Bradford33

Q: VPN issues after updating to Cisco AnyConnect 3.1.04072?

Even after downloading the most recent version of Cisco Client 3.1.04072 (see below) I'm still getting a periodic disconnect and reconnect from my VPN client.  Issue only seems to occur when I'm connecting from outside my company's wi-fi network.  Happens on both my personal and on public wi-fi.  Is anyone else experiencing a similar issue?

 

Changes in AnyConnect 3.1.04072 (and 3.1.04074)

The Mac OS X versions of AnyConnect were updated to 3.1.04074 to resolve the problem of frequent disconnects of the AnyConnect VPN on systems running Mac OS X 10.9 (Mavericks). Apple is aware of this issue and you can reference Apple Bug Report ID 15261749 if you want to open your own case with them. AnyConnect 3.1.0474 also supports Mac OS X 10.8, 10.7 and 10.6.

Once Apple provides a fix for OS X 10.9, we may choose to retract this workaround. At that time, both versions 3.1.04074 and 3.1.04072 of AnyConnect will work reliably with Mac OS X 10.9.

Defect CSCui69769 was fixed by version 3.1.0704.

AnyConnect 3.1.04072 is a maintenance release that resolves the defects described in Caveats Resolved by AnyConnect 3.1.04072 and is compatible with Host Scan Engine Update, 3.1.04075.

MacBook Pro, OS X Mavericks (10.9), Mid 2009

Posted on Nov 14, 2013 4:56 AM

Close

Q: VPN issues after updating to Cisco AnyConnect 3.1.04072?

  • All replies
  • Helpful answers

  • by jishaq,

    jishaq jishaq Jan 8, 2014 11:54 AM in response to Bradford33
    Level 1 (0 points)
    Jan 8, 2014 11:54 AM in response to Bradford33

    I am having the same problem.  Every 45 seconds, AnyConnect will perform a "reconnecting / connected" cycle.  Some apps that can handle flakey networks, such as Outlook's send/receive mail, are almost unaffected by this.  Other services don't handle these network dropouts very well -- such as Perforce, and webapps I use on my company's intranet. 

     

    I have to time my form submission on our internal webapps so that they DON'T fall on a 45-second reconnect period, otherwise my submission will result in a 404 and I will typically have to re-type stuff. 

     

    I upgraded to the 3.1.04072 client, which is supposed to fix this issue.  For me, it's slightly better:  in some cases, it seems to have extended the interval between reconnects from 45 seconds up to a few minutes or so.  But other times, it's just as bad as the previous version I was using.

     

    So I agree with original poster - this fix doesn't seem to fix it 100%.

     

    See also duplicate thread here: https://discussions.apple.com/message/24433387#24433387

  • by Pete boston,

    Pete boston Pete boston Jan 9, 2014 6:15 AM in response to jishaq
    Level 1 (20 points)
    Jan 9, 2014 6:15 AM in response to jishaq

    You must have version 3.1.04074 or later to workaround this OS X 10.9 bug.  4072 does not contain any workarounds for this issue.  The current AnyConnect release is 3.1.05152

  • by jishaq,

    jishaq jishaq Jan 9, 2014 10:35 AM in response to Pete boston
    Level 1 (0 points)
    Jan 9, 2014 10:35 AM in response to Pete boston

    Pete is right, I apparently don't know how to read version numbers!  I downloaded the 3.1.05152 version of Cisco AnyConnect, and I no longer experience the reconnect issue on Mavericks.  Yea!

     

    In my defense, there is no such version 3.1.04074 listed on the download page:

     

    http://software.cisco.com/portal/pub/download/portal/select.html?&mdfid=28300018 5&flowid=17001&softwareid=282364313

     

    So I mistakenly downloaded 3.1.04072 in a moment of dyslexia.  I suspect I'm not the first person to come along and do this!

     

    PS:  You need a service contract with Cisco to download this file.  If you don't have one, and/or your IT administrator isn't able to provide you with one, you might try doing a google search for the actual filename:  anyconnect-macosx-i386-3.1.05152-k9.dmg.  If you go this route, at least compare the md5 checksum with the one listed on Cisco's website (it shows up if you hover your cursor over the file) to ensure you're not running a hacked VPN client.  For example, running "md5 anyconnect-macosx-i386-3.1.05152-k9.dmg" should produce a884f2092d08f006b2dc3a5054988f1c.  If it does not, it's not the same binary as on Cisco's downloads page so you probably don't want to run it.

  • by hootjr,

    hootjr hootjr Jan 15, 2014 9:22 AM in response to Bradford33
    Level 1 (0 points)
    Jan 15, 2014 9:22 AM in response to Bradford33

    This is still not working for me.  I have been following all of these threads.  I have a known good backup that is non-Mavericks and all clients work just fine there.  But at this point I've even gone as far as to upgrade to the very latest 3.1.05152 AnyConnect client and it is still doing the same thing.

     

    I have only ever used wireless to connect my MacBook Pro Retina, Mid 2012 laptop to my network.

     

    Does anyone know what the Apple bug is for?  I keep hearing references to an "OS" issue.  Is the issue with an OS version of tun/tap?  Is it something else?  Is there any OS workaround that I can initiate to fix this?  It is becoming a real pain to use alternate methods with SSH tunnels and such to get into my network.

  • by Pete boston,

    Pete boston Pete boston Jan 15, 2014 9:26 AM in response to hootjr
    Level 1 (20 points)
    Jan 15, 2014 9:26 AM in response to hootjr

    There is a workaround for the Apple OS X 10.9 arp bug in both AnyConnect 3.1.04074 and 3.1.0152.  If you are having an issue with either of these versions, then the problem you are experiencing is unlikely to be related to this discussion topic. You could still be running in to the other 10.9 specific issue which we have described and advised how to resolve at:

    http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/rele ase/notes/anyconnect31rn.html#wp161610

     

    If this is not your issue, you can email a DART (Diagnostics) bundle to ac-mobile-feedback@cisco.com and someone can help look in to your issue.