Can't Install Cisco AnyConnect

Anyone else have issues installing a fresh copy of Cisco AnyConnect (3.1.05152) on OS X 10.11?

Yes, I'm having the same problem. One of the temporary installation directories (/var/folders/zz/zyxv.../C/PKIInstallSandboxManager-SystemSoftware") has the "restricted" flag associated with it. I have been unable to remove or change it even in single user mode.


Does anyone know how to clear this flag?


--Rick

I found this WWDC video that explains the enhanced security in El Capitan. The info starts at around 11 minutes in. THe short version is that you need to disable this new "feature" from the recovery partition. Bad news is that the VPN still doesn't work (3.1 or 4.1) but I thought I'd share that I got a little farther.


https://developer.apple.com/videos/wwdc/2015/?id=706


--Rick

Hello,


are you guys having the same issues with a less antiquated version of the AnyConnect client (i.e., 3.1.08009 or newer) ? The one mentioned is more than a year old ...


Chris

I also tried 4.1.00028 with the same results.


--Rick

What about 4.1.02011, then ? :-) That one's fairly recent, just released on June 11.


I'll admit that no OS X-related bugs seem to have been fixed in that update, if release notes / bug database are to be believed, though.



Cheers,


Christoph

I am running 3.1.05187 but i upgraded to 10.11 from 10.10. Was going to do a clean install and start fresh until now.

I tried to install Version 4.9.01.0280 and got this message in the logs:


6/19/15 3:23:08.774 PM Installer[1926]: Package /Volumes/CiscoVPNClient/Cisco VPN Client.mpkg uses a deprecated pre-10.2 format (or uses a newer format but is invalid).

Is there some other VPN softwares can work instead of Anyconnect?

Hi,


4.9.01.0280 ? Which one is that? Please take a look at https://software.cisco.com/download/release.html?mdfid=286281283&catid=268438162&softwareid=282364313 - the version number you mentioned neither fits the versioning scheme, nor does any "4.9" version seem to exist. (4.1 is the newest release train.)


Ummm, confusing. 🙂 Could you please double-check?


Anybody tried opening a TAC case with Cisco for their install problems?


Cheers,


Christoph

Hello,


this very much depends on the head-end your organization uses. So, yes, there are a number of products on the market.


At my job, I happen to work a lot with Cisco products, so I guess I could say a few things about those. But there certainly are quite a few other manufacturers of VPN solutions on the market. But I guess this is getting a little beyond the scope of this thread.

This version is a reference to the original Cisco VPN Client (IPsec) which has been EOL for many years now.


Cisco VPN Client has been replaced by AnyConnect.

There is a bug in the AnyConnect VPN installer that is triggering the issue. It will be fixed in upcoming maitenance releases of AnyConnect 3.1 and 4.1.

The installer issue will be fixed in upcoming AnyConnect maintenance releases. I wouldn't recommend disabling any OS X security features.


If you've managed to install AnyConnect on El Capitan (or had it persist during an OS X upgrade) but are still running into issues with establishing a VPN tunnel, can you describe the issue that you're encountering?

Hello,


ah, alright, now that explains why that version number seemed so mysterious to me. Yes, I'm quite aware the old client has been EOL for a long time and that AnyConnect is the current solution.


[Makes me wonder why the original poster even used that old VPN client in the first place, since support for classic Cisco VPN has been built into Mac OS X for quite a few versions now, so no need to even install an additional client. Is that support still included in OS X 10.11, by the way?]


Cheers,


Christoph

Hi everybody,


Cisco Bug ID is CSCuv03446 ("AnyConnect fails to install on OS X 10.11 El Capitan").


If you have a way to do so, talk to Cisco TAC to tell them you're affected by this one as well. More customers asking --> higher priority for Cisco to fix it quickly. (Yes, I'm aware it's classified as a category 2 / "severe" bug already, but still - "number of customers affected" is a relevant metric.)


Cheers,


Christoph

Can't Install Cisco AnyConnect
 
 
Q