Cisco AnyConnect doesn't detect ENS Firewall and users can't connect to the VPN

Technical Articles ID: KB88476
Last Modified: 8/30/2023

Environment

Endpoint Security (ENS) Firewall 10.x

Cisco AnyConnect 4.3.x

Problem

When users try to connect to a VPN using Cisco AnyConnect, HostScan doesn't detect the status of ENS Firewall as being present and enabled. Users are unable to connect to the VPN.

Cause

The Cisco AnyConnect HostScan module uses a third-party tool to query the products on Windows systems. The third-party tool can detect the status of the Trellix Firewall Core Service correctly. But, HostScan can't detect the status of ENS Firewall.

Solution

Cisco has released an updated version of HostScan that resolves the issue. Download HostScan 4.3.05028 or later to resolve the issue.

NOTE: You'll need to search for AnyConnect Secure Mobility Client, and then select HostScan from the menu provided in the search results.

Workaround

Set Cisco AnyConnect to monitor the status of the following registry key:

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\Firewall\LastComplianceStatus]

Here, a value of 1 means that ENS Firewall is enabled, and 0 means that ENS Firewall is disabled.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Cisco AnyConnect doesn't detect ENS Firewall and users can't connect to the VPN

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Cisco AnyConnect doesn't detect ENS Firewall and users can't connect to the VPN

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title