Windows 10: Continuous 2FA prompts using Cisco AnyConnect after selecting "Don`t ask again for 60 Days"

Hello,


Members of my organization are selecting "don`t ask again for 60 days" after entering their username and password during their VPN connection using the Cisco AnyConnect VPN client. For some users this doesn`t work and they continuously receive a 2fA prompt. If they were accessing Office 365 with their browser we would troubleshoot the browsers privacy settings however Cisco says this.


You can useSAML 2.0 integrated with ASA release 9.7.1 for initial session authentication. AnyConnect 4.6 introduces anenhanced version of SAML integration with an embedded browser which replacesthe native external browser integration from previous releases. Whenconnecting to a tunnel group configured for SAML authentication, AnyConnect opensan embedded browser window to complete the authentication process. Every SAML attempt uses a newbrowser session, and the browser session is specific to AnyConnect the sessionstate is not shared with any other browsers. Although each SAMLauthentication attempt starts with no session state, permanent cookies persistbetween attempts.

We are using SAML. And then they say this.


Since AnyConnect with the embedded browser uses a new browser session on every VPN attempt, users must re-authenticate every time, if the IdP uses HTTP session cookies to track logon state. In this case, the Force Re-Authentication setting in Configuration > Remote Access VPN > Clientless SSL VPN Access > Advanced > Single Sign On Servers > has no effect on AnyConnect initiated SAML authentication.


Here is the article

Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 4.6 - Configure VPN Access [Cisco AnyConnect Secure Mobility Client] - Cisco


Where on the computer or even on a smartphone or tablet can unblock this cookie?

Thanks in advance,


Martin

:)

 

Cisco AnyConnect

Hello
Xiu RuLim,

It seems that there are some traces in the registry left even after uninstalling the program.
I suggest that you follow these steps to delete the registry keys related to Cisco AnyConnect.

Disclaimer: The steps below includes system registry modification. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection,
back up the registry before you modify it. Then, you can restore the registry if a problem occurs.

Make sure to backup registry first, please refer to this support article:
How to back up the registry in Windows. Please follow the steps below:

1. Press Windows key + R. The run dialog box will open.
2. Type regedit, then press Enter.
3. Browse to the following location: HKEY_CLASSES_ROOT\Installer\Products\
4. Within the Products folder, locate and delete the registry key which contains product information for
   Cisco AnyConnect Secure Mobility Client.
   
   ◦Each registry key within Products is an alphanumeric string. Select the first key and look on the right side for ProductName REG_SZ Cisco AnyConnect Secure Mobility Client. Go through each key in the Products folder until you find the one for Cisco AnyConnect
   Secure Mobility Client.
5. Close the registry editor.
6. Once done, try to start the installation for Cisco AnyConnect.

Hope this helps. If you would like me to provide additional advice, simply respond to this thread. I will get notified and I’ll reply to you as soon as I can.

 

Cisco Anyconnect interface stopped working in windows 10

Hi,

I suggest you to try the resolution given under username thx1e
in the below link and check if it helps;

Does Cisco AnyConnect function under Windows 10?

If the issue still persist, you may try to run the program in compatibility mode and check if it helps;

• 
  Right click vpnui.exe in the “Cisco AnyConnect Secure Mobility Client” folder. (you may have it in “C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\).
  
• 
  Choose Troubleshoot compatibility.
  
• 
  Choose “Try recommended settings”.
  
• 
  Click “Test Program”. This will open the program.
  

If the issue still persist, you may contact the Cisco support team for a software upgrade to work the program in Windows 10. Please click on the below link to go to the Cisco support website.

http://www.cisco.com/c/en/us/support/index.html



Let us know if you need further assistance, we will be glad to help you.

 

Cisco AnyConnect error Failure the credential are invalid.

I am running Windows 10 on a Lenovo ThinkPad. I am using Cisco AnyConnect to tunnel into my employer network. Suddenly today, I receive an error Failure the credential are invalid.

OT:

Cisco AnyConnect