UNIVERSITY OF COLOGNE

Troubleshooting / FAQs

• AnyConnect-Client:
  
  • Error "Failed to initialize connection subsystem" auf Windows 8 und 10: This error is caused by a Microsoft update. You can find a workaround and further information on the Leibniz-Rechenzentrum website.
  • Incompatibilities: There are known incompatibilities with internet security suites respectively personal firewalls of the publishers F-Secure and Kaspersky. In the case of Kapersky problems can be solved if you exclude the SSL Port 443 from the protection under: settings > network > port settings
  
  
  • Problems with installation under Vista: If the installation of the AnyConnect Client fails under Vista and you get the error message "The VPN client agent was unable to create the interprocess communication depot", you can try to deactivate the service for the shared internet connection. In oder to do so, click on Control Panel > View network status and tasks > change adapter settings > right click on shared connection and choose properties > click sharing tab. After deactivating the function, you have to reboot the computer.
    
    
  • AnyConnect VPN Client Troubleshooting Tech Note by Cisco
    
    
  • If you got trouble with the AnyConnect Client, you can install the IPSec Client parallel if it is available for your platform.
    
    
• IPSec-Client:
  
  • Problems through changing or relocating the entries in the start menu (Windows): and thereby making the client useless. If taking back the changes is not helping, you have to deinstall the client and install it again. There are hints that these problems only occur with the use of the MSI installer and not with the IS installer.
    
    
  • Problems through additional firewalls
    For IPSec, firewalls don't have to be configured between the client and the VPN server. The following ports can, if necessary, be opened in both directions:
  • UDP port 500
  • UDP port 10000
  • UDP 4500
  • IP protocol 50 ESP
  
  
  • If you have problems with your IPSec Client you cannot by no means install a parallel second version (IS version/MSI version), but deinstall the existing version at first.