300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

Question

Cisco AnyConnect Secure Mobility Client is configured to use IKEv2 for one user group and SSL for another. After the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot automatically download it when connecting. What could be the issue?

Explanation

For IKEv2 connections, the ASA Client Services Server supplies HTTPS/SSL access for the AnyConnect downloader to retrieve software updates. Without Client Services, the client can still establish a basic IKEv2 IPsec connection, but it cannot download the client software update.

Learn more

Cisco Secure Firewall ASA Command Reference — crypto ikev2 enable

300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

AstroTutor

Notes

Readiness

QuestionQ50

Community Discussion