#anyconnect — Public Fediverse posts

Solltet ihr auch das Problem haben, dass sich der #Cisco #Anyconnect #Linux Client für das #VPN eurer #Hochschule (bei mir #Bielefeld, also @hochschulebielefeld) automatisch beim Start updatet, und danach das Internet kaputt ist (DNS geht nicht, Namensauflösung von Webseiten defekt), während ihr eigentlich Literatur für Master-Projektentwicklung im VPN recherchieren müsst...

Bei mir half unter Linux das Deinstallieren des Cisco Client mit dem uninstall-sh-Script im Downloads-Ordner. Dann ältere Client-Version von der Hochschule erneut per install-sh-Script erneut installieren.

Vor dem ersten Start des VPN-Client muss mit Texteditor unter /opt/cisco/secureclient die Datei AnyConnectLocalPolicy.xml bearbeitet werden... von false auf true: <BypassDownloader>true</BypassDownloader>

cleaning up the macBook. In the past I had to install #Cisco #AnyConnect and uninstalled this shit. Found that it keeps >41GB unter /Library/SystemExtensions/.staging

Can I just delete this?

No need to email me about Cisco AnyConnect | daniel.haxx.se

Link

Accessing UCL VPN using OpenConnect on Linux systems
https://ankursinha.in/2024/11/25/accessing-ucl-vpn-using-openconnect-on-linux-systems.html
#UCL #VPN #AnyConnect #OpenConnect #Linux #Fedora

穿越 Firewall 的作法

先看到「SSH over HTTPS (trofi.github.io)」這篇，原文「SSH over HTTPS」講怎麼利用 HTTPS 加上 CONNECT 指令穿過去。

作者有先介紹背景，他需要在醫院待個幾天，而醫院有免費的 WiFi 可以上網，但限制很多，基本上 TCP 的部分只有 80/tcp 與 443/tcp 會通，另外他有行動網路可以用 (但應該不是吃到

https://blog.gslin.org/archives/2023/12/24/11551/%e7%a9%bf%e8%b6%8a-firewall-%e7%9a%84%e4%bd%9c%e6%b3%95/

#Computer #Murmuring #Network #Security #Software #VPN #anyconnect #cisco #connect #dtls #firewall #https #network #openconnect #proxy #ssh #ssl #tcp #tls #udp #vpn

OpenConnect: недетектируемый VPN, который вам понравится

Я уже написал здесь много статей на тему прокси-протоколов и прокси-клиентов, которые очень сложно детектировать и заблокировать, и которые используют пользователи в Китае, Иране, Ираке, Туркменистане, и теперь вот в России (мы здесь в отличной компании, правда?). Но довольно часто мне в комментариях писали, мол, это все отлично, но мне нужен именно VPN для целей именно VPN - доступа в частные локальные сети, либо для соединения клиентов между собой, и желательно так, чтобы его не заблокировали обезьяны с гранатой . Поэтому сегодня мы поговорим именно о VPN. Классические OpenVPN, Wireguard и IPSec отметаем сразу - их уже давно умеют блокировать и блокировали не раз. Модифицированный Wireguard от проекта Amnezia под названием AmneziaWG — отличная задумка, но есть одно но ...

https://habr.com/ru/articles/776256/

#vpn #anyconnect #openconnect #sstp #softether #обход_блокировок

@metaphil ** Spaß beiseite: #Cisco #Anyconnect ist wirklich eine Zumutung, auch sicherheitstechnisch. Unter #macOS installiert es diverse unnötige Hintergrundprozesse, die permanent laufen und auch im getrennten Zustand Traffic mitlesen. Ich bin daher schon vor Jahren auf das quelloffene #OpenConnect umgestiegen, das zu Cisco's #VPN kompatibel ist. Das verbindet zuverlässig, braucht dabei deutlich weniger Ressourcen und schnüffelt meinen Datenverkehr nicht mit. :awesome:

Anyone else seeing an uptick on brute force attempts on #cisco #asa devices?

#itsecurity #anyconnect #infosec

A new #malvertising campaign has been found targeting unsuspecting users by posing to be legitimate download links for popular software like #AnyDesk, #WinSCP, #Cisco #AnyConnect, #Slack and potentially more.

#infosec #cybersecurity #malvertising #malware

https://www.bitdefender.com/blog/labs/abusing-the-ad-network-threat-actors-now-hacking-into-companies-via-search/

Sicherheitslücke: #Exploit-Code für #Cisco #AnyConnect und #SecureClient | Security https://www.heise.de/news/Sicherheitsluecke-Exploit-Code-fuer-Cisco-AnyConnect-und-Secure-Client-9195908.html #CiscoAnyConnect #CiscoSecureClient #Patchday

If you didn't update to version 5 of Cisco's SecureClient VPN (formerly AnyConnect) you're now exposed to a pretty severe vulnerability. Get your org updated!
#Cisco #AnyConnect #VPN #AlwaysBeUpdating

https://www.bleepingcomputer.com/news/security/cisco-fixes-anyconnect-bug-giving-windows-system-privileges/

Has anyone configured #Cisco #ise to work with #intune in co-management mode (#sccm) ?

Any benefit other to ISE integration over just using #anyconnect and #aad as the IDP with a #conditionalaccess policy?

Only thing I can come up with is other services using ISE can be used (e.g. NAC)

Good stuff from @nccgroupinfosec

Making New Connections – Leveraging #Cisco #AnyConnect Client to Drop and Run Payloads

https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/

Emulates a Cisco ASA Anyconnect #VPN service, accepting any credentials (and logging them) before serving VBS to the client that gets executed in the context of the user

https://github.com/nccgroup/DroppedConnection

Any ideas for setting up Cisco #AnyConnect Secure Mobility Client #VPN in a #VM so I don't have to run it on my host OS to access remote files? It requires the GUI version for #2FA. I was thinking of setting it up in #PuppyLinux, adding squid proxy, and configuring host OS apps that require vpn to use the proxy, but I don't know how sane or efficient that is. My previous solution was simply running a #kali vm & doing all my code, ftp, etc. in the guest, but it's such a waste of resources

anybody does Cisco #anyconnect on #arm64 linux?

UPDATE: After a suggestion in this thread, I tried switching to #OpenConnect, and it seems to work. No idea if it will fix the problem in long run, but I am going to uninstall #AnyConnect and try it.

For #macOS:

# To install:
brew install openconnect

# To connect:
sudo openconnect --protocol=anyconnect SERVERNAME

If you have 2FA, you'll be prompted for 2 passwords. I enter "push" for second password. Can also try "phone" or "sms".

@esamecar @remulus provided a nice alternative -- use #openconnect instead of #AnyConnect

For #macOS:

# To install:
brew install openconnect

# To connect:
sudo openconnect --protocol=anyconnect SERVERNAME

If you have 2FA, you'll be prompted for 2 passwords. I enter "push" for second password. "phone" or "sms" might also work.

Anyone else forced to use #Cisco #AnyConnect Secure Mobility Client as their enterprise #VPN solution? I've discovered that on #macOS, at random times when the VPN is NOT connected (and the client is theoretically not running), the machine's networking will completely die until I "kill -9" anything with "cisco" in the name. After that, everything works again.

📬 AnyConnect: Ciscos “sicheres Arbeiten” braucht ein Update
#Hacking #Softwareentwicklung #AnyConnect #CISA #Cisco #DLLHijacking #IPsec #SSL #VPNClient https://tarnkappe.info/artikel/hacking/anyconnect-ciscos-sicheres-arbeiten-braucht-ein-update-258317.html

I finally found the time to install #OpenConnect, and it works like a charm. No need to use #Cisco #AnyConnect anymore! :awesome:

Installation in #macOS was straight forward; I only had to set some custom user permissions to get #Homebrew working properly.

Some weeks ago, I posted some concerns about #Cisco's #AnyConnect client:
https://chaos.social/@kernpanik/105355431757360623

At #CCC #rC3, Jiska Classen, Gerbert Roitburd, and Matthias Ortmann gave a very interesting talk about more potential vulnerabilities of #AnyConnect, in which they also briefly referred to some of the issues I was wondering about when I used the program:
📺 ➡️ https://media.ccc.de/v/rc3-228534-very_pwnable_network_vpn

Hello #cisco #networking bubble... maybe you can help me out with this #AnyConnect #VPN question?

🤔 If, for some reason, I wanted to mess around with a connection profile.xml stored on my computer, but don't have the Profile Editor application nor a XML reference… how would I start?

💡 Could you point me to #gist​s/#pastebin​s with example code for these features:
• onConnect/onDisconnect scripts
• Dyn. Split Tunneling/ Dyn. Tunnel Exclusion
• Trusted Network Detection?

:boost_ok: Thanks! 💚✌

My university exclusively uses #Cisco #AnyConnect to provide #VPN access to its employees when they work from home. I installed the software on my MacBook, and was quite shocked about what it does:

1) AnyConnect controls and monitors all network activity on the Mac -- even when the VPN app hasn't been started. Its background processes run 24/7.

…