This guide aims to assist in the troubleshooting of the AnyConnect client on MacOS.
Switching Between Pulse Secure & Cisco AnyConnect
During our transition period from Pulse Secure to Cisco AnyConnect, you may find that you want to use one VPN or the other. Due to the way MacOS utilizes filter drivers for the network, there's a couple of steps that need to be taken when switching between them.
Pulse Secure to Cisco AnyConnect
To switch from Pulse Secure to Cisco AnyConnect, follow these steps.
Is AnyConnect Installed?
This guide assumes you've already installed the Cisco AnyConnect VPN client. If you have not, please see the following guide: Cisco AnyConnect VPN
- Make sure that Pulse Secure isn't currently connected/running. If it is, right click the Pulse Secure icon in the Taskbar, and choose Exit at the bottom.
- Confirm that you want to exit Pulse Secure by clicking OK.
- Open up System Preferences (Apple Icon in the top left > System Preferences), and choose Network.
- Once you've opened the Network tab, locate the Pulse Secure Filter in the list on the left. Select it, choose the 3 dots at the bottom of the list, then select Make Service Inactive. This will disable the Pulse Secure Filter.
- Next, you'll want to make sure that the 3 Cisco AnyConnect Filters are active. If they're grayed out (as seen below), that means they're disabled. To enable them, select them, choose the 3 dots at the bottom, and select Make Service Active.
- Once you enabled all 3 Cisco AnyConnect Filters, click Apply in the bottom right corner. You should see 2 of the 3 filters turn green with a status of Running. The last filter driver will connect once you've connected to the AnyConnect VPN. You can close this window now.
- Open the AnyConnect VPN by opening Finder, then navigate to Applications > Cisco > Cisco AnyConnect Secure Mobility Client. Connect to the VPN, and you're all set!
Cisco AnyConnect to Pulse Secure
If you need to switch back from Cisco AnyConnect to Pulse Secure, please follow these steps:
- Make sure that Cisco AnyConnect isn't currently connected/running. If it is, right-click on the Taskbar icon, and choose Quit Cisco AnyConnect.
- Open up System Preferences (Apple Icon in the top left > System Preferences), and choose Network.
- Once you've opened the Network tab, locate the 3 Cisco AnyConnect filters in the list on the left. Select one, choose the 3 dots at the bottom of the list, then select Make Service Inactive. This will disable the Cisco AnyConnect Socket Filter. Repeat this process for the other 2 filters.
- Next, you'll want to make sure the Pulse Secure Filter is enabled. Select the Pulse Secure filter, click the 3 dots at the bottom of the list, and choose Make Service Active.
Once you've enabled the Pulse Secure Filter, click Apply in the bottom right corner. You should see the Pulse Secure Filter turn green with a state of Running.
Disabled Filters
Ensure that all 3 of the Cisco AnyConnect Filters show as Not Running/Not Connected, otherwise you will run into issues connecting to the Pulse Secure VPN. If one is still showing as Running, re-enable and disable the Filter.
- Open up Pulse Secure, and connect to the VPN. You're all set!
Uninstalling AnyConnect on MacOS
If the application is currently installed, perform the following steps:
- From the Finder go to the Applications folder.
- Look for the Cisco folder - open it.
- Double-click on Uninstall AnyConnect to start the uninstall process.
- Follow the instructions to uninstall the AnyConnect VPN program.
Manually Uninstalling AnyConnect
If you run into issues with AnyConnect and for some reason it can't be uninstalled, please follow these steps to manually start the uninstallation process.
- Open the Terminal app on your Mac, found in Applications > Utilities > Terminal.
Enter the following shell script at the Terminal:
sudo /opt/cisco/anyconnect/bin/vpn_uninstall.sh
You will be prompted for your password. Once you enter it, follow the steps to complete the uninstallation.
Loss of Connectivity
While AnyConnect is being uninstalled, your Mac may lose internet connectivity briefly. This is expected, as it's uninstalling portions of the Network Drivers. It should regain connectivity once the installation completes.
Related Articles