Hello,
On Fri, 7 Aug 2020 at 19:46, Chuck Church <[email protected]> wrote:
>
> Hey all,
>
>
>
> I've got a small company I support occasionally that deploys
> Anyconnect VPN service on small ISR G2 models for customers. It seems that
> recently Chrome and it seems like Edge and IE are not allowing connections
> to TLS 1.0 or anything SSL. It appears that based on googling this is a
> known issue, that was resolved on ASA with a recent 9.x release. Anyone
> know a work-around for IOS 15.x? Once the users of the VPN login once to
> the portal page then can install the anyconnect client and never use the
> browser again. But that first time is an issue. The configs are good,
> works fine on older Firefox versions.
While CSCuv27265 ("ENH: Enable support for TLSv1.1 & TLSv1.2 for http
secure server/client") is fixed in 15.5(3)M4 (and 15.6(3)M of course),
CSCux73159 ("ENH: TLS1.2 Support for SSLVPN on IOS and IOS-XE") is
terminated (it's unclear why).
But maybe the former fix is enough to download the client? I suggest
you try the 15.6(3)M train or later.
lukas
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
