Re the AnyConnect DART not much progress there, I sent it to our IT dept (outsourced) who do nothing and then close the ticket on a weekend avoiding the 24h to reopen time limit. Looking at the file myself, not 100% sure how to read them but the only message of interest is the dead peer detection BUT not always before the reconnect SO I tried. They said it is not an AnyConnect client software issue but related Windows system. Finally, we resolved the issue by upgrade the issue user's computer Windows 10 version from 1903 to 2004. However, the same version AnyConnect client can install on other user's computer with Windows version 1903. So it is hard to say what is the issue point. They said it is not an AnyConnect client software issue but related Windows system. Finally, we resolved the issue by upgrade the issue user's computer Windows 10 version from 1903 to 2004. However, the same version AnyConnect client can install on other user's computer with Windows version 1903. So it is hard to say what is the issue point. For the Cisco AnyConnect Umbrella Roaming module, you need to run two tools: The AnyConnect DART and the roaming client Umbrella Diagnostic tool. Windows: Run the DART as per the instructions listed here; Run the diagnostic executable located here: C: Program Files (x86) Cisco Cisco AnyConnect Secure Mobility Client UmbrellaDiagnostic.exe; Mac.

Symptom: You receive the following error when trying to establish a connection with the Cisco AnyConnect client on Windows 8 x64.

Solution:

Option 1: PowerShell Method

Go to the Windows 8 Start screen, search for PowerShell, Run as an Administrator
Execute the following powershell command
1. Set-ItemProperty -Path HKLM:SYSTEMCurrentControlSetServicesvpnva -Name DisplayName -Value ‘Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64‘
Exit and reopen the Cisco AnyConnect Program

Option 2: Registry Editor GUI Method

Go to the Windows 8 Start screen, search for regedit, right click Run as administrator
Navigate to the following registry key
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvpnva
Double cick on the DisplayName value and replace the value with Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64
Exit and reopen the Cisco AnyConnect VPN client

by Jeff Stern

(Note: There is also an alternative method of installing UCI VPN support without using the Cisco client, but using the built-in Debian/Ubuntu openconnect and openvpn drivers, should you find the below method does not work for you, or if you prefer to use open-source non-proprietary software.)

Introduction

OIT has a good general VPN-Linux page with instructions on setting up the Cisco AnyConnect VPN client software for Linux, but I got tripped up in a couple of places and thought I'd pass on some heads-ups for other Debian and Ubuntu users.

I originally wrote this 'How-To' for Ubuntu v10, and have updated it through v17.04. It should work for most or all Debian-derived distributions through 9.0 ('Stretch').

Please do write me to let me know how it went for you, and/or with any suggestions. I'd love to hear that it helped someone and/or any improvements that could be added.

Thanks to several for the help getting here.

Summary

In the instructions below, I'll walk you through installing the Cisco VPN client on a Debian or Ubuntu system. When you're done, you'll have two commands available at the command-prompt, which you can run to connect to the campus VPN: 'vpn' (text mode) and 'vpnui' (graphical/windowing).

I used to also include instructions for getting VPN support to show up in the NetworkManager icon/applet in the system tray, for those who used a Gnome based desktop. I no longer do this, as it is too complicated these days to keep up with documenting the various desktop environments, and the changes (and unreliability) of NetworkManager. And it's not really necessary anyway. If you get it going for yourself, though, Kudos to You! :-)

Installing the Cisco AnyConnect client

First, make sure you have the necessary Debian/Ubuntu support packages installed:
Go to the UCI OIT Cisco Anyconnect/Linux instruction page.
Download the 32 or 64 bit client as a .gz file.

If you are usure whether you should use the 32 or 64 bit client: Most people are on 64-bit machines now. But if you are unsure, just run the uname command like this:As you can see from the above example, my machine has a 64-bit Intel (x86_64) based processor. If you see a '386' somewhere, then you are on a 32-bit machine.

From the command prompt, go to the directory you saved the file to, and unpack it and run, just like the OIT instructions. Note you might have to put in some back-slashes because the download file apparently comes with spaces in the file name these days:
If you get the following message at the end instead: it most likely means you did not install the two Ubuntu packages up in step 1, above.
- However, if you have installed those two packages, and are still getting this error, then user Steve Murphy wrote me (2015-12-7) with the tip that running the following did install enough dependent packages as to make it work for him:However, while this may help some users, this normally should not be necessary, and was not in my testing.
Now reload systemd, scanning for new or changed units:
The vpn client should now have been installed on your system and the vpnagentd process started. You can verify this by looking at the active processes:
During the installation, the vpnagentd daemon should now be set up to be started each time your system is booted. To verify:or
Make command aliases to point to the vpn and vpnui commands:
Also add these aliases to the end of your ~/.bashrc or ~/.bash_aliases file:(where you don't actually type the '^D': it means you hit Ctrl-D to finish).
If you want to edit your aliases file instead directly, you can run a simple editor, 'nano', which is usually available on Debian and Ubuntu systems:

Connecting and Disconnecting

Connecting (Graphical window)

Just run:

And it should show 'vpn.uci.edu' already. Just click Connect.

If you get an error message about an untrusted server or certificate.

.you can fix that following the instructions from Robert in the section NOTE 1 - Connect-error, below.

(By the way, depending on how the installation went, and whatever of the Linux desktop environments you are using (Gnome, Unity, KDE, Mate, Cinnamon, XFCE, etc.) you may also find that the vpnui graphical client now also appears somewhere in your Applications menu. But don't count on it! This is Linux, after all. :-) )

Connecting (via command-line)

To start the client from a command-line prompt in a terminal window, using the alias you made above:
At the VPN> prompt, type connect vpn.uci.edu and press Enter. (If you get an error message about an untrusted server or certificate, you can fix that following the instructions from Robert in the section NOTE 1 - Connect-error, below.) Otherwise, you should now see:If you do not see this, but get a connect error instead, please see NOTE 1 - Connect Error below.
Ignore the message about entering your UCInetID and password, for now.
Choose one of the choices by number and press return -- usually UCI or UCIFull. (See the differences in the Tunnels below.) For instance, for UCI, press 3 and hit Enter.
Enter your UCInetID and password in the Username and Password boxes and press return.
At the accept? [y/n]: prompt, type y and press Enter. You may get several notices the first time about the downloader performing update checks. At the end you should see a >> state: Connected message and a new VPN> prompt. You are now connected.
Either leave the VPN> prompt open or if you want your terminal back just type quit at the VPN> prompt (the connection will remain active).

Connecting automatically via Command-line (w/o typing in your Username/Password)

I never (not yet?) figured out how to get the Cisco anyconnect software to run via script with command-line parameters sufficient for its running without having to type in your username (UCINetID) and password. I looked into the vpn command / executable supplied by Cisco (in the anyconnect-predeploy package) and running -h on it does not give much help.

Therefore, if you need something comma

Anyconnect Dart