PeteNetLive | Technology that 'Just Works'

AnyConnect Error – ‘Failed To Get Configuration From Secure Gateway’

Oct19

0

AnyConnect Error – ‘Failed To Get Configuration From Secure Gateway’

Posted by PeteLong on Oct 19, 2017

AnyConnect Error – ‘Failed To Get Configuration From Secure Gateway’

KB ID 0001354 Problem Saw this while attempting to connect to my ASA this week. AnyConnect Secure Mobility Downloader Failed to get configuration from secure gateway. Contact your system administrator Solution Well luckily I’d just made a change so I could focus on the right area straight away. I’d been messing around with the profile xml file associated with my AnyConnect GroupPolicy. If you take a look at my profile below you will see it’s not associated. Note: If you select change group policy mine wouldn’t apply, it failed with an error trying to delete a profile I’d used in the past. So to fix the problem I’m going to need to log on at command line, let’s make sure my new profile is listed; Petes-ASA# show run webvpn webvpn enable outside anyconnect-essentials anyconnect image disk0:/anyconnect-macos-4.4.03034-webdeploy-k9.pkg 1 anyconnect image disk0:/anyconnect-win-4.4.03034-webdeploy-k9.pkg 2 anyconnect profiles AnyConnect-VPN-Profile disk0:/anyconnect-vpn-profile.xml anyconnect enable tunnel-group-list enable Note: You can ‘show flash‘ and make sure the file is in flash memory as well. I will list all my group-policies, and you can see the last one has a profile that’s associated with it that no longer exists (it’s not in flash memory either). Petes-ASA# show run group-policy group-policy DfltGrpPolicy attributes vpn-simultaneous-logins 0 group-policy IPSEC-VPN internal group-policy IPSEC-VPN attributes dns-server value 192.168.100.10 vpn-simultaneous-logins 3 vpn-tunnel-protocol ikev1 password-storage enable split-tunnel-policy tunnelspecified split-tunnel-network-list value SPLIT-TUNNEL default-domain value petenetlive.com nem enable group-policy PNL-GP-ANYCONNECT-ACCESS internal group-policy PNL-GP-ANYCONNECT-ACCESS attributes wins-server none dns-server value 8.8.8.8 8.8.4.4 vpn-simultaneous-logins 3 vpn-tunnel-protocol ssl-client split-tunnel-policy tunnelall split-tunnel-network-list value SPLIT-TUNNEL default-domain value petenetlive.com split-tunnel-all-dns enable webvpn anyconnect mtu 1398 anyconnect profiles value PNL-Profile type user anyconnect ssl df-bit-ignore enable It’s easy to remove it. Petes-ASA(config)# group-policy PNL-GP-ANYCONNECT-ACCESS attributes Petes-ASA(config-group-policy)# webvpn Petes-ASA(config-group-webvpn)# no anyconnect profiles Then simply add the correct one back in, and save the changes. Petes-ASA(config-group-webvpn)# anyconnect profiles value AnyConnect-VPN-Profie type user Petes-ASA(config-group-webvpn)# write mem Building configuration... Cryptochecksum: 67c49642 778e75bd df747b94 7d4c8787 23272 bytes copied in 3.260 secs (7757 bytes/sec) [OK] Now if you ‘refresh’ your ASDM, you will see it displays correctly again; Problem Solved. Related Articles, References, Credits, or External Links AnyConnect Error: ‘The AnyConnect package on the secure gateway could not be located’ Cisco AnyConnect Error: ‘The VPN client driver has encountered an error’ Cisco AnyConnect Error: ‘The client could not connect because of a secure gateway address failure. Please verify Internet connectivity and server address’ AnyConnect Error: ‘The secure gateway has rejected the connection attempt, No assigned address’ Cisco AnyConnect Error: (Mobile...

Cisco AnyConnect – Running ‘Logon Scripts / OnConnection Scripts’

Oct18

0

Cisco AnyConnect – Running ‘Logon Scripts / OnConnection Scripts’

Posted by PeteLong on Oct 18, 2017

Cisco AnyConnect – Running ‘Logon Scripts / OnConnection Scripts’

KB ID 0001353 Problem I’ve seen this asked a lot in forums, and it came up on EE again today. I’ve never had to set this up in the past, but I’ve posted the links to the correct Cisco articles when people have asked. After the question was asked again today, I thought I’d take the time to write a decent article on how to do it. Why would you want to do this? You might want to map/reconnect a mapped drive, or perform anything thats usually acheivable with a login script. Solution 1. First make sure you have your script, I’m using a simple batch file but you can also use .vbs. As you can see my script just maps a drive (s:) to a network share on the machine you are looking at. Note: I’ve used an IP address rather than a DNS name, there’s nothing wrong with using a DNS name, providing your remote AnyConnect clients are able to resolve that hostname. Note2: I’m also embedding the username and password in the drive mapping request, This is because my AnyConnect uses LOCAL usernames and passwords on the ASA, so the server wouldn’t be able to authenticate the request. 2. To ’embed’ this script into the firewall, log into the ASDM > Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Customization/Localization > Script > Import > Give it a name > Select ‘Script runs when client connects‘ > Platform = win > Browse Local...

Microsoft IIS – Stop Getting Indexed By Search Engines

Oct08

0

Microsoft IIS – Stop Getting Indexed By Search Engines

Posted by PeteLong on Oct 8, 2017

Microsoft IIS – Stop Getting Indexed By Search Engines

KB ID 0001352 Dtd 07/10/17 Problem If you have a publicly facing website, and you DON’T want it indexed by the major search engines, then this is the post for you. Why would you want this? Well you might have a development server that you don’t want appearing in peoples search results, or you might be hosting files and folders you want publicly available, but again you don’t want those files and folders showing...

Exchange 2010 – EMC Error ‘GetSteppablePipeline execution of scripts is disabled’

Oct05

0

Exchange 2010 – EMC Error ‘GetSteppablePipeline execution of scripts is disabled’

Posted by PeteLong on Oct 5, 2017

Exchange 2010 – EMC Error ‘GetSteppablePipeline execution of scripts is disabled’

KB ID 0001351 Dtd 05/10/17 Problem Seen when attempting to open the Exchange Management Console; Exception calling “GetSteppablePipeline: with “1” argument(s): File C:\ProgramFiles\Exchange Server\v14\RemoteScripts\ConsoleInitialize.ps1 cannot be loaded because the execution of scripts is disabled on this system. Please see “get-help about_signing” for more details.” Solution This is usually caused by an update rollup, and can be easily fixed by running the following command at an administrative PowerShell session. Set-ExecutionPolicy RemoteSigned -scope LocalMachine Note: Sometimes you...