Level 1 (0 points)
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
The same exact experience is occuring for me.
If I discover a workaround, I'll be sure to post about it here-
Re: Cisco AnyConnect broken on Catalina
Level 1 (10 points)
Same thing happened with the first and successive betas of Mojave. The fix ended up being a new version of AnyConnect by Cisco.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Is there an alternative to AnyConnect can be used?
-
Re: Cisco AnyConnect broken on Catalina
Level 2 (50 points)
OpenConnect is an alternative, depending on what you are trying to connect to this might not be allowed. I have also not tested this on 10.15.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Depending on what you're trying to connect to, Cisco IPSec and others are available in macOS by default by adding a VPN interface in Network Preferences.
-
-
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
If your Mac is connected to an MDM use a profile pushed by it to whitelist the kext and see if it works after this. I expect the kext isn’t notarized so isn’t loading. Moving forward Cisco would need to ideally use DriverKit rather than a kext. I would create a support case with Cisco around this.
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
version 4.7.0.3.0.52 is somehow working but getting "failed to load compliance module" error msg of system scan.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Maul. Do you have a link to offer for the download of this version? I can't seem to find it.
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Try to start app via terminal with sudo. For me it worked.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Confirmed. This approach worked for me too. Thanks!
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I tried running `sudo /Applications/Cisco/Cisco\ AnyConnect\ Secure\ Mobility\ Client.app/Contents/MacOS/Cisco\ AnyConnect\ Secure\ Mobility\ Client`, but got the same error
Some questions: Does your Terminal app have any permissions enabled in System Preferences>Security & Privacy>Privacy?
Do you have SIP enabled?
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Can you provide the commands/instructions for this? I am not able to duplicate this.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Does this require using the 4.7.x variant of the client? I'm using 4.6.x and sudo-starting the app didn't improve the situation.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I am guessing something like this but it did not resolve my issue (obscured some information):
$ sudo /opt/cisco/anyconnect/bin/vpn connect vpn.domain.com
Cisco AnyConnect Secure Mobility Client (version 4.7.03052) .
Copyright (c) 2004 - 2019 Cisco Systems, Inc. All Rights Reserved.
>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (vpn.domain.com) for login information...
>> notice: Contacting vpn.domain.com.
>> Please enter your username and password.
0) Group1
1) Group2
Group: [Group2]
Username: [user@domain.com]
Password:
>> state: Connecting
>> notice: Establishing VPN session...
>> notice: The AnyConnect Downloader is performing update checks...
>> notice: Checking for profile updates...
>> notice: Checking for product updates...
>> notice: Checking for customization updates...
>> notice: Performing any required updates...
>> notice: The AnyConnect Downloader updates have been completed.
>> state: Connecting
>> notice: Establishing VPN session...
>> notice: Establishing VPN - Initiating connection...
>> notice: Establishing VPN - Examining system...
>> notice: Establishing VPN - Activating VPN adapter...
>> notice: Establishing VPN - Configuring system...
>> state: Disconnecting
>> notice: Disconnect in progress, please wait...
>> state: Disconnecting
>> error: The VPN client was unable to successfully verify the IP forwarding table modifications. A VPN connection will not be established.
>> state: Disconnected
>> notice: Ready to connect.
VPN>
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Sadly did not work for me (Catalina):
sudo /opt/cisco/anyconnect/bin/vpn connect vpn.redacted.com sudo: unable to execute /opt/cisco/anyconnect/bin/vpn: Bad CPU type in executable
I'm on AnyConnect version 4.5.05030 - I assume that's only 32 bit and Catalina is only 64 bit.
-
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I am using Catalina Beta 2, and I experienced no issues with anyconnect.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
What is the any-connect client version you are using?
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
it's 32bit application and Catalina only support 64bit...
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Related discussion in cisco forum: https://community.cisco.com/t5/vpn-and-anyconnect/macos-catalina-10-15-support/m-p/3878816
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
MacOS Catalina Beta 3 with Cisco AnyConenct 4.7.01076 works fine for me without any issue.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I wonder what's differing from system to system here -- I loaded that exact version of the AnyConnect client, and I get the IP Forwarding table issue still, on the Beta 3 build.
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I'm experiencing the same issue. Interestingly enough it throws this error when I try connect to the VPN while connected to my home Wifi (local cable modem ISP). But when I'm connected to my iPhone as a hotspot it works just fine. Go figure.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I have this issue on my home wifi. I suspect it has something to do with ipv4 addressing because I have found a work around. I turned on a guest wifi with different private ipv4 range. (i.e. 172.27.*.* instead of 192.168.1.* was the exact change. Maybe routing issues with 192.168.? just a wild guess.) My iPhone hotspot is also a work around. Hope this helps somebody.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I have tried iOS Personal Hotspot , and still getting CSD prelogin verification failed, also failing to get access to the latest build of AnyConnect from Cisco ( build June 2019) its saying my entitlement is not valid !! ahh other than this , MacOS Catalina was looking good , real shame
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Same here.
I would sugest to submit feedback with Feedback Assistant.
My feedback number for this isssue is FB6706975.
Lets make it visible to Apple and Cisco.
logs
$ /opt/cisco/anyconnect/bin/vpn connect vpn.domain.com
Cisco AnyConnect Secure Mobility Client (version 4.7.04056) .
Copyright (c) 2004 - 2019 Cisco Systems, Inc. All Rights Reserved.
>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (vpn.domain.com) for login information...
>> notice: Contacting vpn.domain.com.
>> Please enter your username and password.
Username: [username@domain.com]
Password:
>> state: Connecting
>> notice: Establishing VPN session...
vpndownloader[2419:23070] NSSoftLinking - The function 'SLSIsSuppressedByScreenTime' can't be found in the (null) framework.
>> notice: The AnyConnect Downloader is performing update checks...
>> notice: Checking for profile updates...
>> notice: Checking for customization updates...
>> notice: Performing any required updates...
>> notice: The AnyConnect Downloader updates have been completed.
>> state: Connecting
>> notice: Establishing VPN session...
>> notice: Establishing VPN - Initiating connection...
>> notice: Establishing VPN - Examining system...
>> notice: Establishing VPN - Activating VPN adapter...
>> notice: Establishing VPN - Configuring system...
>> state: Disconnecting
>> notice: Disconnect in progress, please wait...
>> state: Disconnecting
>> error: The VPN client was unable to successfully verify the IP forwarding table modifications. A VPN connection will not be established.
>> state: Disconnected
>> notice: Ready to connect.
VPN>
$
macOS Catalina 10.15 beta 4 (19A512f)
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Had the same issue after upgrading to Mac-OS Catalina.
Cisco Anyconnect version 4.7.04056 didnt worked on all the VPN Porfile configs, it worked for some and failed to some. DIfferent ASA Software and Hardware versions.
After I Updated Cisco AnyConnect to 4.8.00175, it works without any issues across the same ASA software and Hardware versions which was failing before.
* ASA Software: 9.6 to 9.8
* ASA Hardware: 5525X to ASA-FirePower
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Same issue here with AnyConnect 4.4. Starting it via the command line also did not work.
If anyone finds a solution, please, share it!
-
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Using OpenConnect works for me in Catalina instead of AnyConnect:
https://github.com/openconnect/openconnect-gui/releases/download/v1.5.3/openconnect-gui-1.5.3.high_sierra.bottle.tar.gz -
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
I am also facing the same issue if anyone find any solution please share.
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Have you tried uninstalling the client, restart computer, and re-install the same client?
-
-
Re: Cisco AnyConnect broken on Catalina
Level 1 (0 points)
Applies at least to MacOS: You should also check, that VPN does not give same DNS server IP that you have manually entered via Network settings for your adapter. Same error occurs also in that case. I would also recommend checking to make sure the Cisco client is up to date. Follow this guide to uninstall elder versions which may lead to creating a conflict.
