“Unconnected sockets not implemented” when using ASDM

December 12th, 2008

After logging in to ASDM, you may see the message “Unconnected sockets not implemented”

There are two solutions:

  • Upgrade ASDM to 6.15.51
  • Downgrade Java to 1.6.0_07

iPhone Cisco VPN Client & DNS

November 26th, 2008

In versions 2.0 and 2.1, The iPhone VPN Client does not properly send DNS requests. You can work around it on the PIX or ASA by using Split DNS on the appropriate group policy:

group-policy XYZ internal
group-policy XYZ attributes
split-dns value myinternaldomain.com

UPDATE: This appears to be fixed in iPhone software version 2.2, which was released on November 22nd.

Fixing “Server Certificate Problem” with Cisco AnyConnect

July 26th, 2008

After upgrading Ubuntu to Hardy I got the error “Server Certificate Problem” when using Cisco’s AnyConnect VPN client.  The fix was to create these symlinks:

sudo ln -s /usr/lib/libnss3.so.1d /usr/lib/libnss3.so
sudo ln -s /usr/lib/libplc4.so.0d /usr/lib/libplc4.so
sudo ln -s /usr/lib/libnspr4.so.0d /usr/lib/libnspr4.so
sudo ln -s /usr/lib/libsmime3.so.1d /usr/lib/libsmime3.so