VPN disconnects when iPhone goes into auto-lock ?

+1 I would like to see this addressed. Using public wifi is not a viable option for business users w/o this feature working reliably. I see the security issue on an admin standpoint to have a device automatically hooking to your private network as soon as it comes out of "sleep" but that can be handled on the VPN server side. It should not be imposed by the device. This is a bug IMHO.

It just waste the battery because it turns your moniter off but your CPU still runs. The direct solution is here: http://dangmars.blogspot.com/2011/08/how-to-keep-cisco-vpn-stay-connected-on.htm l I found it by chance 🙂. My VPN works perfectly now.

Ok, Jail Breaking the phone is not the answer. The problem is the iPhone and how the VPN tunnel works -- the iPhone shuts down its transmitter when in auto-lock to save battery probably. When this happens the VPN tunnel can no longer send keep-alive messages to the concentrator so the tunnel drops.

The answer is for Cisco to modify the VPN client so that it is not required to send keep-alives, but allow incoming messages from the network. I'm no security expert, so this could violate all kinds of best practice recommendations and security policies.

Our solution was to install Good for Enterprise which is an email proxy solution with a server on prem. It uses a special email client that continuously listens even when in auto-lock. It is able to provide alerts to the client about email and calendar events. When you wake up the phone it does a quick sync and runs normal, all emails are available. This works with Exchange and Lotus Notes backend. The Good for Enterprise does NOT require a VPN, it does its own security certificate exchange and encryption.

The answer is to use Cisco AnyConnect VPN with PKI certificates. We are testing this and it works pretty well. It is possible to set the VPN to be persistant and it only reauthenticates when it wakes up, it does this very quickly and using PKI certs it does not require any manual intervention. The tunnel restablishes very quickly.

Requires Cisco ASA on the host side at your data center, requires some method of securely distributing the digital certificates and a certificate authority, either your own or subscribe to Verisign or equivalent. It is not a simple proposition to implement, you need to be committed and have some resources to get it done.

What about the inherent Push problem regarding data transfers while the phone is locked or asleep -- will your Cisco AnyConnect still keep that data through its (disconnected) tunnel safe? I think this is half of the issue. Not only do you have to turn it back on when waking (no matter how fast) but it is still insecure while sleeping. No VPN will help that unless it remains intact even while locked and sleeping.

I've found that the VPN connection does not drop during sleep as long as the iPhone (4s, iOS 5.0.1) is kept plugged in. So here is one possible solution:

Buy a charging holster for your 3G or 3GS (Amazon), or one of the multitude of charging cases for your 4 or 4S --your VPN connection should stay alive, and your battery gets some needed reinforcement for the increased power drain that will occur.

This should work, at least until the external battery pack runs out of juice.

I read somewhere, I dont recall if it was in this thread or not, that this problem doesn't exist if you connect a VPN using Cisco AnyConnect app. I installed the app, and couldn't setup the VPN for my purposes because, as I expected, you need to use ot with Cisco VPN equipment/router. HOWEVER... The first time I launched the app, it said something like "AnyConnect will make changes to the way VPNs work on your device. Is this OK?" and I clicked yes/ok/proceed, whatever the button said. Ever since this time, my VPN has not disconnected when going to sleep. I don't even have the app anymore, I removed it when I realized it wouldn't work for me.

If you are able to establish a Cisco VPN, then it will also auto-reconnect when you go from wi-fi to 3g, loose and regain a connection, etc. It is designed to keep you constantly connected to the corporate network. However, it appears part of what it does is change the VPN functions of iOS sothe VPN does not drop after 30 seconds of being in sleep mode. I have gone 6 hours with the VPN remaining connected through 30 min to an hour of sleep at a time.

I hope this helps others out there. Just install Cisco AnyConnect, run it, accept/allow the changes, and reply to this post to let others know it it resoved the problem for you too. Once you have got it working, you can uninstall AnyConnect and it will still work.

**I dont know if there is a way to undo this, so once it changes the VPN to persistent you cant go back to the sleep-and-disconnect way, but why would you want to?

I tried this with little success. I did see that the VPN doesn't disconnect when the iPhone is plugged into the dock, then it stays connected for the whole day. So it does look like an automatic power management issue.

I dropped my iPad (shattered screen), and had to replace it with a refurbished model. I can't get the VPN to stay conmected any more on y new iPad, even with the AnyConnect app. I guess I just got lucky last time, the VPN would only disconnect when I left WiFi. This really *****. I've tried everything I did last time, to no avail. I miss the persistent VPN connection-- I know it's possible because it worked on my last iPad2. It didn't create any significant battery drain either-- then again, I was on an iPad which has a bigger battery than iPhone, so the drain wouldn't be quite as noticable.

If I get it working again I'll be sure to update this thread.

It seems to save the battery getting drained out the vpn connection is getting auto terminated. People have suggested to turn off the auto lock feature. Though that solves the problem, but is a double security threat.

Another work around for the problem is to keep the phone on charge. For me the VPN does not get disconnected even after auto lock when the phone is on charge.

I'm not seeing this behavior with the iphone 4S, set up with VPN and autopush exchange. The VPN survives auto-lock as well as manual lock when on charge or not for brief periods (1-5 minutes), but not longer periods. Could this behavior be coming from an inactivity setting (or even a session setting) on the VPN?

Same frustrations here. Given the nature of push notifications, automated email checks, etc, it's simply untenable in a business enviornment to not have the option to sacrifice battery for always-on vpn.

Hi people! I hope you are fine.

This problem was concerning me a long time ago. The infraestructure to establish the VPN connection is the following: Ipad2, dsl connection, IPSEC between ipad and Fortigate 60c. The only way i have to avoid disconnection when the ipad sleep was set "Automatic Block: Never". I try with Cisco anyconnect but i cant because my VPN does not use cert., only user, group and PSK. Jailbreak... Nah... the solution was Update the ipad to the version 5.1 (9B176).

After the upgrade, i set the VPN again and set the auto lock to 2 minutes. Then, when i go Unlock with the button the vpn still connected (or reconnected, do not investigate a lot)!!!

I hope this comment can help more than one!

Regards, Diego (Uruguay)