Webcontent missing when browse via SSL VPN

hi
Trying to setup SSL access to couple of our corporate apps . These apps got different logon details . Everything is displayed except the submit button on app2 .
is there any parameters that i sould be looking into to fix this issue .
thanks in advance .
vin

We have found out what the issue was and have a temporary fix until we can get to the root of the problem.
Seems that Kerberos UDP packets are getting blocked somewhere along the line. By changing a registry setting on the remote computer we can force Kerberos to transmit over TCP instead of UDP and this clears up all of our issues.
http://support.microsoft.com/kb/244474
Next step is to figure out where UPD is getting dropped so we don't need to have this patch. We think its the ASA.

Similar Messages

Why are Java SASLFactories missing when called via PL/SQL but not from JRE?

Hi
This may be quite a technical point about SASL and JCE Providers etc OR it may just be a question about how Oracle PL/SQL interfaces with Java.
The background is that I am trying to get a Java opensource library to run in Oracle DB - this is for specialized communication from Database to other servers.
The library uses a SASL mechanism to authenticate with the server and this (appears) to rely on JCE Providers installed and provided by the JRE.
I have some Java code working which uses the library - this runs OK in NetBeans/Windows environment and also using Linux/Oracle JRE directly such as:
  +# $ORACLE_HOME/jdk/bin/java -classpath "./MyMain.jar:./OtherSupport.jar" package.TestClient+
However it refuses to work (throws a NullPointerException) when called from PL/SQL.
  +FUNCTION send_a_message (iHost IN VARCHAR2,+
     iPort IN NUMBER,
    +iLogin IN VARCHAR2,+
    +iPasswd IN VARCHAR2,+
     iRecipient IN VARCHAR2,
     iMessage IN VARCHAR2) RETURN NUMBER
   AS LANGUAGE JAVA
   NAME package.TestClient.sendATextMessage(java.lang.String, int, java.lang.String, java.lang.String, java.lang.String, java.lang.String) return int';
In the Java code this is:
   public static int sendATextMessage(String iHost,
     int iPort,
     String iLogin,
     String iPasswd
     String iRecipient,
     String iMessage)
I've tracked the issue down to there being no SaslClientFactories (via Sasl.getSaslClientFactories()) showing when called from PL/SQL whereas 3 are available when run from within Java directly. This via:
   Enumeration<SaslClientFactory> facts = Sasl.getSaslClientFactories();
   System.out.println("Found Sasl Factories [" & (facts != null) & "] size[" & Collections.list(facts).size() & "]");
So, is there some aspect of Java initialisation that I'm missing when calling from PL/SQL (which means SASL factories aren't getting loaded into JRE) or is there something different in SASL setup?
Any pointers appreciated.
Thanks
Dave

Ok, after a bit of reading and general hacking about I have got this working.
What I hadn't initially understood/remembered is that for a Stored Procedure the JVM installed on file system with Oracle isn't actually used - java code is loaded into the database and hence a different set of base functions are available. The following is a good explanation of this http://docs.oracle.com/cd/B14117_01/java.101/b12021/appover.htm#BGBIBDAJ
So "out of the box" the Oracle Database appears to come loaded with only two of the Sun security providers i.e. no com.sum.security.SASL
>
OBJECT_NAME             OBJECT_TYPE     STATUS   TIMESTAMP
com/sun/security/auth/NTSid  JAVA CLASS    VALID   2013-02-14:14:08:57
com/sun/security/jgss/GSSUtil    JAVA CLASS    VALID   2013-02-14:14:08:57
>
This is from:
>
SELECT
  object_name,
  object_type,
  status,
  timestamp
FROM
  user_objects
WHERE
  (object_name NOT LIKE 'SYS_%' AND
   object_name NOT LIKE 'CREATE$%' AND
   object_name NOT LIKE 'JAVA$%' AND
   object_name NOT LIKE 'LOADLOB%') AND
   object_type LIKE 'JAVA %' AND
   object_name LIKE 'com/sun/security%'
ORDER BY
  object_type,
  object_name;
>
My solution (which may well be a work-around) is the following:
1) Downloaded JDK Source and extracted "com.sun.security.sasl" java code to my project
2) Added following code to my Stored Procedure ()
>
Enumeration<SaslClientFactory> saslFacts = Sasl.getSaslClientFactories();
if (!saslFacts.hasMoreElements()) {
  System.out.println("Sasl Provider not pre-loaded");
  int added = Security.addProvider(new com.sun.security.sasl.Provider());
  if (added == -1) {
    System.out.println("Sasl Provider could not be loaded");
    System.exit(added);
  else {
    System.out.println("Sasl Provider added");
>
3) Built my JAR file with the sasl package embedded (note: could only find Java 6 code, so had to comment out some GSS lines - but wasn't intending to use these)
4) Loaded JAR to oracle via "loadjava".
5) Add permissions (only found this out after a couple of failed runs)
>
call dbms_java.grant_permission('XMPP', 'SYS:java.security.SecurityPermission', 'putProviderProperty.SunSASL', '' );
call dbms_java.grant_permission('XMPP', 'SYS:java.security.SecurityPermission', 'insertProvider.SunSASL', '' );
>
6) Run gives the following:
>
Sasl Provider not pre-loaded
Sasl Provider added
...etc...
>
It works!. I confess I'm not sure of the implications of this for multiple calls/performance and if it will need to be added for each stored procedure call - may post back.
For completeness I should point out that after my load the Security providers look like this:
>
OBJECT_NAME             OBJECT_TYPE     STATUS   TIMESTAMP
com/sun/security/auth/NTSid    JAVA CLASS    INVALID  2013-02-15:09:11:36
com/sun/security/jgss/GSSUtil    JAVA CLASS    INVALID  2013-02-15:09:11:37
com/sun/security/sasl/Provider    JAVA CLASS    VALID    2013-02-15:10:03:21
>
i.e. the original couple are "INVALID" !
Dave
Edited by: 946763 on Feb 26, 2013 2:35 AM

Parts of form missing when browsing

Hi,
I have OS X 10.4.9 and am new to Mac and having a problem with browsing-am hoping its a simple one and you guys can help!
When I open certain web pages there are parts of the form which are missing. eg. i have a form for work which is missing a drop down menu to enter dates to apply for annual leave. On all other PC's its there but not on my Mac.
Also on other web pages I cant click on certain things like pics or music or files-(where it says click here).
Is there something my computer is missing? Any advice is greatly appreciated Thanks

To turn javascript on in Safari, go the the Safari menu and select Preferences and then go to Security. Check the javascript box.
What Rick mentioned is correct, web designers sometimes do restrict their work to Windows. It is because they're lazy, but the extra work is due to Microsoft's arrogance in following standards. My favorite example is PNG, which is a great graphics format with alpha transparency. But Microsoft never implemented it with alpha transparency on Windows (they did on Mac!), so a web designer has two choices: go with the cheesier GIF, or detect which browser you're using. Now what do you think most designers do?
The only way I know of to dectect browsers and change code accordingly on the client side is to use a scripting language and the most ubiquitous one is javascript. So because of Microsoft's policies, most designers need to use javascript to check if you're using IE on Windows. Check out my web site http://www.philsmith.com/caravan/ on a Mac and on Windows to see what I'm talking about. There's javascript to tell what browser you have, and the graphics and music are implemented differently in either case. Without javascript, I couldn't make this happen.
So your choices as a designer are to use javascript or go with one platform. And you can guess which platform most are going to choose.

IWeb 09 site crashes when browses via Safari

Hi
I recently found that when I visit my own iWeb made site via Safari, like a good boy, all Apple Safari suddenly quits on nearly every visit.
Any help or advice as to why this is happening, I heard of IE crashing on iWeb made sites, but Safari
should browse seemlessly, one would have thought
Kind regards
Message was edited by: brendan67

Aaaaah..... Now I remember. I thought you would have learned sense by now and switched to rangerstalk.net !
Your site loads fine, and fast, in Safari for me. I'm using V 5.0.2. This version of Safari has a number of issues and I hope there's a fix on the way. I find myself using Chrome more and more and can't wait until it comes out of beta.
Is it just your own site that crashes Safari or has it happened with others?

Server Admin not connecting to Leopard Server when accessing via VPN

Hi everyone,
Recently, as the title suggests, Server Admin (or Server Preferences, for that matter) would not connect to my remote server via VPN. I'm quite sure that the server is working nicely, as the users (both of them lovely young ladies with considerable charms, which makes on-site support quite interesting, if distracting) didn't call me to complain, and I can login via SSH with no problems.
The server is a Mac Mini, connected to an Airport Extreme (gigabit N), which in turn connects to our ADSL modem, if that helps any.
Now, I did tinker around a bit with the settings before this happened, so I think it's probably my fault (well, I started my "career" of administering this server a week ago, what do you expect), so I suppose I may have inadvertently limited access to a service required for Server Admin and Server Preferences to function.
If anyone could tell me which services are absolutely necessary for Server Admin to function, or at least where to start looking, I'd be immensely grateful. I didn't yet go on site to try and wrestle the whole thing from there, as the travel costs are non-trivial, so I'd rather do it remotely, if at all possible.

This is exactly the difficulty I am having with a 10.5.4 Intel xserve. I have established a VPN connection that connects me to my business LAN, and I know it has carried out the connection because there are a number of things I can access properly that are not available on the public internet. For instance, my LOM ports are restricted to my business LAN, and when I connect to the server via VPN I can access teh LOM ports and using server monitor. However, when I try to use Server Admin, nothing works. It won't connect. I too am confused. All traffic to the xserve is allowed via the business LAN. I thought all traffic was supposed to be routed to the VPN server when connected via a VPN. If this is the case, shouldn't Server Admin work? When I go on site and connect my computer directly to the business LAN, I have no difficulty using Server Admin.

General Settings not retained when connecting via VPN

Forum,
We have a user who connects to SAP via a VPN connection. Since then they have found that any form settings/column amendments made are not being retained when next logging into SAP.
When these changes were made direct in the office, they are retained.
My question. Is there any differences in how the settings are retained within SAP when accessing via a VPN?
Regards,
Juan

Hi,
When using your VPN are yo using Terminal LIcense or Remote Desktop Connection?
Please do the following to save form settings:
1. Only 1 module should be open when using form settings.
Close other modules that doesn't need.
2. Close the module after changed. To make sure the settings are saved.
3. Always close all the module before exiting SBO program, use the click FIle and Exit habit.
4. Terminal Licensing should be use when connecting remotely.
Thanks.
Clint

Why does SSL VPN require client for full functionality?So What's the point?

I was interested in SSL VPN because I thought that I could have the same functionality I have when connecting via Cisco VPN 3000 concentrator (IPSec with AH and ESP enabled), but without the hassle to deploy and maintain client VPN's for thousands of users.
However, to my disappointment, based on the information below from www.cisco.com (and I believe that it is the case from other vendors, right?) SSL VPN offers limited functionality if deployed clientless. Why is like that?
Imagine I have a VPN (IPSec) solution functional today. If I deploy SSL VPN (clientless) what lack in functionality should I experience? Why a VPN client is required if SSL VPN can successfully establish the tunnel? I don't get it.
"...SSL VPNs provide two different types of access: clientless access and full network access. Clientless access requires no specialized VPN software on the user desktop; all VPN traffic is transmitted and delivered through a standard Web browser. Because all applications and network resources are accessed through a browser, only Web-enabled and some client-server applications-such as intranets, applications with Web interfaces, e-mail, calendaring, and file servers-can be accessed using a clientless connection. This limited access is suitable for partners or contractors that should be provided access to a limited set of resources on the network. And because no special-purpose VPN software has to be delivered to the user desktop, provisioning and support concerns are minimized."

Hi,
Clientless SSL VPN only able to access application through browser (i.e. HTTP and HTTPS). If you need to acces other application like RDC, you need full SSL client.
Full SSL Client is deployed automatically depends on how you configure the SSL VPN box (temporary or permanently);
1. From the SSL VPN box, you can configure it to download and be installed to user PC permanently (500KB+). When the user successfully authenticated by the SSL VNP box, it will download the client and install automatically/permanently without any help from the network administrator. The user need to login on his/her PC with administrator priviledge.
2. From the SSL VPN box, you can configure it to download and be installed to user PC temporary (500KB+). When the user successfully authenticated by the SSL VPN box, it will download the client and install temporary without any help from the network administrator. The user need to login on his/her PC with administrator priviledge.
In one of my deployment, I have 1000+ SSL VPN user. I just need to create a 10 page User Manual/Guide complete with troubleshooting on their own. I use the first option which is automatically download and permanently install in their PC. Patching the SSL VPN Full Client need to upload the new client in the SSL VPN box only and it will automatically patch the client in user PC.
Dandy

Anyconnect ssl vpn and acl

Hi Everyone,
I was testing few things at my home lab.
PC---running ssl vpn------------sw------router------------ISP--------------ASA(ssl anyconnect)
anyconnect ssl is working fine and i am also able to access internet.
I am using full tunnel
i have acl on outside interface of ASA
1
True
any
any
ip
Deny
0
Default
i know that ACL is used for traffic passing via ASA.
I need to understand the traffic flow for access to internet via ssl vpn.?
Regards
MAhesh

As you say correctly, the interface-ACL is not important for that as the VPN-traffic is not inspected by that ACL. At least not by default.
You can control the traffic with a different ACL that gets applied to the group-policy with the "vpn-filter" command. And of course you need a NAT-rule that translates your traffic when flowing to the internet. That rule has to work on the interface-pair (outside,outside).

Takes a long time to open small MS Word Documents on SSL VPN

I have an issue that when users connect to my ASA 5520 via SSL VPN it takes from fifteen seconds to three minutes to open up small Microsoft Word documents, it also takes a long time to save changes. Users also reporting Word crashes when on the VPN, but not when they are on the LAN. I have checked the endpoint speed of my cable modem and all is well there. The DNS and WINS settings are correct on the ASA. I have turned off compression and enabled DTLS. Any suggestions? Thanks

Reduce the mss to 1300. If that doesn't fix it, keep lowering it by 100 each time. If you get down to 1000 and it still doesn't work, then we need to look at something else.
sysopt connection tcpmss 1300

LastLogonTimeStamp Attribute Not Updated for Computer Account Over SSL-VPN

We like to use LastLogonTimeStamp (LLTS) to find stale computer accounts, disable them, and eventually delete time. What we have found is that domain member computers that connect to the domain exclusively by SSL-VPN (for instance in the case of employees
who work from their home office) do not update LLTS. Consequently these computers frequently appear on stale computer reports.
I suppose the required logon type is never used when connecting over SSL-VPN. Therefore I would like to know if there is a way via a logon script or some other method that we can update this attribute.

That is normal as you connect to VPN using locally cached credentials for the user and the computer accounts.
My recommendation to track these computers is to have an agent that periodically report the computer status (Example: Using Microsoft Intune) or have a scheduled task that will run a script when the user is connected to VPN and register the computer name
as active in a file that is hosted in a share.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

ASA 5505 WebVPN - It has taken a while for SSL VPN Relay to load. You need to verify Java is enabled in your browser

ASA 5505
ASA Version 9.0.(2)
Suddently on the webvpn Interface when i click on my web bookmarks (and java launches in browser) i get this fail in Chrome and FF 'It has take a while for SSL VPN Relay til load. You need to verify Java is enabled in your browser' and nothing happens...
Java IS enabled and running. Tried this in both 7.45 and 7.51
No problem in IE 11 and java 7.45 and 7.51
I've googled alot but have not been able to find any suggetions
Hope you have a solution
Best Regards.

Any resolution on this? Firefox/Chrome my cifs work but smart tunnel RDP doesn't, and in IE my shares don't work but RDP smart tunnel does....
Cisco, if you're not going to do something good, just don't do it. The SSL VPN is a hack job.

IMovie '11, what steps am I missing, when I go to SHARE, IDVD is grey and not activated, only ITUNES and MEDIA BROWSER? I want to burn a DVD.

iMovie '11, what steps am I missing, when I go to SHARE, IDVD is grey and not activated, only ITUNES and MEDIA BROWSER? I want to burn a DVD.

Share your movie to the Media Browser. Then, in iDVD, drag your movie in from the Media Browser at the bottom right.
THe Share to iDVD option is only activated if your source material is DV or AVCHD.

PDF missing text when browsing or linking to a page

Hello,
I have an issue with missing text in a PDF file when I try and browse directly to a page in a PDF. Interestingly, the text is not missing when you open the PDF and navigate to the same page from within the PDF. The first Character(s) of the title are missing.
The title of this page should say Criminal Justice, but the "C" is missing when you visit this link--
http://www.northeast.edu/Degrees-and-Programs/pdfs/2010-Catalog.pdf#page=103
This only happens if you try to navigate directly to a page. If you use the pagers within the PDF then the text is fine. If you change the link in the url to represent the page you are trying to visit, the characters disappear again.
Any thoughts or suggestions would be very much appreciated.
Thanks!
Derek

Acrobat 9 (professional)
Windows XP
Internet Explorer 7, 8
PDF file is published as compatible with version 6. Original document was published as PDF from Indesign.
Hmmm, I have tested on 4 machines and still get the same results. These machines are all XP/IE machines though. Any other thoughts?

Problems when trying to surf the Internet through a SSL VPN tunnel

Hi,
I have a small/big problem, I have a customer who have the need for the possibility to surf the internet through the SA500W when they are connected through a SSL VPN tunnel in to their network. I am not using a Split Tunnel. What I have seen until now, when you run IPCONFIG/ALL the default gateway for the SSL VPN IP settings is 0.0.0.0. Is this the problem and if so, how can this be solved?
Thanks in advance!
Brg
Niklas Eklov

There are various causes for this error, see [[Firefox is already running but is not responding]] for details.

Browsing Oracle application using CISCO SSL VPN forms not opening

Hi all,
Any idea why am not able to access my application using CISCO SSL VPN.Normal clients are able to use our application there is no problem.i have modifyed the "certdb.txt",still i am having the same problem.here am attaching the Java console output.
java.net.ConnectException: Operation timed out: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(Unknown Source)
     at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
     at java.net.PlainSocketImpl.connect(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.doConnect(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.<init>(Unknown Source)
     at sun.net.www.http.HttpClient.<init>(Unknown Source)
     at sun.plugin.protocol.jdk12.http.HttpClient.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.New(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsURLConnection$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at oracle.jinitiator.protocol.https.HttpsURLConnection.connect(Unknown Source)
     at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
     at oracle.jre.protocol.jar.HttpUtils.followRedirects(Unknown Source)
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.download(Unknown Source)
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.load(Unknown Source)
     at oracle.jre.protocol.jar.JarCache.get(Unknown Source)
     at oracle.jre.protocol.jar.CachedJarURLConnection.connect(Unknown Source)
     at oracle.jre.protocol.jar.CachedJarURLConnection.getJarFile(Unknown Source)
     at sun.misc.URLClassPath$JarLoader.getJarFile(Unknown Source)
     at sun.misc.URLClassPath$JarLoader.<init>(Unknown Source)
     at sun.misc.URLClassPath$2.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at sun.misc.URLClassPath.getLoader(Unknown Source)
     at sun.misc.URLClassPath.getLoader(Unknown Source)
     at sun.misc.URLClassPath.getResource(Unknown Source)
     at java.net.URLClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(Unknown Source)
     at sun.applet.AppletClassLoader.findClass(Unknown Source)
     at sun.plugin.security.PluginClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadCode(Unknown Source)
     at sun.applet.AppletPanel.createApplet(Unknown Source)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(Unknown Source)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
WARNING: Unable to cache https://212.72.22.86/+CSCO+1a756767633A2F2F62656E6A726F322E7A75712E70622E627A++/forms/java/frmwebutil.jar
java.net.ConnectException: Operation timed out: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(Unknown Source)
     at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
     at java.net.PlainSocketImpl.connect(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at java.net.Socket.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.doConnect(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.<init>(Unknown Source)
     at sun.net.www.http.HttpClient.<init>(Unknown Source)
     at sun.plugin.protocol.jdk12.http.HttpClient.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.<init>(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsClient.New(Unknown Source)
     at oracle.jinitiator.protocol.https.HttpsURLConnection$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at oracle.jinitiator.protocol.https.HttpsURLConnection.connect(Unknown Source)
     at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
     at oracle.jre.protocol.jar.HttpUtils.followRedirects(Unknown Source)
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.download(Unknown Source)
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.load(Unknown Source)
     at oracle.jre.protocol.jar.JarCache.get(Unknown Source)
     at oracle.jre.protocol.jar.CachedJarURLConnection.connect(Unknown Source)
     at oracle.jre.protocol.jar.CachedJarURLConnection.getJarFile(Unknown Source)
     at sun.misc.URLClassPath$JarLoader.getJarFile(Unknown Source)
     at sun.misc.URLClassPath$JarLoader.<init>(Unknown Source)
     at sun.misc.URLClassPath$2.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at sun.misc.URLClassPath.getLoader(Unknown Source)
     at sun.misc.URLClassPath.getLoader(Unknown Source)
     at sun.misc.URLClassPath.getResource(Unknown Source)
     at java.net.URLClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(Unknown Source)
     at sun.applet.AppletClassLoader.findClass(Unknown Source)
     at sun.plugin.security.PluginClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.applet.AppletClassLoader.loadCode(Unknown Source)
     at sun.applet.AppletPanel.createApplet(Unknown Source)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(Unknown Source)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
WARNING: Unable to cache https://212.72.22.86/+CSCO+1a756767633A2F2F62656E6A726F322E7A75712E70622E627A++/forms/java/frmall_jinit.jar
java.net.ConnectException: Operation timed out: connect

Hi,
From your description, my understanding is that you get invalid workflowinstanceid error when you click on workflow link like "inprogress” in the current list.
Please check the URL of workflow “inprogress” (also URL for workflow approval instance to open task form) to see if it’s correct.
Please use your company network directly instead of CISCO SSL VPN, then access SharePoint portal url “https://vpnssl.companyname.com/”, see if the issue still occur.
Also, check the ULS log on the SharePoint server based on the Correlation ID value, get more detailed information about this error message.
And you could refer to this similar issue:
https://social.technet.microsoft.com/Forums/en-US/08aa6b33-cef6-4b01-8af7-6c25ed7d9953/invalid-workflowinstanceid-parameter-in-url?forum=sharepointgeneralprevious.
Best Regards
Vincent Han
TechNet Community Support

Webcontent missing when browse via SSL VPN

Similar Messages

Maybe you are looking for