Cisco AnyConnect sends multiple authentication requests to RSA Authentication Manager 8.4
Originally Published: 2019-11-05
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4
Issue
In the authentication activity monitor there are multiple authentication requests. The first one succeeds and the other ones show messages such as passcode reuse or previous tokencode used. This issue is confirmed by tcpdump at the Authentication Manager using the following commands:
- SSH to the RSA Authentication Manager instance.
- Login as rsaadmin and enter OS credentials.
- Change to the root user.
- Navigate to /usr/bin.
- Run tcpdump.
login as: rsaadmin Using keyboard-interactive authentication. Password: <enter operating system password> Last login: Mon Jan 6 17:52:35 2020 from jumphost.vcloud.local RSA Authentication Manager Installation Directory: /opt/rsa/am rsaadmin@am82p: sudo su - rsaadmin's password: <enter operating system password> am82p:~ # cd /usr/bin am82p:/usr/bin # tcpdump -i eth0 -s 1514 -Z root -w /tmp/capture.cap tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 1514 bytes
- Test authentication through the Cisco AnyConnect.
- When done, navigate to /tmp and change file permissions.
am82p:/usr/bin # cd /tmp am82p:/tmp # ls -al capture.cap -rw-r--r-- 1 root root 1618 Jan 6 19:19 capture.cap am82p:/tmp # chmod 777 capture.cap
- Copy the capture to your PC and open it using Wireshark.
- Search for a duplicate request in the packet capture.
Cause
Resolution
- Login to the Cisco ASDM.
- Browse to Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Client Profile and click to Edit the appropriate profile.
- Open the Preferences (Part 2) tab, set the Authenticate Timeout to 60
Related Articles
Cisco ASA - RSASecurID Access Implementation Guide Number of Views RSA SecurID Access Free Trial Cisco AnyConnect Guide Number of Views AnyConnect Configuration - Cisco ASA RSA Ready SecurID Access Implementation Guide Number of Views Clear the node secret file on Cisco ASA in RSA Authentication Manager 8.x Number of Views Cisco ASA - RADIUS Configuration with Cloud Authentication Service - RSA Ready Implementation Guide Number of Views
Trending Articles
RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide How to Upgrade Internal SHA-1 Certificates to SHA-256 in Authentication Manager Using rsautil RSA Authentication Manager 8.9 Setup and Configuration Guide RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows
Don't see what you're looking for?
