Skip navigation

Cisco AnyConnect broken on Catalina

40304 Views 34 Replies

Latest reply on Jan 21, 2020 10:00 AM by argentcove

Level 1 (0 points)

dlperry0322 Jun 6, 2019 7:56 PM

Cisco AnyConnect is broken on Catalina. Throws up "The VPN client was unable to successfully verify the IP forwarding table modifications. A VPN connection will not be established." error. Using version 4.7 of Cisco AnyConnect. Worked fine before upgrade to Catalina.

Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
drew0rfalse Jun 7, 2019 9:42 AM (in response to dlperry0322)

The same exact experience is occuring for me.
If I discover a workaround, I'll be sure to post about it here
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (10 points)
  PTVMan Jun 7, 2019 11:18 AM (in response to drew0rfalse)
  
  Same thing happened with the first and successive betas of Mojave. The fix ended up being a new version of AnyConnect by Cisco.
  
  This helped me (0)
  
  Actions
  - Re: Cisco AnyConnect broken on Catalina
    
    Level 1 (0 points)
    dlperry0322 Jun 7, 2019 11:23 AM (in response to PTVMan)
    
    Is there an alternative to AnyConnect can be used?
    
    This helped me (1)
    
    Actions
    - Re: Cisco AnyConnect broken on Catalina
      
      Level 2 (50 points)
      Kean Jun 7, 2019 11:28 AM (in response to dlperry0322)
      
      OpenConnect is an alternative, depending on what you are trying to connect to this might not be allowed. I have also not tested this on 10.15.
      
      This helped me (0)
      
      Actions
    - Re: Cisco AnyConnect broken on Catalina
      
      Level 1 (0 points)
      GrandMasterJ Jun 7, 2019 11:32 PM (in response to dlperry0322)
      
      Depending on what you're trying to connect to, Cisco IPSec and others are available in macOS by default by adding a VPN interface in Network Preferences.
      
      This helped me (0)
      
      Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
dtommey Jun 9, 2019 10:59 AM (in response to dlperry0322)

If your Mac is connected to an MDM use a profile pushed by it to whitelist the kext and see if it works after this. I expect the kext isn’t notarized so isn’t loading. Moving forward Cisco would need to ideally use DriverKit rather than a kext. I would create a support case with Cisco around this.
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
Narse77 Jun 10, 2019 1:21 PM (in response to dlperry0322)

Same problem here.
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
maul Jun 17, 2019 11:24 PM (in response to dlperry0322)

version 4.7.0.3.0.52 is somehow working but getting "failed to load compliance module" error msg of system scan.
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  dlperry0322 Jun 20, 2019 7:39 PM (in response to maul)
  
  Maul. Do you have a link to offer for the download of this version? I can't seem to find it.
  
  This helped me (0)
  
  Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
diorgulescu Jun 20, 2019 10:16 PM (in response to dlperry0322)

Try to start app via terminal with sudo. For me it worked.
This helped me (1)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  marana Jun 21, 2019 6:41 AM (in response to diorgulescu)
  
  Confirmed. This approach worked for me too. Thanks!
  
  This helped me (0)
  
  Actions
  - Re: Cisco AnyConnect broken on Catalina
    
    Level 1 (0 points)
    Vegerot Nov 4, 2019 8:12 AM (in response to marana)
    
    I tried running `sudo /Applications/Cisco/Cisco\ AnyConnect\ Secure\ Mobility\ Client.app/Contents/MacOS/Cisco\ AnyConnect\ Secure\ Mobility\ Client`, but got the same error
    Some questions: Does your Terminal app have any permissions enabled in System Preferences>Security & Privacy>Privacy?
    Do you have SIP enabled?
    
    This helped me (0)
    
    Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  dlperry0322 Jun 21, 2019 7:54 AM (in response to diorgulescu)
  
  Can you provide the commands/instructions for this? I am not able to duplicate this.
  
  This helped me (0)
  
  Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  analoguedarkness Jun 21, 2019 10:51 AM (in response to diorgulescu)
  
  Does this require using the 4.7.x variant of the client? I'm using 4.6.x and sudo-starting the app didn't improve the situation.
  
  This helped me (0)
  
  Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  Martin Bokman Jun 21, 2019 10:57 AM (in response to diorgulescu)
  
  I am guessing something like this but it did not resolve my issue (obscured some information):
  
  $ sudo /opt/cisco/anyconnect/bin/vpn connect vpn.domain.com
  Cisco AnyConnect Secure Mobility Client (version 4.7.03052) .
  
  Copyright (c) 2004 - 2019 Cisco Systems, Inc. All Rights Reserved.
  
  >> state: Disconnected
  >> state: Disconnected
  >> notice: Ready to connect.
  >> registered with local VPN subsystem.
  >> contacting host (vpn.domain.com) for login information...
  >> notice: Contacting vpn.domain.com.
  
  >> Please enter your username and password.
  0) Group1
  1) Group2
  Group: [Group2]
  
  Username: [user@domain.com]
  Password:
  >> state: Connecting
  >> notice: Establishing VPN session...
  >> notice: The AnyConnect Downloader is performing update checks...
  >> notice: Checking for profile updates...
  >> notice: Checking for product updates...
  >> notice: Checking for customization updates...
  >> notice: Performing any required updates...
  >> notice: The AnyConnect Downloader updates have been completed.
  >> state: Connecting
  >> notice: Establishing VPN session...
  >> notice: Establishing VPN - Initiating connection...
  >> notice: Establishing VPN - Examining system...
  >> notice: Establishing VPN - Activating VPN adapter...
  >> notice: Establishing VPN - Configuring system...
  >> state: Disconnecting
  >> notice: Disconnect in progress, please wait...
  >> state: Disconnecting
  >> error: The VPN client was unable to successfully verify the IP forwarding table modifications. A VPN connection will not be established.
  >> state: Disconnected
  >> notice: Ready to connect.
  VPN>
  
  This helped me (0)
  
  Actions
  - Re: Cisco AnyConnect broken on Catalina
    
    Level 1 (0 points)
    BrendanTWhite Aug 2, 2019 4:15 PM (in response to Martin Bokman)
    
    Sadly did not work for me (Catalina):
    sudo /opt/cisco/anyconnect/bin/vpn connect vpn.redacted.com sudo: unable to execute /opt/cisco/anyconnect/bin/vpn: Bad CPU type in executable
    I'm on AnyConnect version 4.5.05030 - I assume that's only 32 bit and Catalina is only 64 bit.
    
    This helped me (0)
    
    Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
supastylinboi Jun 25, 2019 8:45 PM (in response to dlperry0322)

I am using Catalina Beta 2, and I experienced no issues with anyconnect.
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  Rina5495 Jun 26, 2019 7:50 AM (in response to supastylinboi)
  
  What is the any-connect client version you are using?
  
  This helped me (0)
  
  Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
terrence.martineau Jun 26, 2019 4:43 PM (in response to dlperry0322)

it's 32bit application and Catalina only support 64bit...
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
Rina5495 Jun 27, 2019 11:35 AM (in response to dlperry0322)

Related discussion in cisco forum: https://community.cisco.com/t5/vpn-and-anyconnect/macos-catalina-10-15-support/m-p/3878816
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
Balki Jul 3, 2019 7:58 AM (in response to dlperry0322)

MacOS Catalina Beta 3 with Cisco AnyConenct 4.7.01076 works fine for me without any issue.
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  analoguedarkness Jul 6, 2019 6:25 PM (in response to Balki)
  
  I wonder what's differing from system to system here -- I loaded that exact version of the AnyConnect client, and I get the IP Forwarding table issue still, on the Beta 3 build.
  
  This helped me (0)
  
  Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
owellsjr Jul 8, 2019 2:49 PM (in response to dlperry0322)

I'm experiencing the same issue. Interestingly enough it throws this error when I try connect to the VPN while connected to my home Wifi (local cable modem ISP). But when I'm connected to my iPhone as a hotspot it works just fine. Go figure.
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
tsrk Jul 12, 2019 7:04 PM (in response to dlperry0322)

I have this issue on my home wifi. I suspect it has something to do with ipv4 addressing because I have found a work around. I turned on a guest wifi with different private ipv4 range. (i.e. 172.27.*.* instead of 192.168.1.* was the exact change. Maybe routing issues with 192.168.? just a wild guess.) My iPhone hotspot is also a work around. Hope this helps somebody.
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  mjperrins Jul 13, 2019 1:22 PM (in response to tsrk)
  
  I have tried iOS Personal Hotspot , and still getting CSD prelogin verification failed, also failing to get access to the latest build of AnyConnect from Cisco ( build June 2019) its saying my entitlement is not valid !! ahh other than this , MacOS Catalina was looking good , real shame
  
  This helped me (0)
  
  Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
aposp Jul 17, 2019 7:09 AM (in response to dlperry0322)

Same here.
I would sugest to submit feedback with Feedback Assistant.
My feedback number for this isssue is FB6706975.
Lets make it visible to Apple and Cisco.

logs

$ /opt/cisco/anyconnect/bin/vpn connect vpn.domain.com
Cisco AnyConnect Secure Mobility Client (version 4.7.04056) .

Copyright (c) 2004 - 2019 Cisco Systems, Inc. All Rights Reserved.

>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (vpn.domain.com) for login information...
>> notice: Contacting vpn.domain.com.

>> Please enter your username and password.

Username: [username@domain.com]
Password:
>> state: Connecting
>> notice: Establishing VPN session...
vpndownloader[2419:23070] NSSoftLinking - The function 'SLSIsSuppressedByScreenTime' can't be found in the (null) framework.
>> notice: The AnyConnect Downloader is performing update checks...
>> notice: Checking for profile updates...
>> notice: Checking for customization updates...
>> notice: Performing any required updates...
>> notice: The AnyConnect Downloader updates have been completed.
>> state: Connecting
>> notice: Establishing VPN session...
>> notice: Establishing VPN - Initiating connection...
>> notice: Establishing VPN - Examining system...
>> notice: Establishing VPN - Activating VPN adapter...
>> notice: Establishing VPN - Configuring system...
>> state: Disconnecting
>> notice: Disconnect in progress, please wait...
>> state: Disconnecting
>> error: The VPN client was unable to successfully verify the IP forwarding table modifications. A VPN connection will not be established.
>> state: Disconnected
>> notice: Ready to connect.
VPN>
$

macOS Catalina 10.15 beta 4 (19A512f)
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  krishk Oct 12, 2019 8:15 AM (in response to aposp)
  
  Had the same issue after upgrading to Mac-OS Catalina.
  Cisco Anyconnect version 4.7.04056 didnt worked on all the VPN Porfile configs, it worked for some and failed to some. DIfferent ASA Software and Hardware versions.
  
  After I Updated Cisco AnyConnect to 4.8.00175, it works without any issues across the same ASA software and Hardware versions which was failing before.
  
  * ASA Software: 9.6 to 9.8
  * ASA Hardware: 5525X to ASA-FirePower
  
  This helped me (0)
  
  Actions
  - Re: Cisco AnyConnect broken on Catalina
    
    Level 1 (0 points)
    letakeda Oct 14, 2019 3:35 PM (in response to krishk)
    
    Same issue here with AnyConnect 4.4. Starting it via the command line also did not work.
    If anyone finds a solution, please, share it!
    
    This helped me (0)
    
    Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
lakmus Oct 16, 2019 4:03 AM (in response to dlperry0322)

Using OpenConnect works for me in Catalina instead of AnyConnect:
https://github.com/openconnect/openconnect-gui/releases/download/v1.5.3/openconnect-gui-1.5.3.high_sierra.bottle.tar.gz
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
sonamsngh7 Oct 17, 2019 11:57 PM (in response to dlperry0322)

I am also facing the same issue if anyone find any solution please share.
This helped me (0)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  arana2 Oct 21, 2019 7:00 AM (in response to sonamsngh7)
  
  Have you tried uninstalling the client, restart computer, and re-install the same client?
  
  This helped me (0)
  
  Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
ClemHarvey Dec 4, 2019 6:11 PM (in response to dlperry0322)

Applies at least to MacOS: You should also check, that VPN does not give same DNS server IP that you have manually entered via Network settings for your adapter. Same error occurs also in that case. I would also recommend checking to make sure the Cisco client is up to date. Follow this guide to uninstall elder versions which may lead to creating a conflict.
This helped me (0)

Actions
Re: Cisco AnyConnect broken on Catalina

Level 1 (0 points)
jeffj55374 Jan 15, 2020 4:50 PM (in response to dlperry0322)

FYI - encounter this on Mac with 10.15 and both Cisco 4.7 an 4.8.

This occurred when connected to my dock that was hard-wired to my home network and the laptop was simultaneouly connected to WiFi on the same network.

Workaround:
* Unplug the hard-wired ethernet connection from the dock
OR
* turn off WiFi

Doing either allowed it to connect. Based on a few other replies here and posts elsewhere, my theory is that Cisco doesn't handle multiple connections to the same network correctly.
This helped me (1)

Actions
- Re: Cisco AnyConnect broken on Catalina
  
  Level 1 (0 points)
  argentcove Jan 21, 2020 10:00 AM (in response to jeffj55374)
  
  I was already connected to the VPN. Then I plugged in my USB-C to Ethernet adapter and disconnected from the VPN. The next time I attempted to connect I got this error. As stated above, turning off WiFi fixed it. So I left my adapter connected, turned WiFi back on and rebooted. Everything works again.
  
  This helped me (0)
  
  Actions

Go to original post

More Like This