VPN & download pb

I am connected to the internet through a VPN connection using the Apple VPN client in OSX10.4.10. The problem I have is that it takes 1 hour to download a file of 20 Mo. The download begin at 250 KB and slown down to 1 KB after few seconds, stalled then reach 20 KB, slow down to 1 KB, stalled and so on. With a PC using Window XP, the same ends points, router and wires, it takes 2 minutes to download the same file.
Has anyone some suggestions?
Thanks a lot

I just had problems with VPN lately.
Since you are convinced that DNS is OK, and the network connection is high speed, look here, next:
Check for firmware updates for the router at your end. Perfom updates using a wired computer.
(Oh, and DNS issues once you connect to VPN can be an issue, even if you connect fast , and authenticate properly...Once you complete the VPN, it's a different DNS. I strongly suggest entering the DNS server inside the VPN/Datas Center...as an IP address in your VPN configuration in the SystemPreferences>Network>VPN section...)

Similar Messages

How do I change firewall settings modified by VPN server?

(This actually happened while I was running Lion, but seems to be the same problem under Mountain Lion)
I installed Check Point Software Technologies Ltd. Endpoint Security VPN for Mac E75 VPN client on my iMac to access my employer's network. It worked, but after I logged onto my employer's network, I lost contact to both my Time Capsule and Airport Express (Airport Utility stops "seeing" them, even though I am still connected over wi-fi to the internet through the airport router in the Time Capsule), and iTunes stopped "seeing" my iPad and iPhone.
I looked on Check Point's support pages and saw this "Known Limitation":
Issue ID: 00885275
After Endpoint Security VPN is installed and a client is connected to the gateway, automatic sync with Time Capsule and iPhone Wi-Fi sync might not work correctly.
This can happen because of a restrictive Desktop Policy.
To resolve this issue, allow these services in the "Inbound rules" of the Desktop Policy:
SSDP: UDP, port 1900.
mDns: UDP, port 5353.
Further research in the Endpoint Security VPN for Mac E75 Administration Guide told me this about "Desktop Policy":
The Desktop Firewall
Endpoint Security VPN enforces a Desktop Security Policy on remote clients. You define the Desktop Security Policy in a Rule Base. Rules can be assigned to specific user groups, to customize a policy for different needs.
Important - Before you begin to create a Desktop Security Policy, you must enable the Policy Server feature on the gateway.
Endpoint Security VPN downloads the first policy from the gateway. It looks for and downloads new policies every time it connects or on re-authentication.
When Endpoint Security VPN makes a VPN connection, it connects to the gateway and downloads its policy. Endpoint Security VPN enforces the policy: accepts, encrypts, or drops connections, depending on their source, destination, and service.
So (I think) what happened is when I logged on to my employer's network, it re-configured my firewall to limit my network connections resulting in the above-described problems.
Logging out did not change anything. Uninstalling the VPN client did not change anything. It looks like the changes "enforced" by the VPN client are persistent, and can only be changed "manually."
I doubt I will be able to prevail upon my employer to change its desktop policy. So I'm ready to bail on using the VPN client, but how do I reverse the changes my employer's "desktop policy" made?
The System Preferences Firewall options seem kind of high level. I would note that iTunes looks like it is open to all connections.
Thoughts? HELP.

It is not something I have played with.. but I would turn off the Mac's firewall and see if that fixed the problem.. the firewall of the Mac is helping your security.. but the main security is actually the NAT router in the TC. It is extremely difficult to break NAT routing.. It is effectively a firewall itself. So turning off the firewall in the Mac is not a biggie. The reason I want you to do that even if just for a few minutes.. and perhaps turn it off and reboot the computer to make sure the rules have stopped being applied.. is to see if the firewall is actually the culprit.
What I am reading from what you have posted is the vpn client itself is the software blocking connections. And I doubt a third party software would change rules to the internal firewall.. but i am guessing.
Once you have tested it.. if the firewall off fixes it.. then you will need to hunt around.. perhaps in a TM backup for the actual file that is altered that contains the rules.. I have not looked.. and don't use firewall on the end client anyway as I have a firewall rated router.
If the firewall off does not fix the problem.. which is what I suspect. Did you use the uninstall software correctly and did it give any error messages??
Go to the activity monitor and check all the running processes.. anything there that is named after the vpn.. try to quit. See if you can stop the process.. If the issue is major.. and the process won't quit see if the Checkpoint support can help or google their knowledge base for info on how to get back to normal operations.

Wifi vpn

Hi every one
can anyone tell me if I need the VPN download for BT wifi hotspots, or any hotsopts if I got the Netprotect Plus from BT, cheers for now guys
Solved!
Go to Solution.

imjolly wrote:
you don't need VPN to access btwifi or hotspots
But if you're doing more than general browsing (as in banking online etc) then I'd install it
-+-No longer a forum member-+-

Current Security Vulnerabilities In AnyConnect 3.0?

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
We have 3.05080 and it is included in the unsafe versions according to that link, but people in control do not want to upgrade again because the upgrade process is very expensive and time consuming requiring technicians to visit many satellite offices. The users are unable to install the client software themselves because they do not have the required admin rights to install the Cisco client.
It was a several weeks long process to get upgraded for 2.x to 3.0 and they are not interested in doing this again so soon. I think they had their versions of 2.x for at least 5 years and do not do upgrades lightly.
How serious is the security issue in the link above and is there documentation/news reports showing that it is being actually being exploited in the wild rather than being a hypothetical exploit?
What can be done to prevent the possibility of the exploit being take advantage of when the Cisco client is not upgraded to the latest version?

The workarounds are documented in the report:
Software Versions and Fixes
When considering software upgrades, customers are advised to consult the Cisco Security Advisories and Responses archive at http://www.cisco.com/go/psirt and review subsequent advisories to determine exposure and a complete upgrade solution.In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
Vulnerability
Platform
First Fixed Release
Cisco AnyConnect Secure Mobility Client VPN Downloader Arbitrary Code Execution Vulnerability
Microsoft Windows
2.5 MR6 (2.5.6005)
Linux, Apple Mac OS X
2.5 MR6* (2.5.6005), 3.0 MR8 (3.0.08057)
Cisco AnyConnect Secure Mobility Client VPN Downloader Software Downgrade Vulnerability
Microsoft Windows
2.5 MR6 (2.5.6005), 3.0 MR8 (3.0.08057)
Linux, Apple Mac OS X
2.5 MR6* (2.5.6005), 3.0 MR8 (3.0.08057)
Cisco AnyConnect Secure Mobility Client and Cisco Secure Desktop Hostscan Downloader Software Downgrade Vulnerability
Microsoft Windows
AnyConnect 3.0 MR8 (3.0.08057)
Hostscan 3.0 MR8 (3.0.08062)
Cisco Secure Desktop 3.6.6020
Linux, Apple Mac OS X
AnyConnect 3.0 MR8 (3.0.08057)
Hostscan 3.0 MR8 (3.0.08062)
Cisco Secure Desktop 3.6.6020
Cisco AnyConnect Secure Mobility Client 64-bit Java VPN Downloader Arbitrary Code Execution Vulnerability
Microsoft Windows
Not affected
Linux 64-bit
3.0 MR7 (3.0.7059)
Cisco Secure Desktop Arbitrary Code Execution Vulnerability
Microsoft Windows, Linux, Apple Mac OS X
Cisco Secure Desktop 3.6.6020
* NOTE: Cisco AnyConnect Secure Mobility Client 2.5 MR6 for Mac OS X, which contains fixes for the VPN downloader vulnerabilities in this advisory, will no longer support OS X 10.4.
Recommended ReleasesThe following table lists all recommended releases. These recommended releases contain the fixes for all vulnerabilities in this advisory. Cisco recommends upgrading to a release that is equal to or later than these recommended releases.
Software Name
Major Release
Recommended Release
Cisco AnyConnect Secure Mobility Client
2.5.x
2.5 MR6 (2.5.6005)
Cisco AnyConnect Secure Mobility Client
3.0.x
3.0 MR8 (3.0.08057)
Hostscan
3.0.x
3.0 MR8 (3.0.08062)
Cisco Secure Desktop
3.x
3.6.6020
Top of the section Close Section
Workarounds
Blacklists can be enforced manually, based on the instructions provided in the “Details” section, or by applying updates from Microsoft (2736233) or Oracle (Java SE 6 Update 37 and Java SE 7 Update 9) that include ActiveX CLSIDs or Java applet Message Digests. Anyone opting to enforce blacklists of the vulnerable ActiveX control CLSIDs and Java applet Message Digests can prevent the vulnerable code from instantiating. As a result, WebLaunch initiation of vulnerable software installation and upgrades will be prevented; however, pre-deployed software initiated through standalone methods and WebLaunch initiation of fixed software will continue to function.
In most cases an AnyConnect upgrade is mandatory, in other cases upgrading third-party software is the key.
Thanks.
HTH.
Portu.

Ethernet Problem on campus

Today, I switched rooms in my dorm for the summer. When I plugged in my Macbook to the LAN, I tried to open Safari, and I got a message saying I needed to download the VPN client to access the wireless network (My dorm is not supposed to even have wifi access.) I ran network diagnostics and it said that my ethernet was recognized, but when I try to get on, again, I just get the website directing me to the VPN download.
I called the campus help desk, and they said that I needed to turn off my wireless connection, which I did, but nothing has changed. I am writing this message from my computer in my room, but only a few pages have worked without taking me back to the campus page. Because of this, I don't think it is a porblem with my ethernet card since the computer recognized it, but I do not know what else to try.
Any suggestions?

Welcome to the Forum.
Try to check This Info. And This.

I am trying to install VPN cisco client i was able to do the download but i cannot connect to my compagnie

The answer i got from my IT compagnie is that Cisco VPN is not campatible with MAC they told me to go back to the previus version of OS
i was able to install teh application but whwn i want to connect there is no adress no link to mey compagnie

what files did you download (name and extension) and what are their file sizes?
if you can see the problem and realize you need to re-download use a different browser and a wired connection,
Downloads available:
Suites and Programs: CC 2014 | CC | CS6 | CS5.5 | CS5 | CS4 | CS3
Acrobat: XI, X | 9,8 | 9 standard
Premiere Elements: 12 | 11, 10 | 9, 8, 7
Photoshop Elements: 12 | 11, 10 | 9,8,7
Lightroom: 5 | 4 | 3
Captivate: 8 | 7 | 6 | 5
Contribute: CS5 | CS4, CS3
Download and installation help for Adobe links
Download and installation help for Prodesigntools links are listed on most linked pages. They are critical; especially steps 1, 2 and 3. If you click a link that does not have those steps listed, open a second window using the Lightroom 3 link to see those 'Important Instructions'.
window using the Lightroom 3 link to see those 'Important Instructions'.<

Ever since i downloaded OSX Mountain Lion, Express VPN no longer works properly for me. Even though it says I am connected, webpages refuse to load. However, everything works fine when its turned off. I cannot go on many websites without the VPN.

Ever since i downloaded OSX Mountain Lion, Express VPN no longer works properly for me. Even though it says I am connected, webpages refuse to load. However, connection speed is fine when its turned off. I cannot go on many websites without the VPN. My current location is Shanghai, China. OSX Mountain was installed this morning and everything worked fine until then. Is Express VPN not supported? What do i need to do in order to get it working again on my Macbook Pro (early 2011). I want to be able to go on websites such as Youtube, Facebook, Twitter, ect...

Hi,
I am having the same issue listed above on my new Mac Mini i just bought, I also contacted Express VPN support and got the same instructions with exception of the command to run in the utilities terminal. I tried the steps listed, and both commands (posted here, and sent to me directly by Express VPN support), and still unable to connect on my Mac Mini running OS X 10.8.2, but I am able to connect on my iPad and my MacBook which is running Mac OS X 10.6.8. Usually Express VPN is spot on with their customer support, but this is taking longer to get resolved. Here is the steps sent to me
Try doing the following to see if the problem gets resolved:
Please follow the instructions here: https://www.expressvpn.org/support/setting_dns_servers_mac_os
(should still be the same for Lion) and then add the following DNS servers: 8.8.8.8 & 208.67.222.220. After adding the DNS servers, please do the following steps as well:
Note: If you're connecting to your ISP via a PPPoE connection, then set the DNS servers on the PPPoE connection itself and then restart your computer for the DNS settings to take effect.
1. Click on Applications
2. Click on Utilities
3. Click on Terminal
4. Type the following command (without the quotes): "sudo killall -HUP mDNSResponder"
5. Press enter and then try reconnecting to the VPN.
If you're still unable to connect, please send us in the latest log files.
Hope this helps. Let us know how it goes.

How to download anyconnect vpn client 64 bit win 7

Good day all,
please i wanted to download anyconnect vpn client 64 bit win 7 from software.cisco.com and i was not able to do that after login in. please can someone help me on how or the steps i can take to get the download.
secondly can i be able to install it using ASDM after the download because i do not have a tftp server for now. thanks

Hi csco12434455 ,
Try to go to the following link, the name of the file is: Web deployment package for Windows platforms.
This file does support W7 32 and 64 bits
https://software.cisco.com/download/release.html?mdfid=286281272&flowid=72042&softwareid=282364313&release=3.1.06073&relind=AVAILABLE&rellifecycle=&reltype=latest
Reference link:
http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asa-vpn-compatibility.html#47680
And yes you can use ASDM to upload the file to the ASA flash , just go to Tools > File managment.
Please rate helpful posts !
Hope it helps
- Randy -

Need to download a programme to set up VPN but I can't access the website as it is also blocked in china? how do I install the programme if I cant download it or have it on a external hard drive.

Need to download a programme to set up VPN but I can't access the website as it is also blocked in china? how do I install the programme if I cant download it or have it on a external hard drive.

Not sure I understand you correctly.. Are you currently in China, and therefore unable to download the app? Also, which program is it that you're trying to get?

Web Pages and file download corruption Cisco VPN

We have a problem our users are having. Clients are having problems using Cisco 5.06 VPN along with Internet Explorer. Quite often web pages hang or load incorrectly or unformatted. Also links to documents or downloads are downloaded unusable (i.e. a PDF file that is corrupt). If you refresh the page or retry the download it will work eventually. None of these problems exist while they are directly on the corporate network. (Win7 32-bit OS)
Our standard corporate VPN installation package uses Cisco VPN 5.0.06.0160 which installs version 3.22.4.17992 of DNE (Deterministic Network Enhancer), It also installs the DNE Update version 4.9.1.1837. This combination works correctly in our standard corporate build. The problem exists in two of non-standard builds on a couple different hardware models.
If I uninstall the DNE update and the VPN client and just install the VPN client by itself without the DNE Update (which leaves the client at 3.22.4.17992 for DNE) the problem goes away and the web pages load correctly and the files download properly.
I have tried the latest DNE, and updates to the NIC driver without success. Any suggestions or logic to why the newer versions of DNE will not work. The hardware we are using are high end HP and Dell Mobile workstations that are only about a year old. We have a problem our users are having. Clients are having problems using Cisco 5.06 VPN along with Internet Explorer. Quite often web pages hang or load incorrectly or unformatted. Also links to documents or downloads are downloaded unusable (i.e. a PDF file that is corrupt). If you refresh the page or retry the download it will work eventually. None of these problems exist while they are directly on the corporate network. (Win7 32-bit OS)
Our standard corporate VPN installation package uses Cisco VPN 5.0.06.0160 which installs version 3.22.4.17992 of DNE (Deterministic Network Enhancer), It also installs the DNE Update version 4.9.1.1837. This combination works correctly in our standard corporate build. The problem exists in two of non-standard builds on a couple different hardware models.
If I uninstall the DNE update and the VPN client and just install the VPN client by itself without the DNE Update (which leaves the client at 3.22.4.17992 for DNE) the problem goes away and the web pages load correctly and the files download properly.
I have tried the latest DNE, and updates to the NIC driver without success. Any suggestions or logic to why the newer versions of DNE will not work. The hardware we are using are high end HP and Dell Mobile workstations that are only about a year old.

I would leave it alone for the next few days and do not keep restarting the Homehub. This will cause DLM (Dynamic Line Management) to kick in and lower your speeds because it will interpret the restarts as a fault. It is normal for the speeds to fluctuate during the training period. If things do not improve after the ten day training period post back for more advice.

Everytime I try to download an app on my ipod 2nd gen 8g, It says waiting then disapears? Can anyone help me fix that? Also do I need a VPN info? If so can you give me the info on what to put in.

I have an Ipod Touch 2nd Gen, 8gig. Im trying to download the app for free texting, Everytime I hit download..It pops up on my screen and says "waiting" Then disapears. How do i fix that? It does it to every app I try to download. Also does anyone have the information about the VPN? I think I need that too. Its empty. Thank You

Is your iPod jailbroken? If so, that could be causing the problem. It shouldn't, but it could.
Also, you can download free applications for your iPod Touch from the iTunes Store on your computer, or from the App Store on your iPod Touch.

SAPGUI Java 7.20 Rev 6 download and VPN issue

Dear SAP friends please help.
We are trying to connect to SAP via a Mac running Lion and a VPN with SAPGUI for Java Rev 5. We get the logon successfully but never get further than the licence message. We have updated to the latest Java and also tried it in 32 bitz mode. We are unable to download the latest Rev 6 (due to my user authorisation) but we still think this is a VPN issue. Can you please help? I enclose the trace which shows the point at which is stops.
Many thanks
Andrew
16.11. 17:36:05.118 CALL:     <CONTROL SHELLID="101">
16.11. 17:36:05.118 CALL:       <PROPERTY VALUE="0" NAME="120"/>
16.11. 17:36:05.118 CALL:       <PROPERTY VALUE="0" NAME="300"/>
16.11. 17:36:05.118 CALL:     </CONTROL>
16.11. 17:36:05.118 CALL:   </CONTROLS>
16.11. 17:36:05.118 CALL:   <COPY id="copy">
16.11. 17:36:05.118 CALL:     <GUI id="gui">
16.11. 17:36:05.118 CALL:       <METRICS id="metrics" X3="1440" X2="7" X1="7" X0="283" Y3="900" Y2="20" Y1="12" Y0="283"/>
16.11. 17:36:05.118 CALL:     </GUI>
16.11. 17:36:05.118 CALL:   </COPY>
16.11. 17:36:05.118 CALL: </DATAMANAGER>
16.11. 17:36:05.119 CALL: Call 1042: #3#.setMoreDataIndicator(true);
16.11. 17:36:05.122 CON: GuiNiNetConnection: sending DIAG data to writer thread for modus 0
ERROR #############################
16.11. 17:37:10.018 ERROR: GuiNiReaderThread: read failed: Error: connection to partner '172.23.200.109:3200' broken
16.11. 17:37:10.018 ERROR:
16.11. 17:37:10.018 ERROR: Wed Nov 16 17:37:10 2011
16.11. 17:37:10.018 ERROR: Release 720
16.11. 17:37:10.018 ERROR: Component NI (network interface), version 40
16.11. 17:37:10.018 ERROR: rc = -6, module nixxi.cpp, line 5087
16.11. 17:37:10.018 ERROR: Detail NiIRead: P=172.23.200.109:3200; L=10.64.10.112:53387
16.11. 17:37:10.018 ERROR: System Call recv
16.11. 17:37:10.018 ERROR: Error No 60
16.11. 17:37:10.018 ERROR: 'Operation timed out'
ERROR #############################
16.11. 17:37:10.018 CON: -
16.11. 17:37:10.018 CON: GuiNiNetConnection: sending DIAG data to connection for modus -1
ERROR #############################
16.11. 17:37:10.234 ERROR: GuiConnection: Connection closed
16.11. 17:37:10.234 ERROR: Error: connection to partner '172.23.200.109:3200' broken
16.11. 17:37:10.234 ERROR:
16.11. 17:37:10.234 ERROR: Wed Nov 16 17:37:10 2011
16.11. 17:37:10.234 ERROR: Release 720
16.11. 17:37:10.234 ERROR: Component NI (network interface), version 40
16.11. 17:37:10.234 ERROR: rc = -6, module nixxi.cpp, line 5087
16.11. 17:37:10.234 ERROR: Detail NiIRead: P=172.23.200.109:3200; L=10.64.10.112:53387
16.11. 17:37:10.234 ERROR: System Call recv
16.11. 17:37:10.234 ERROR: Error No 60
16.11. 17:37:10.234 ERROR: 'Operation timed out'
ERROR #############################
ERROR #############################

Hello Andrew,
some version of the VPN client on Lion seems to have a known issue according to SAP internal discussions.
I found someone telling, that with F5 SSL VPN Plugin 7000.2011.0907.01, it is working again.
It seems to be available from https://connectfp.sap.com.
For uninstalling old F5 version, see http://support.f5.com/kb/en-us/solutions/public/3000/800/sol3826.html
(many "seems", because I am still on Snow Leopard and can not talk about this issue from my own experience)
Regarding user authorization for downloading software in Service MarketPlace, please refer to [note 1037574|https://service.sap.com/sap/support/notes/1037574].
Best regards
Rolf-Martin

Feature Request: VPN Portal with ability to download vpn client

Hi i have an feature request to improve the ISA experience.
Can you provide an vpn user login portal. When the user login he/she will be able to download the anyconnect directly from the firewall.
The same function is found on the Cisco ASA devices, even the RV series installs and SSL VPN client from a portal. I would not expect it to have a deep customization as the asa series but more the ability to let mobile users be able to connect using a regular browser and download the client them self if they don't have it.
BR: Alex

Hi Alex,
Thank you for your feedback. I will pass this along.
Thanks,
Brandon

I have a I phone 4. I recently changed carriers to straight talk it was working fine but I deleted the vpn file on accident. Now I can't get cellular data. Does anyone know how I can reinstall that file or download it somewhere?

I own a I phone 4. I recently changed my service from AT&T to Straight Talk. It was working fine but then I deleted the vpn file on accident. Now when I try to get on line I get a message that I am not signed up with a cellular data network. Does anyone know how I can retrieve or download the vpn file?

I have taken it back to the Apple store genius bar, but they say they don't see anything wrong. Well unless you use it all day and experience the problems when they happen, you wont see anything wrong. But there are lots wrong with it. But this would be the same store as I purchased the phone. And they backed up my old Iphone 4, but were not able to get anything to load back onto my new phone. So, I lost pretty much everything. But over time, some of my contacts have started showing up, although i am still missing over 800 of them.

VPN: Unable to see server files, download Email attachments

I recently installed the Apani Contivity VPN client in order to connect my home iMac with my company's servers. The Apani product was the client specified by my company. I can access the company's servers, but cannot see individual files. According to my company's IT department, this is because my company uses Microsoft's Distributed File System, whick OS X is unable to access. Has anyone else had similar problems and know of a workaround? In what may be a related matter, when I connect through VPN to my company Email account, I am unable to open or download message attachments. I have used both Entourage and Thunderbird Email programs, again as recommended by my IT department. Can anyone offer any advice here?
iMac Mac OS X (10.4.4)

Hmm.
I'm going to defer this to someone more adept at VPN's,
but it sure sounds like permissions that aren't set properly on the server.
Don't let your techies off the hook too easily.
And as far as the attachments...is this using an email client, after you've made the VPN connection...on the 'inside'?
(what kind of attachments, did you say? Word, pdf?)
If you can't see files in those folders, there's a probability that you don' t have "permissions" to run the programs associated with the attachments.
See why it sure looks like it's falling back on your network gurus.

VPN & download pb

Similar Messages

Maybe you are looking for