You can fix the most commonly encountered issues with Cisco AnyConnect Secure Mobility Client connections by altering your browser settings. If you are having problems, please see the following notes:
In these notes the term "Security Gateway" refers to the Cisco device to which the Cisco AnyConnect Secure Mobility Client connects. Examples of Security Gateways include the Adaptive Security Appliance 5500 and Catalyst 6000.
The complete release notes for this product cover additional issues and are available from Cisco's website.
SSL uses certificates to identify peers in a connection. The Security Gateway has a certificate installed that is used to establish its identity. The certificate may be issued from a widely trusted source, such as Verisign or Thawte, that your computer is already configured to trust. Or it may be issued from a self-signed certificate that your computer does not trust automatically, resulting in security warnings during connection establishment.
This section explains how to install a self-signed certificate as a trusted root certificate on a client in response to the browser alert windows.
In Response to Firefox "Certified by an Unknown Authority" WindowInstall the certificate as a trusted root certificate as follows:
Install the certificate as a trusted root certificate as follows:
Any browser that supports the Java plugin should work for Cisco AnyConnect Secure Mobility Client’s web launch. On macOS, the Java plugin is 64-bit only; this means that only 64-bit browsers are supported. Safari and Firefox both support the Java plugin; however, Chrome is a 32-bit only browser and does not run Java. For this reason, Cisco AnyConnect Secure Mobility Client’s web launch functionality will not run in Chrome on macOS and will need to be downloaded manually.
By default, Safari blocks execution of Java applets. In order to grant the necessary permissions to web sites running Cisco AnyConnect Secure Mobility Client’s web launch., we must edit Safari's security preferences.
This will allow Cisco AnyConnect Secure Mobility Client Java applet to execute. Retry the VPN connection.
Starting with Safari 10, tho option to toggle “ are mode” still exists, but it is hidden. Follow these steps to enable Cisco AnyConnect Secure Mobility Client's Java applet execution.
This will allow Cisco AnyConnect Secure Mobility Client Java applet to execute. Retry the VPN connection.