Anyconnect for VPN Phone url redirect on FiOS

Hello,
I have an ASA setup with Anyconnect for VPN Phone.  The setup works great on comcast but for some reason the phone fails on FiOS and we cannot figure out why.  I typed the url the phone uses into a web browser: https://< ip address of ASA>/VPN_PHONE and I was returned a bad url of :  https://< ip address of ASA>/+CSCOE+/wrong_url.html.  This only happens on FiOS (we tested it on more then one location with same results.)  On all comcast and verison internet services the phone works fine.  Any suggestions or directions I should go in?
Thanks!

We are having exactly same issue. Were you able to find a solution?

Similar Messages

  • AnyConnect for Cisco VPN Phone demo license

    I want to test VPN Phone in the ASA5520,but "show ver" find the "AnyConnect for Cisco VPN Phone : Disabled", www.cisco.com/go/license i didn't find register AnyConnect for Cisco VPN Phone demo license, how to apply for the demo license??
    Licensed features for this platform:
    Maximum Physical Interfaces    : Unlimited
    Maximum VLANs                  : 150
    Inside Hosts                   : Unlimited
    Failover                       : Active/Active
    VPN-DES                        : Enabled
    VPN-3DES-AES                   : Enabled
    Security Contexts              : 2
    GTP/GPRS                       : Disabled
    SSL VPN Peers                  : 2
    Total VPN Peers                : 750
    Shared License                 : Disabled
    AnyConnect for Mobile          : Disabled
    AnyConnect for Cisco VPN Phone : Disabled
    AnyConnect Essentials          : Disabled
    Advanced Endpoint Assessment   : Disabled
    UC Phone Proxy Sessions        : 2
    Total UC Proxy Sessions        : 2
    Botnet Traffic Filter          : Disabled
    This platform has an ASA 5520 VPN Plus license.

    Hi there,
    Did you try
    https://tools.cisco.com/SWIFT/LicensingUI/loadDemoLicensee?FormId=717
    Cheers!
    Rob
    "Why not help one another on the way" - Bob Marley

  • AnyConnect for Cisco VPN Phone Spanless recording?

    I'm looking to add this to my existing ASA5520.
    Does AnyConnect for Cisco VPN phone support spanless recording?
    If not what options are there?
    Thanks,
    Mike

    Hi there,
    Did you try
    https://tools.cisco.com/SWIFT/LicensingUI/loadDemoLicensee?FormId=717
    Cheers!
    Rob
    "Why not help one another on the way" - Bob Marley

  • Is Cisco VPN posible for Windows Phone 8.1

    Hello,
    Microsoft released Windows Phone 8.1 on April and it supports VPN connections.
    So I would like to ask:
    Is Cisco going to release Anyconnect Secure Mobility Client for Windows Phone 8.1?
    Maybe someone managed to make clientless connection with ASA 9.1( for example IKEv2 or SSL-VPN) ?
    Or should I abandon idea of connecting WP 8.1 with ASA?
    Thanks.

    Hi  aurimas88 ,
    Looks like AnyConnect Secure Mobility Client 2.5  is supported for windows phone , however W 8.1 mobile has not been tested by Cisco , We cannot guarantee compatibility. 
    AnyConnect Secure Mobility Client 3.0 Windows Mobile Devices Not Supported
    AnyConnect version 3.0 and later do not support Microsoft Windows Mobile or Windows Phone. However, you can continue to use the ASA to deploy the AnyConnect 2.5 or earlier client for Windows Mobile even after loading the AnyConnect 3.0 package files to the ASA for web deployment.
    AnyConnect Secure Mobility Client 2.5 Windows Mobile Devices Supported
    We designed AnyConnect 2.5 for compatibility with Windows Mobile 6.5, 6.1, 6.0 and 5.0 Professional and Classic for touch-screens only. Users have reported success with most touch-screens running these versions of Windows Mobile. However, to ensure interoperability, we guarantee compatibility only with the devices we test, as follows:
    HTC Imagio running Windows Mobile 6.5
    HTC Tilt 2 running Windows Mobile 6.5
    HTC Touch running Windows Mobile 6.0
    HTC TyTN running Windows Mobile 5.0
    Samsung Epix running Windows Mobile 6.1
    Samsung Omnia Pro 4 running Windows Mobile 6.5
    Samsung Omnia running Windows Mobile 6.1
    Samsung Saga running Windows Mobile 6.1
    Source: 
    http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asa-vpn-compatibility.html#pgfId-181897
    Hope this helps 

  • How to create a VPN client for Windows Phone 8.1?

    We have our own VPN client for Windows and Android. I would like to create a VPN client  for Windows phone 8.1. After referring these site I found that there are some third
    party VPN plugins available for WP 8.1.
    I checked OpenVPN but it is also not available for WP 8.1.
    Is there any APIs available for creating a VPN client in WP 8.1 similar to
    VpnService provided by Android SDK ?

    The VPN APIs for WP8.1 are not open at this time.
    Matt Small - Microsoft Escalation Engineer - Forum Moderator
    If my reply answers your question, please mark this post as answered.
    NOTE: If I ask for code, please provide something that I can drop directly into a project and run (including XAML), or an actual application project. I'm trying to help a lot of people, so I don't have time to figure out weird snippets with undefined
    objects and unknown namespaces.

  • Configuring Cisco 8800 phones for VPN

    Does anyone know how to configure 8800 phones for VPN?  I am particularly interested on 8861/8851 models.
    Thanks,
    Carlos

    So I opened a TAC case and they provided me with the solution:
    "Usually you upload the Cisco_Manufacturing_CA certificate on the ASA but with the new models we should upload the Cisco_Manufacturing_CA_SHA2 creating a new trustpoint on the ASA"
    The security guide does not specify about this cert, it only mentions Cisco_Manufacturing_CA .
    Thanks,
    Carlos

  • Is there any specific VPN application for i phone ?

    Is there any specific VPN application for i phone ?

    Settings//General/VPN. Then all you need is to find a public VPN server. You don't need a separate app.
    But you should keep in mind that your employer doesn't want you using social media. In most companies bypassing corporate information security policy is grounds for termination. Do you really want to risk it?

  • CSS11501 - URL Redirect for Multiple Servers For Both Ports 80 & 443

    Can the CSS rules be configured such that it can be used to direct requests to different Web servers based upon,
    URL path? 
    For Both Ports 80 & 443/HTTPS (with SSL Certificate running on the back-end servers)
    For example:
    http://app.ti.com/path1/file.html goes to Web servers A & B -> old servers
    https://app.ti.com/path1/file.html goes to Web servers A & B -> "
    http://app.ti.com/path2/file.html goes to Web servers C & D -> new servers
    https://app.ti.com/path2/file.html goes to Web servers C & D -> "
    We're trying to understand what are plans are for a phased migration from old site to new site, and if it requires new URLs ???
    Fort port 443, since the CSS is load balancing SSL encrypted traffic, is the means that the CSS can’t look at URL thus this is not possible?
    Please help, thanks.

    Hi Martin,
    1) Clients are using http://domain/, thus I need to define url "//domain/.." as you have stated.
    2) I'm still waiting for the "actual" URL paths from the application team in order to decide which method to use - Regexp vs URLQ definition - to begin testing.
    I know I have limited memory resource (as listed below) & will try not to make it complicated:
    System Resources for CSS501-SCM-INT:
    Installed Memory:   268,435,456 (256 MB)
    Free Memory:        135,414,448 (129 MB)  ****
    CPU:                0% (5Sec)     1% (1Min)     0% (5Min)
    Buffer Statistics:
    Buffer Pool: 0
       Size:2048  Total:3072  Available:2792  Failures:  0  Low Buffer Count: 2748
    Buffer Pool: 1
       Size:2048  Total:3072  Available:2800  Failures:  0  Low Buffer Count: 2800
    Buffer Pool: 2
       Size:2048  Total:2048  Available:1956  Failures:  0  Low Buffer Count: 1900
    Thanks Martin, you've been a big help!
    Diane Ly  

  • ISE Url Redirecting

    HI,
    I have a layer 3 ISE policy node configuration with my asa for remote access vpn configuration.
    my user gets authenticated but when i open the web-browser the the url redirect doesnt happen. i have to manually do this.
    is there something which i am missing? please let me know?
    any help or ideas will be helpful.
    thanks
    Nitesh

    Nitesh,
    In the WLC make sure you have it set to "Redirect to External Server", also, almost always, its a problem with how you have your ACLs configured, because you want to "Force redirection to ISE Guest Server" by using the ACLs, therefore, you must have a redirect ACL in place.

  • How to do auto URL redirect in sun web server ?

    Hi, i need to do auto url redirect in my sun web server. Currently i'm setup some rules for the reverse proxy in obj.conf file and the syntax looks like:
    <Object name="reverse-proxy-/test">
    <If $internal and $uri =~ "index.html">
    NameTrans fn="redirect" from="/" uri="/examples/abc.html"
    </If>
    Route fn="set-origin-server" server="http://localhost:8989"
    </Object>
    The situation is:
    1) When users browse "*http://localhost/examples/abc.html*" it will redirect to abc.html
    2) When users browse "*http://localhost/test*" it will redirect to the localhost admin GUI (http://localhost:8989/admingui/admingui/serverTaskGeneral)
    My desire output should be whenever users browse the "*http://localhost/test*" , it will redirect to abc.html page.
    the syntax might be wrong. So, anyone knows how to fix this? I'm keep trying but nothing worked. Please help me.

    Moderator action: Moved from Servers General Discussion.
    db

  • Need help with URL Redirect in Sun Web Server 7 u5

    All I am trying to do is redirect to a static URL and for the life of me I can not get it to behave the way I would expect. I am new to Sun Web Server so I am just trying to use the Admin Console to set this up.
    Here is what I'm trying to do:
    Redirect from - http://www.oldsite.com/store/store.html?store_id=2154
    To - http://www.newsite.com/Stores/StoreFront.aspx?StoreId=2154
    Here's what I tried in the console.
    Added a new URL Redirect
    Set the Source to be Condition and set it to: '^/store_id=2154$' (quotes included)
    Then set the Target to: http://www.newsite.com/Stores/StoreFront.aspx?StoreId=2154
    Then for the URL Type I checked Fixed URL
    When I tested with: http://www.oldsite.com/store/store.html?store_id=2154 it did redirect as desired
    BUT
    When I tested with: "http://www.oldsite.com/store/store.html?store_id=5555" it too got redirected to the Target and I can't figure out how this second URL can satisfy the condition to get redirected.
    Any help is most appreciated.

    thanks for choosing sun web server 7
    it is simpler if you just edit the configuration files manually
    cd <ws7-install-root>/https-<hostname>/config/
    edit obj.conf or <hostname>-obj.conf (if there is one for you depending on your configuration so that it look something like)
    <Object name="default">
    AuthTrans..
    #add the folllowing line here
    <If defined $query>
    <If $urlhost =~ "/oldsite.com" and
    $uri =~ "/store/store.html" and
    $query =~ "store_id=2154" >
    NameTrans fn="redirect" from="/" http://www.newsite.com/Stores/StoreFront.aspx?StoreId=2154
    </If>
    </If>
    ..rest of the existing obj.conf. continues
    NameTrans...
    now, you can either do <ws7-install-root>/https-<hostname>/bin/reconfig -> to reload your configuration without any server downtime or <ws7-install-root>/https-<hostname>/bin/restart -> to restart the server
    if it did work out for your, you will need to run the following so that admin server is aware of what you just did
    <ws7-install-root>/bin/wadm pull-config user=admin config=<hostname> <hostname.domainname>
    hope this helps

  • Cisco Jabber for iPad - custom URL?

    The Cisco Jabber client for iOS is great, and we'd love to integrate it with one of our iPad applications. All iOS applications have an optional "custom URL" they can assign to themselves that enables them to be invoked by another application. They may also optionally include paramters (for example, a phone number). Does a custom URL exist for the jabber iOS client, and if so, is it possible to send it a parameter for a phone number so that it dials as soon as it starts up? Thanks.

    I don't get presence either, and would like to know if there is an answer for it.
    If I look up my user in the provisioning directory, it does show that my iPad is provisioned and active for my account.
    I can't say anything toward the lisence count, it's hard to say with all the accounts we have active sometimes.
    Our infrastructure is slightly different in that we are running TMS 13.2.1 and using TMS Agent Legacy.

  • AnyConnect (SSL VPN on IoS) - Connection stuck on Android

    Hiya,
    I have an Any Connect WebVpn (ssl vpn?) set up on an IOS 15.2(4)M4. My current WebVPN is set up for Cisco Phones to use SSL VPN to connect to a Cisco Call Manager (CUCM 9.x). I also tried connecting with an Any Connect client from a PC and it seems to work fine.
    The issue is when I try to connect through an Android device, I get the following output from 'debug webvpn':
    Jan 10 16:04:17.192: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:17.192: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:17.220: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:17.224: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:17.224: WV: Entering APPL with Context: 0x242D9C30,
          Data buffer(buffer: 0x242F2930, data: 0xD9E7658, len: 0,
          offset: 0, domain: 0)
    Jan 10 16:04:17.224: WV: Fragmented App data - buffered
    Jan 10 16:04:17.224: WV: Entering APPL with Context: 0x242D9C30,
          Data buffer(buffer: 0x242F2470, data: 0xEA4D858, len: 884,
          offset: 0, domain: 0)
    tbr-edi-2901#
    Jan 10 16:04:17.224: WV: http request: / with no cookie
    Jan 10 16:04:17.224: WV: validated_tp :  cert_username :  matched_ctx :
    Jan 10 16:04:17.224: WV: failed to get sslvpn appinfo from opssl
    Jan 10 16:04:17.224: WV: Error: Failed to get vw_ctx
    Jan 10 16:04:17.224: WV: Appl. processing Failed : 2
    Jan 10 16:04:18.344: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:18.348: WV: sslvpn process rcvd context queue event
    Jan 10 16:04:18.376: WV: sslvpn process rcvd context queue event
    and then the messages in italics above keep on appearing in an endless loop.
    Any ideas what could be the issue.
    Any help is highly appreciated.
    Thanks,
    David

    Hi,
    I'm having the same issue please let me know if yo found the solution. Thanks in advance

  • Site to Site VPN between Cisco ASA 5520 and Avaya VPN Phone

    Hi,
    I am wondering if anyone can assist me on configuring Cisco ASA 5520 site to site vpn with Avaya VPN Phone? According to Avaya, the Avaya 9630 phone acts as a VPN client so a VPN router or firewall is not needed.
    The scanario:
    Avaya System ------ ASA 5520 ------ INTERNET ----- Avaya 9630 VPN Phone
    Any help or advice is much appreciated.
    Thanks.

    Hello Bernard,
    What you are looking for is a Remote Ipsec VPN mode not a L2L.
    Here is the link you should use to make this happen:)
    https://devconnect.avaya.com/public/download/interop/vpnphon_asa.pdf
    Regards,
    Julio

  • Cisco AnyConnect SSL VPN no split tunnel and no hairpinning internet access

    Greetings,
    I am looking to configure a Cisco ASA 5515X for Cisco AnyConnect Essentials SSL VPN where ALL SSL-VPN traffic is tunneled, no split tunneling or hairpinning on the outside interface. However users require internet access. I need to route traffic out the "trusted" or "inside" interface to another device that performs content-filtering and inspection which then egresses out to the internet from there. Typically this could be done using a route-map (which ASA's do not support) or with a VRF (again, not an option on the ASA). The default route points to the outside interface toward the internet.
    Is there no other method to force all my SSL-VPN traffic out the inside interface toward LAN subnets as needed and have another default route point toward the filtering device?
    OR 
    Am I forced to put the ASA behind the filtering device somehow?

    Hi Jim,
    You can use tunnel default route for vpn traffic:
    ASA(config)# route inside 0.0.0.0 0.0.0.0 <inside hop> tunneled
    configure mode commands/options:
      <1-255>   Distance metric for this route, default is 1
      track     Install route depending on tracked item
      tunneled  Enable the default tunnel gateway option, metric is set to 255
    This route is applicable for only vpn traffic.
    HTH,
    Shetty

Maybe you are looking for