Openconnect 404 Not Found - VPN

[asaldana4id]

Hi All -

First post and linux newbie here.

I am trying to connect to VPN for my company but keep receiving a message saying 404 Not found.  I have tried going through VPN Connections using the GUI and I have tried using the terminal by typing in "openconnect vpn.company.com" but the same error message comes up.  FYI, I am able to connect via Windows without any issues. 

Here is the entire log (replaced the vpn address and IP address for security reasons),

POST https://vpn.company.com/
Attempting to connect to server 55.555.555.55:443
SSL negotiation with vpn.company.com
Connected to HTTPS on vpn.company.com
Got HTTP response: HTTP/1.0 302 Temporary moved
POST https://vpn.company.com/
Attempting to connect to server 55.555.555.55:443
SSL negotiation with vpn.company.com
Connected to HTTPS on vpn.company.com
Got HTTP response: HTTP/1.0 302 Object Moved
GET https://vpn.company.com/
Attempting to connect to server 55.555.555.53:443
SSL negotiation with vpn.company.com
Connected to HTTPS on vpn.company.com
Got HTTP response: HTTP/1.0 302 Temporary moved
GET https://vpn.company.com/
Attempting to connect to server 55.55.555.55:443
SSL negotiation with vpn.company.com
Connected to HTTPS on vpn.company.com
Got HTTP response: HTTP/1.0 302 Object Moved
GET https://vpn.company.com/+webvpn+/index.html
SSL negotiation with vpn.company.com
Connected to HTTPS on vpn.company.com
GET https://vpn.company.com/CACHE/sdesktop/i...ies/sfinst
Got HTTP response: HTTP/1.1 404 Not Found (does not exist)
Cannot receive HTTP 1.0 body without closing connection

There is also the option of going through the FireFox browser and going to vpn.company.com, however the error message there is as follows,
First message, "Your security settings have blocked an application signed with an expired or not-yet-valid certificate from running"
It continues anyways and here is the second message,
"Access Denied
Your system failed to be validated by the Cisco Secure Desktop and will not be granted access.
Critical failure.
Cisco Secure Desktop must run and validate your system to proceed. Please verify your browser settings and configuration and retry."

Through my research, I am seeing talk about CSD wrappers and certificates.  However, I do not know where to save the CSD wrapper scripts and I am having no luck finding the certificates. 

When I try to copy a CSD wrapper script to the /etc/openvpn/ area, it just goes back to the original directory and doesn't copy over. 

I did find some .cat files on my windows partition in the Cisco Anyconnect folder so I e-mailed myself.  Now, I can't save them anywhere on my Linux partition.

Here is the blog I found for CSD wrapper.  I've read the article over and over but its just not clicking for me.
http://blog.yunak.eu/2013/07/19/openconnect/

I really like Linux and want to expand my knowledge.  Oh yeah, I am probably the only person at my company trying to connect with Linux so help from system admins is a struggle. 

Thank you in advance, all. 

- Anthony

[Valtam]

Does the connection use a Java applet? If so, try installing Menu, System, Lite Software, Java Web Applet Plugin. Then try again with Firefox.

[asaldana4id]

Hey Jerry,

I installed the Java Web Applet Plugin but the same error messages come up.

[anon222]

You could use the plugin the network-manager

Code:

sudo apt-get install network-manager-openconnect

Then reset the network connection

Code:

sudo service network-manager restart

Now when the connection is reastablished click the connection icon on the panel then VPN Connections -> Configure VPN
When the window opens click Add and select the connection type. Click to open the drop down list.
Under VPN section there should be Cisco AnyConnect Compatible VPN (openconnect)
Click Create. From there you enter the information provided by your IT department.

[asaldana4id]

Yes, I've tried this as well.

It appears I need a network configuration file so now I am just browsing youtube channels and other blog sites to figure out what I need to create a netcfg profile.  There also seems to be a code (CMD_FLAGS="--no-cert-check") to bypass any certificate checks so I'll need to learn how to apply that as well. 

It looks like the configuration file will specify the vpn group authority among other things.  Hopefully with my next post, I will have some good news.