Cisco Cisco AnyConnect Secure Mobility Client v2.x Troubleshooting Guide

Your VPN connection has exceeded the session time limit. A new connection is 

necessary, which requires re-authentication.

The VPN session was terminated because it exceeded the time permitted by the secure 

gateway for a VPN session. This feature helps protect the private network by requiring the user to 
re-authenticate with the secure gateway.

Start a new VPN session.

Your account is disabled.

The user’s account is disabled and cannot be used to access the VPN.

Report the error to your organization's technical support.

Your certificate is invalid for the selected group

The secure gateway validated the certificate provided by AnyConnect, however, the 

applied connection policy (tunnel group) does not permit the certificate. The certificate might be 
valid for another connection policy configured on the secure gateway.

Report the error to your organization's technical support and ask for the 

proper certificate.

Provide instructions to obtain the certificate required for VPN 

access.

Your client certificate will be used for authentication

Certificate-only authentication is in use. Instead of providing a username and password 

as credentials, the user’s certificate will be used for authentication.

Your connection to the secure gateway has been suspended longer than the allotted 

time limit. A new connection is necessary, which requires re-authentication.

The VPN session was terminated because it exceeded the VPN session idle timer limit 

configured on the secure gateway. This feature helps protect the private network by requiring the 
user to re-authenticate with the secure gateway.

Start a new VPN session.