search

NixOS / nixpkgs

Nix Packages collection & NixOS
MIT License
17.63k stars 13.78k forks source link

Package request: anyconnect #306647

Open Pandapip1 opened 5 months ago

Pandapip1 commented 5 months ago

Project description

An enterprise VPN that my work means that I sometimes have to use.

Metadata

Add a :+1: reaction to issues you find important.

purepani commented 5 months ago

You can use openconnect for this usually. It's what I've done anywhere that's had an anyconnect vpn.

Pandapip1 commented 5 months ago

Openconnect doesn't support the way my organization has it configured. It keeps asking me for a username and password instead of sending me to the organization login page.

purepani commented 5 months ago

My organization also sends you to a login page, and I had issues getting it working until I changed the user agent to 'AnyConnect-compatible OpenConnect VPN agent' in the VPN settings, just in case that happens to work for you.

Pandapip1 commented 5 months ago

The user-agent trick seems to have solved the issue. Thanks!

I will be leaving this package request open, however. It'd be nice to be able to have this in nixpkgs.

Cu3PO42 commented 4 months ago

Unfortunately my organization is still using the older IPSec protocol with AnyConnect. This is, as far as I can tell, not supported by OpenConnect. The older vpnc does support this, but cannot authenticate via PKCS#11. At the current time, I do not think I can connect via anything but the proprietary client.

There is some prior work in #265443.

EDIT: Despite the SSL connection not working from the proprietary client on Windows, it is working perfectly fine from OpenConnect, so I'm happy for now. That said, I did invest some time into trying to get the proprietary client to run and I believe it may have worked, however their "Secure Firewall" security scanner that runs on your device failed, allegedly in an XML parsing step, and refused to connect me.

piyoki commented 1 month ago

Hi, any updates on this one please?