Cisco Cisco AnyConnect Secure Mobility Client v3.x User Guide

Page of 36
34
iPhone User Guide for Cisco AnyConnect Secure Mobility Client, Release 3.0.x
 
  Troubleshooting
Troubleshooting
This section describes solutions to common problems. If after trying these solutions problems still 
persist, contact your organization’s IT support department.
I cannot edit/delete some connection profiles.
Your system administrator set a policy that affects host entries imported into your AnyConnect 
connection profile. To delete these profiles, tap Diagnostics > Profile > Clear Profile Data.
Errors while trying to save or edit configuration.
A known issue with the operating system is the cause. Apple is working to resolve it. As a 
workaround, try restarting the application.
Connection time-outs and unresolved hosts.
Internet connectivity issues, a low cell signal level, and network congestion often cause time-outs 
and unresolved host errors. If a LAN is within reach, try using your device Settings application to 
establish a connection with the LAN first. Retrying multiple times in response to time-outs often 
results in success.
VPN connection is not re-established when the device wakes from sleep.
Enable Network Roaming in the VPN connection entry. If enabling network roaming does not 
resolve the issue, check your EDGE(2G), 1xRTT(2G), 3G, or Wi-Fi connection.
Note
This issue may be expected behavior depending on how your organization has configured 
the VPN.
Certificate-based authentication does not work.
Check the validity and expiration of the certificate if you succeeded with it before. Check with your 
system administrator to make sure you are using the appropriate certificate for the connection.
The Apple iOS Connect On Demand feature is not working or connecting unexpectedly.
Ensure the connection does not have a conflicting rule in the Never Connect list. If a Connect If 
Needed rule exists for the connection, try replacing it with an Always Connect rule.
AnyConnect failed to establish a connection but no error message was displayed.
Messages display only when the AnyConnect application is open.
A profile called Cisco AnyConnect exists that cannot be deleted.
Try restarting the application.
When I remove the AnyConnect application, VPN configurations still appear in the Apple iOS 
VPN settings.
To delete these profiles, reinstall AnyConnect, tap Diagnostics > Profile > Clear Profile Data.
Known Issues in Apple iOS Impacting VPN
We have reported the following iOS issues to Apple. They may be resolved in a future iOS release.
A DTLS packet received while the device is asleep does not awaken it. TLS packets, however, 
awaken the device if notifications or Facetime is enabled. AnyConnect automatically disconnects 
the DTLS tunnel when the device goes to sleep to allow packets received over the TLS connection 
to wake the device. The DTLS tunnel is restored when the device resumes.