#anyconnect

Cisco Confirms In-the-Wild Exploitation of Two VPN Vulnerabilities

Home › Virus & Threats Cisco Confirms In-the-Wild Exploitation of Two VPN Vulnerabilities By Eduard Kovacs on October 26, 2022 Tweet Cisco has confirmed that two vulnerabilities affecting one of its VPN products are being exploited in the wild. The US Cybersecurity and Infrastructure Security Agency (CISA) this week added two flaws affecting Cisco’s AnyConnect product to its Known Exploited…

AnyConnect Windows 10 Fail

AnyConnect Windows 10 fails with the newest version of the VPN client software.  After a windows update we encountered a problem when we wanted to connect to our VPN.

Patch management and version control policy needs to be reviewed in light of issues like AnyConnect Windows 10 failure.

The symptoms were the service was running on the client  PC (Windows 10 Pro 64 bit)…

解 ocserv 因為沒有使用 DTLS 而導致速度很慢的問題…

連上 full-route VPN 後測試發現速度偏慢，後來發現是沒有走 UDP 的 DTLS，只有 TCP 的 TLS 流量… 找了一下發現用有人遇過了，可以用 workaround 解：「OpenConnect not working with DTLS」。

作者給的方式是把 ocserv.socket 整個抽開。方法是註解掉 /lib/systemd/system/ocserv.service 裡的 Requires=ocserv.socket 與 Also=ocserv.socket，然後在 systemd 裡也要處理：

sudo systemctl stop ocserv sudo systemctl disable ocserv.service sudo systemctl disable ocserv.socket sudo systemctl…