To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Cisco VPN client / F-secure Client security 9

J-C W/ Alumni Posts: 46 Security Scout



One of my customers are currently using client security on hosts in their HQ. The firewall profile used by all their hosts is "Office" in Policy manager 9.


Now when they connect laptops using mobile broadband + VPN they cannot access any of their internal resources, all traffic seems to be blocked.


Would really appreciate if someone could "point me in the right direction" and explain how to configure this correctly.


I myself am using Citrix Access Gateway as VPN client + Client security and this works fine. The active profile used when I connect to my company, is "Office". Actually I don´t think it changes at all regardless of how I connect, it´s always "Office".


Am I correct assuming that when the customer connects via VPN, they should use the profile called "Mobile", or use a "customized office profile" as I think is the case with my PC?


If they should use "Mobile", must I edit this / add rules for it to allow the traffic needed for them to reach their resources, e.g. remote control (RDP), access to file shares and so on? Maybe using info from the action.log file which traffic has been blocked?



Thanks in advance!




  • J-C
    J-C W/ Alumni Posts: 46 Security Scout



    Thank you for you answer and apologies for not searching for a solution more thoroughly.

    Almost all info that I needed was found in your link but I have another question after reading this:


    To implement these settings for laptops at this customer, should I configure what is called "Security level autoselection", and add needed ports + IP addresses to the profile called "Mobile"? Then, if I understand correctly, F-secure will choose this profile when connecting via VPN / mobile broadband? And e.g. from home using wireless router etc?


    Or could I just add them to the profile "Office" which they are currently using at their location?


    Thanks and regards,


    BBIEM W/ Alumni Posts: 1 Security Scout



    I also a problem with Cisco client  and F-secure. I am not able to set up a connection. I used this website:


    But unfortunatly the last step (disable vsdatant) did not work for me since there was no vsdatant to disable. Is there another solution?


    Kind regards,


  • Federico
    Federico W/ Alumni Posts: 29 Cyber Knight



    Could you provide us more information about the issue?


    1. The article you mentioned applies to version 9.x. Which F-Secure program are you using and which version in particular?

    2. Which version of the Cisco VPN client are you using?


    Thank you.

  • YT
    YT W/ Alumni Posts: 2 Security Scout

    I have the same problem.


    I installed F-Secure Internet Security 2014 a week ago, and could not use Cisco AnyConnect Secure Mobility Client to conncet to my office computer.


    The version on my PC is 3.1.04063.  I got an installation error when AnyConnect tried downloading 3.1.04066.

  • IvanD
    IvanD W/ Alumni Posts: 10 Cyber Knight



    please create a support ticket by using the following form:


    Please include the FSDiag report so the case is handled more quick.

  • YT
    YT W/ Alumni Posts: 2 Security Scout



    I have already done that last Friday evening but had not heard from anyone yet.  See Case #00085626, and earlier online chat #00085515.


    What is the FSDiag report?



  • NikK
    NikK W/ Alumni Posts: 28 Firewall Master

    FSDIAG is explained here:


    When submitting a support request: 

    you have an option at the bottom of that page to attach an FSDIAG file.


    Without attaching an FSDIAG file in a support request the support technicians will not have the vital information of your system that might be needed to solve the problem.


This discussion has been closed.