Can't Install Cisco AnyConnect

Yes, I'm having the same problem. One of the temporary installation directories (/var/folders/zz/zyxv.../C/PKIInstallSandboxManager-SystemSoftware") has the "restricted" flag associated with it. I have been unable to remove or change it even in single user mode.

Does anyone know how to clear this flag?

--Rick

I found this WWDC video that explains the enhanced security in El Capitan. The info starts at around 11 minutes in. THe short version is that you need to disable this new "feature" from the recovery partition. Bad news is that the VPN still doesn't work (3.1 or 4.1) but I thought I'd share that I got a little farther.

https://developer.apple.com/videos/wwdc/2015/?id=706

--Rick

Hello,

are you guys having the same issues with a less antiquated version of the AnyConnect client (i.e., 3.1.08009 or newer) ? The one mentioned is more than a year old ...

Chris

I also tried 4.1.00028 with the same results.

--Rick

What about 4.1.02011, then ? :-) That one's fairly recent, just released on June 11.

I'll admit that no OS X-related bugs seem to have been fixed in that update, if release notes / bug database are to be believed, though.

Cheers,

Christoph

I am running 3.1.05187 but i upgraded to 10.11 from 10.10. Was going to do a clean install and start fresh until now.

I tried to install Version 4.9.01.0280 and got this message in the logs:

6/19/15 3:23:08.774 PM Installer[1926]: Package /Volumes/CiscoVPNClient/Cisco VPN Client.mpkg uses a deprecated pre-10.2 format (or uses a newer format but is invalid).

Is there some other VPN softwares can work instead of Anyconnect?

Hi,

4.9.01.0280 ? Which one is that? Please take a look at https://software.cisco.com/download/release.html?mdfid=286281283&catid=268438162&softwareid=282364313 - the version number you mentioned neither fits the versioning scheme, nor does any "4.9" version seem to exist. (4.1 is the newest release train.)

Ummm, confusing. 🙂 Could you please double-check?

Anybody tried opening a TAC case with Cisco for their install problems?

Cheers,

Christoph

Hello,

this very much depends on the head-end your organization uses. So, yes, there are a number of products on the market.

At my job, I happen to work a lot with Cisco products, so I guess I could say a few things about those. But there certainly are quite a few other manufacturers of VPN solutions on the market. But I guess this is getting a little beyond the scope of this thread.

This version is a reference to the original Cisco VPN Client (IPsec) which has been EOL for many years now.

Cisco VPN Client has been replaced by AnyConnect.

There is a bug in the AnyConnect VPN installer that is triggering the issue. It will be fixed in upcoming maitenance releases of AnyConnect 3.1 and 4.1.

The installer issue will be fixed in upcoming AnyConnect maintenance releases. I wouldn't recommend disabling any OS X security features.

If you've managed to install AnyConnect on El Capitan (or had it persist during an OS X upgrade) but are still running into issues with establishing a VPN tunnel, can you describe the issue that you're encountering?

Hello,

ah, alright, now that explains why that version number seemed so mysterious to me. Yes, I'm quite aware the old client has been EOL for a long time and that AnyConnect is the current solution.

[Makes me wonder why the original poster even used that old VPN client in the first place, since support for classic Cisco VPN has been built into Mac OS X for quite a few versions now, so no need to even install an additional client. Is that support still included in OS X 10.11, by the way?]

Cheers,

Christoph

Hi everybody,

Cisco Bug ID is CSCuv03446 ("AnyConnect fails to install on OS X 10.11 El Capitan").

If you have a way to do so, talk to Cisco TAC to tell them you're affected by this one as well. More customers asking --> higher priority for Cisco to fix it quickly. (Yes, I'm aware it's classified as a category 2 / "severe" bug already, but still - "number of customers affected" is a relevant metric.)

Cheers,

Christoph

I was using Cisco AnyConnect version 3.1.00495 with Yosemite. When that failed to work with El Capitan, I thought I was upgrading to a newer version but 4.9.01.0280 is the Cisco VPN Client. I need to use AnyConnect to connect to work.

Hello,

the idea with Cisco Anyconnect is that you automatically receive updates for the software upon connecting to the VPN head-end, provided that the administrator of said head-end chooses to install the update to that machine.

It find it quite surprising that you weren't on 3.1.08009, or, to put it differently, quite surprising (substitute stronger language if you will) that the people in charge of operating that network don't seem to be too keen on deploying current versions to end users ... somewhat worrying, really.

So, usually, there is no need for end users to ever install updates to AnyConnect manually. Talk to your network admins in case there is a need to attempt a manual installation (though it may fail on El Capitan right now, as we have learned ... but an update from Cisco may be coming along fairly soon) and ask them to provide you with the most current .dmg image.

Cheers,

Christoph

Hi all,

the new verison 3.1.09013 is working for me (after disabling that security feature on the Recovery Partition. Finally 🙂

3.1.09013 worked for me on 10.11 beta, however I did not have to disable any security features on the Recovery Partition.

Hello,

just to give all of you a little update: The bug is described as "fixed" in Cisco's database, and version numbers (for AnyConnect 3.1 as well as for 4.1) containing the fix have been added to the article.

The software itself has not been published yet in its bug-fixed version - the fixed versions are still internal to Cisco - but a bugfix seems to be well underway.

Will post more info here once the bug-fixed versions are out.

Cheers,

Christoph

Using Shimo you can create a Anyconnect compatible profile and it works fine under 10.11. I found this out when I also could not install AnyConnect client.