Cisco Cisco AnyConnect Secure Mobility Client v2.x Troubleshooting Guide
connecting until users open a browser and accept the conditions for access.
Captive Portal Remediation Requirements
Support for both captive portal detection and remediation requires one of these licenses:
AnyConnect Premium (Secure Sockets Layer (SSL) VPN Edition)
●
Cisco AnyConnect Secure Mobility
●
You can use a Cisco AnyConnect Secure Mobility license in order to provide support for captive
portal detection and remediation in combination with either an AnyConnect Essentials or an
AnyConnect Premium license.
portal detection and remediation in combination with either an AnyConnect Essentials or an
AnyConnect Premium license.
Note: Captive portal detection and remediation is supported on the Microsoft Windows and
Macintosh OS X operating systems supported by the release of AnyConnect that is in use.
Macintosh OS X operating systems supported by the release of AnyConnect that is in use.
Captive Portal Hotspot Detection
AnyConnect displays the Unable to contact VPN server message on the GUI if it cannot
connect, regardless of the cause. The VPN server specifies the secure gateway. If Always-on is
enabled and a captive portal is not present, the client continues to attempt to connect to the VPN
and updates the status message accordingly.
connect, regardless of the cause. The VPN server specifies the secure gateway. If Always-on is
enabled and a captive portal is not present, the client continues to attempt to connect to the VPN
and updates the status message accordingly.
If the Always-on VPN is enabled, the connect failure policy is closed, captive portal remediation is
disabled, and AnyConnect detects the presence of a captive portal, then the AnyConnect GUI
displays this message once per connection and once per reconnect:
disabled, and AnyConnect detects the presence of a captive portal, then the AnyConnect GUI
displays this message once per connection and once per reconnect:
If AnyConnect detects the presence of a captive portal and the AnyConnect configuration differs
from that previously described, the AnyConnect GUI displays this message once per connection
and once per reconnect:
from that previously described, the AnyConnect GUI displays this message once per connection
and once per reconnect:
Caution: Captive portal detection is enabled by default and is nonconfigurable. AnyConnect
does not modify any browser configuration settings during captive portal detection.
does not modify any browser configuration settings during captive portal detection.
Captive Portal Hotspot Remediation
Captive portal remediation is the process where you satisfy the requirements of a captive portal
hotspot in order to obtain network access.
hotspot in order to obtain network access.
AnyConnect does not remediate the captive portal; it relies on the end user to perform the
remediation.
remediation.
In order to perform the captive portal remediation, the end user meets the requirements of the
hotspot provider. These requirements might include payment of a fee to access the network, a
signature on an acceptable use policy, both, or some other requirement that is defined by the
provider.
hotspot provider. These requirements might include payment of a fee to access the network, a
signature on an acceptable use policy, both, or some other requirement that is defined by the
provider.
Captive portal remediation must be explicitly allowed in an AnyConnect VPN Client profile if
AnyConnect Always-on is enabled and the Connect failure policy is set to Closed. If Always-on is
enabled and the Connect Failure policy is set to Open, you do not need to explicitly allow captive
AnyConnect Always-on is enabled and the Connect failure policy is set to Closed. If Always-on is
enabled and the Connect Failure policy is set to Open, you do not need to explicitly allow captive