Wenn der VPN-Dienstleister der Meinung ist, dass aktuelle Probleme an unserer Infrastruktur in der Firma liegt ... sich aber andere User weltweit über die gleichen Probleme mit der Software beschweren.

Pffffff... 😒

#vpn #cisco #anyconnect #error #software

Sicherheitslücke: #Exploit-Code für #Cisco #AnyConnect und #SecureClient | Security https://www.heise.de/news/Sicherheitsluecke-Exploit-Code-fuer-Cisco-AnyConnect-und-Secure-Client-9195908.html #CiscoAnyConnect #CiscoSecureClient

#PSA: If you have #TimeMachine issues with network backups chronically failing due to lost #AFP mounts, and use either #Cisco #AnyConnect or #ObjectiveSee #LuLu, try disabling them.

From what I can see on #BigSur, it seems like they each have independent stability impacts on AFP mounts which result in TM failing, from which it recovers poorly. With both enabled, the failures are enough to prevent any lengthy backups, e.g. those following a system update.

#macOS #IWeep6Colors #infosec

Let me just say once more:

#Cisco’s VPN software sucks.

This time? Just a macOS "Socket Filter" installed by #AnyConnect that causes random #AFP mount failures & corrupted SSH sessions every few hours randomly.

You know AFP? Not AFPS, AFP. Apple File Protocol, that thing you need to use for #TimeMachine backups. #AppleShare over TCP for us oldies. TimeMachine, that great-in-theory backup tool that makes no use of its half-done backups. Like you get with a mount failure.

#IWeep6Colors

Good stuff from @nccgroupinfosec

Making New Connections – Leveraging #Cisco #AnyConnect Client to Drop and Run Payloads

https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/

Emulates a Cisco ASA Anyconnect #VPN service, accepting any credentials (and logging them) before serving VBS to the client that gets executed in the context of the user

https://github.com/nccgroup/DroppedConnection

Configuration of Basic AnyConnect SSL VPN on Cisco ASA
#Cisco #ASA #Anyconnect #SSL #security #networking #networks #networkengineers
https://www.thesecuredna.com/2023/02/configuration-of-basic-anyconnect-ssl.html

Any ideas for setting up Cisco #AnyConnect Secure Mobility Client #VPN in a #VM so I don't have to run it on my host OS to access remote files? It requires the GUI version for #2FA. I was thinking of setting it up in #PuppyLinux, adding squid proxy, and configuring host OS apps that require vpn to use the proxy, but I don't know how sane or efficient that is. My previous solution was simply running a #kali vm & doing all my code, ftp, etc. in the guest, but it's such a waste of resources

anybody does Cisco #anyconnect on #arm64 linux?

UPDATE: After a suggestion in this thread, I tried switching to #OpenConnect, and it seems to work. No idea if it will fix the problem in long run, but I am going to uninstall #AnyConnect and try it.

For #macOS:

# To install:
brew install openconnect

# To connect:
sudo openconnect --protocol=anyconnect SERVERNAME

If you have 2FA, you'll be prompted for 2 passwords. I enter "push" for second password. Can also try "phone" or "sms".

@esamecar @remulus provided a nice alternative -- use #openconnect instead of #AnyConnect

For #macOS:

# To install:
brew install openconnect

# To connect:
sudo openconnect --protocol=anyconnect SERVERNAME

If you have 2FA, you'll be prompted for 2 passwords. I enter "push" for second password. "phone" or "sms" might also work.

Anyone else forced to use #Cisco #AnyConnect Secure Mobility Client as their enterprise #VPN solution? I've discovered that on #macOS, at random times when the VPN is NOT connected (and the client is theoretically not running), the machine's networking will completely die until I "kill -9" anything with "cisco" in the name. After that, everything works again.

Caro client vpn, se ti installo è solo perché devo connettermi alla rete aziendale di un cliente, non voglio content filter su tutte le mie connessioni e altre mille mila funzionalità non richieste da disabilitare una a una. (si, sto guardando proprio te, #cisco #anyconnect)

#Cisco #AnyConnect angreifbar, 4 Mio. Kundendaten von #Medibank kompromittiert, #iOS-Bug macht #Siri zum Spion, LinkedIn #Phishing, RomCom #RAT Angriff auf ukrainisches Militär und zwei sehr unterschiedliche #Hacks - hier sind die Infosec News der Woche!

https://www.lastbreach.de/blog/die-infosec-news-der-woche-221030

📬 AnyConnect: Ciscos “sicheres Arbeiten” braucht ein Update
#Hacking #Softwareentwicklung #AnyConnect #CISA #Cisco #DLLHijacking #IPsec #SSL #VPNClient https://tarnkappe.info/artikel/hacking/anyconnect-ciscos-sicheres-arbeiten-braucht-ein-update-258317.html