpnapi
Jun 18 17:15:25 user-Dell acvpnagent[1373]: Function: OnIpcMessageReceived File: ../../vpn/Common/IPC/IPCDepot.cpp Line: 1047 Invoked Function: CIpcTransport::OnSocketReadComplete Return Code: -33292279 (0xFE040009) Description: IPCTRANSPORT_ERROR_UNEXPECTED 
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> VPN plugin state changed: starting (3)
Jun 18 17:15:28 user-Dell NetworkManager[1042]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/vpn0, iface: vpn0)
Jun 18 17:15:28 user-Dell NetworkManager[1042]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/vpn0, iface: vpn0): no ifupdown configuration found.
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <warn> /sys/devices/virtual/net/vpn0: couldn't determine device driver; ignoring...
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> VPN connection 'Something - OpenConnect' (Connect) reply received.
Jun 18 17:15:28 user-Dell openconnect[7579]: Attempting to connect to server 111.111.111.111:443
Jun 18 17:15:28 user-Dell openconnect[7579]: SSL negotiation with some_host
Jun 18 17:15:28 user-Dell openconnect[7579]: Connected to HTTPS on some_host
Jun 18 17:15:28 user-Dell openconnect[7579]: Got CONNECT response: HTTP/1.1 200 OK
Jun 18 17:15:28 user-Dell openconnect[7579]: CSTP connected. DPD 30, Keepalive 20
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> VPN connection 'Something - OpenConnect' (IP Config Get) reply received.
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> VPN connection 'Something - OpenConnect' (IP4 Config Get) reply received.
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> VPN Gateway: 111.111.111.111
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> Tunnel Device: vpn0
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> IPv4 configuration:
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Internal Address: 11.11.222.333
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Internal Prefix: 20
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Internal Point-to-Point Address: 11.11.222.333
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Maximum Segment Size (MSS): 0
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Static Route: 10.10.0.83/32   Next Hop: 10.10.0.83
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Static Route: 10.10.0.64/32   Next Hop: 10.10.0.64
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Static Route: 10.10.0.63/32   Next Hop: 10.10.0.63
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Forbid Default Route: yes
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Internal DNS: 10.10.0.63
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   Internal DNS: 10.10.0.64
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info>   DNS Domain: 'domain'
Jun 18 17:15:28 user-Dell NetworkManager[1042]: <info> No IPv6 configuration
Jun 18 17:15:28 user-Dell openconnect[7579]: Connected vpn0 as 11.11.222.333, using SSL
Jun 18 17:15:28 user-Dell openconnect[7579]: Established DTLS connection (using OpenSSL)
Jun 18 17:15:29 user-Dell NetworkManager[1042]: <info> VPN connection 'Something - OpenConnect' (IP Config Get) complete.
Jun 18 17:15:29 user-Dell NetworkManager[1042]: <info> Policy set 'Wired connection 1' (eth0) as default for IPv4 routing and DNS.
Jun 18 17:15:29 user-Dell acvpnagent[1373]: A new network interface has been detected.
Jun 18 17:15:29 user-Dell acvpnagent[1373]: Function: logInterfaces File: ../../vpn/AgentUtilities/Routing/InterfaceRouteMonitorCommon.cpp Line: 477 IP Address Interface List: 111.111.11.54 11.11.222.333 FE80:0:0:0:868F:69FF:FEBD:5983 
Jun 18 17:15:29 user-Dell NetworkManager[1042]: <info> Writing DNS information to /sbin/resolvconf
Jun 18 17:15:29 user-Dell dnsmasq[1801]: setting upstream servers from DBus
Jun 18 17:15:29 user-Dell dnsmasq[1801]: using nameserver 10.10.0.64#53 for domain some-domain
Jun 18 17:15:29 user-Dell dnsmasq[1801]: using nameserver 10.10.0.64#53 for domain domain
Jun 18 17:15:29 user-Dell dnsmasq[1801]: using nameserver 10.10.0.63#53 for domain some-domain
Jun 18 17:15:29 user-Dell dnsmasq[1801]: using nameserver 10.10.0.63#53 for domain domain
Jun 18 17:15:29 user-Dell dnsmasq[1801]: using nameserver 111.111.11.1#53
Jun 18 17:15:29 user-Dell dbus[691]: [system] Activating service name='org.some_other_domain.nm_dispatcher' (using servicehelper)
Jun 18 17:15:29 user-Dell NetworkManager[1042]: <info> VPN plugin state changed: started (4)
Jun 18 17:15:29 user-Dell dbus[691]: [system] Successfully activated service 'org.some_other_domain.nm_dispatcher'
Jun 18 17:15:29 user-Dell NetworkManager[1042]:    keyfile: updating /etc/NetworkManager/system-connections/VPN connection 1
1

I realize this is a bit late and perhaps you already have an answer. It appears from my own investigation that the error is because AnyConnect requires a specific Certificate with your username.

I haven not been able to confirm/deny this on my end because I do not have access to a Certificate Authority within my organization. However, here are a couple of links that may help you to resolve the problem.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a008009256b.shtml#wp39121

https://supportforums.cisco.com/discussion/11533701/cisco-anyconnect-3008057-certificate-validation-failure

My research was based on looking at my own eventvwr and finding the errors. Not sure if it will help you or not.

  • 2
    Although your answer is 100% correct, it might also become 100% useless if that link is moved, changed, or the main site just disappears... :-( Therefore, please edit your answer, and copy the relevant steps from the link into your answer, thereby guaranteeing your answer for 100% of the lifetime of this site! ;-) You can always leave the link in at the bottom of your answer as a source for your material... – Fabby Feb 20 '15 at 18:58
0

Install Open client for Cisco AnyConnect VPN from Ubuntu Software center, then use openconnect command.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.