[Q] Rooted Cisco AnyConnect on TF201 crashes - Asus Eee Pad Transformer Prime

New to XDA,...first post and all that jazz. On to the question...
I've rooted my Prime this morning...that all works fine and dandy; big props to all the folks involved in that!
One of the reasons was that I need AnyConnect to connect to my work VPN. I've installed the latest version from the market, installed the latest tun.ko using the tun.ko installer from the market. I've got the latest iptables. Also, my Prime is all on the latest firmware across the board.
AnyConnect starts just fine, grabs the list of groups. I am able to give it a username/password, but once I attempt to authenticate, the Prime freezes for a moment, then reboots.
I've tried uninstalling/reinstalling each component in this with no luck. I'm reaching out to the community on this. It would be fantastic to have this since it's the last thing keeping me from selling my 1215n, (...that 1215n is awesome, but bulky compared to the Prime, though I did upgrade it to 8GB ram and a 128GB SSD).
Thanks in advance; everyone here is awesome, give yourselves cookies and beers.

I'll be trying this as soon as I have time to root/play; I'll let you know what I find out.
But one thing to keep in mind is that ICS will bring a native VPN API system, and there should be a true Cisco AnyConnect method that works without rooting very soon.

digimuzik said:
I'll be trying this as soon as I have time to root/play; I'll let you know what I find out.
But one thing to keep in mind is that ICS will bring a native VPN API system, and there should be a true Cisco AnyConnect method that works without rooting very soon.
Click to expand...
Click to collapse
I did read that ICS would supposedly have native support for AnyConnect. I'm just hoping that this works so I can list that netbook sooner rather than later. I'm sure I'm not the only person that wants to connect their Prime to their AnyConnect VPN now though.

[bump]
Hoping a few others get a chance to see this and try it.

digimuzik said:
I'll be trying this as soon as I have time to root/play; I'll let you know what I find out.
But one thing to keep in mind is that ICS will bring a native VPN API system, and there should be a true Cisco AnyConnect method that works without rooting very soon.
Click to expand...
Click to collapse
Perhaps a stupid question, but does this mean F5 Firepass SSL will work natively in ICS?

AnyConnect originally didn't support rooted devices. Cisco came up with a version that did. You might want to do some research. It might just be that it's incompatible with the Prime. There are G-Tab users that have it working with root so the rooted version works with HC.

anyone else notice that the VPN service from the network settings causes a reset?

AnyConnect available on market (2.4) does not support TF201, AnyConnect 2.5 in beta has ICS support, currently does not have TF201 specific support though. Hopefully we will have full ICS support upon official release on market.
I was getting similar issues prior to ICS upgrade, now, different set of issues on the AnyConnect 2.5 loading properly.
TF201 ICS

I've used Rooted AnyConnect 2.4.7073 with sklid's tun.ko, and didn't have any issues. I only used it for a few minutes, though.

Noxious Ninja said:
I've used Rooted AnyConnect 2.4.7073 with sklid's tun.ko, and didn't have any issues. I only used it for a few minutes, though.
Click to expand...
Click to collapse
Hey, I tried a few things to get up and running and had a lot of problems. I then ended up needing to reinstall the latest firmware/distro (don't ask).
I installed ICS, then it installed cisco anyconnect (latest from market), I then rooted my transformer prime tf201. At this point when I opened cisco anyconnect it loaded fine but showed me tun.ko wasn;t installed.
Instead of fudging around I installed:
Tun.ko Installer
From the android market
I then checked all boxes to narrow the search and installed.
Everything worked fine, and I'm on the company VPN.

The ICS build for the TF201 was initially compiled without the tun kernel module. An update that should already be available will be compatible with the now available AnyConnect ICS package from the market. If you're using the existing rooted package (2.4.7073) you might run into some undesired behavior getting everything setup and working, though it sounds like some of you were able to get it working fine.
Also note that if you want to install the new AnyConnect ICS package, you will need to uninstall the rooted package before installing that one since the package ids are different. A reboot between uninstalling and installing is also desired.

Root needed?
I was patiently waiting for the 9.4.2.15 update to see if VPN would be fixed (without root). I was actually able to get connected with 9.4.2.14, but cannot remote desktop, ping, etc. with either version.
Am I correct in saying that without rooting and doing other "things" aside from the standard firmware updates that i will not be able to get VPN working (IPSEC XAUTH PSK). I know my settings are correct because VPN works on my laptop and iphone.
Any help would be appreciated as this is the last piece that I am trying to get working on my Transformer Prime.
Thanks, James

Related

[Q] Citrix Receiver on rooted NC

So, I'm having a blast with my new nook. So far it's done just about everything I've asked of it. But not this. My office has citrix remote access that is working fine for the ipad, and is in testing for a few approved android devices. Since I work with the guys who manage it, I ran a test or two today to see how the NC performs.
The good? Got connected. The bad? I get an SSL/TLS JSSE error when I try to launch apps. So, what's the deal? Do I need to get android 2.2 or is my fix something else? If it's just 2.2, then I'll wait for the rumored update probably.
Would a nookie froyo boot sd work well enough to test this out? If so I've got a spare card with honeycomb that might be getting wiped.
*rooted nook color 1.1 with the 'monster pack' bootable sd image*
also have the same problem! Let me know if you find a solution.
Yes you need at least 2.2. I'm running CM7 on my nook and the Citrix receiver works great. I also use it on my HTC EVO on 2.2 and it works there as well.
Yes the bookie froyo SD bootable should work fine.
huh, got busy and never got a chance to check back. from what I've read, if you install the certificate you can get access. however, there's no option on my nook to install from SD card.
still looking into this when i have time, just haven't really had time.
That's weird. I am using the Citrix receiver on my stock rooted NC and haven't seen any issues (yet). Granted, I only used the VNC app to remote into my work computer but it worked flawlessly.
Are you using the Citrix Receiver or the Citrix Labs Receiver. I know I have just the Receiver. Not sure what the difference is between the two (haven't really looked that closely) but it might be somthing to check.
Try to save the link to the app usually in the form of *.ica file type. Then launch that file through astro. I used this workaround on my Streak.
Using CM7 n30, Citrix wouldn't accepting SSL certificate initially but problem went away after n12 or so, working fine since.
Ok, did a little reading, and found the system reqs for citrix reciever.
Device
Citrix Receiver supports Android mobile devices with operating system 2.0 or later.
About Secure Connections and SSL Certificates
When securing remote connections using SSL, the mobile device verifies the authenticity of the remote gateway's SSL certificate against a local store of trusted root certificate authorities. The device automatically recognizes commercially issued certificates (such as VeriSign and Thawte) provided the root certificate for the certificate authority exists in the local keystore.
Private (Self-signed) Certificates
If a private certificate is installed on the remote gateway, the root certificate for the organization's certificate authority must be installed on the mobile device in order to successfully access Citrix resources using the Citrix Receiver.
Note: If the remote gateway's certificate cannot be verified upon connection (because the root certificate is not included in the local keystore), an untrusted certificate warning appears. If a user chooses to continue through the warning, a list of applications is displayed; however, application fails to launch.
Importing Root Certificates on Android Devices
Android devices currently do not support automatic import of root certificates. More importantly, gaining root access to a device or changing the keystore can result in an inoperable device.
Click to expand...
Click to collapse
Pretty sure we're using self signed certificates at my workplace, and I can get it, I just am not sure how to install/import it. Our remote access guy mentioned that on his android device he can go to security and then import a cert from the SD card, but if that option is on the Nook, I missed it under Nook Color Tools.
The other thing is that the cert needs to be exported to .p12, which should be trivial if we can actually find/activate the import from SD option.
rico posted on a thread on androidtablets.net
The setting in stock Android 2.1, can allow for apps secure certificates. In the NC, most SSL sites work automatically, but for those which require a more manual approach, I think the stock Android setting is need. So far I haven't found how to turn this setting on.
Click to expand...
Click to collapse
soo..... looks like unless i go from rooted to rom'ed, i'm scr*wed.
maybe after the rumored/legendary/elusive/mythical update that is coming any day now from B&N?
Nook Certs Import
I'm using CM7, running Gingerbread. Under Settings>Location & Security there is an option to Install from SD card.
I just don't know where to get a certificate that works.
envygreen said:
Ok, did a little reading, and found the system reqs for citrix reciever.
Pretty sure we're using self signed certificates at my workplace, and I can get it, I just am not sure how to install/import it. Our remote access guy mentioned that on his android device he can go to security and then import a cert from the SD card, but if that option is on the Nook, I missed it under Nook Color Tools.
The other thing is that the cert needs to be exported to .p12, which should be trivial if we can actually find/activate the import from SD option.
rico posted on a thread on androidtablets.net
soo..... looks like unless i go from rooted to rom'ed, i'm scr*wed.
maybe after the rumored/legendary/elusive/mythical update that is coming any day now from B&N?
Click to expand...
Click to collapse
Try running one of the SD card builds of CM7.
as suggested, I got a working SD bootable CM7 build running, and was able to connect with no issues, so it's purely a problem with older (2.1?) builds of android. The remote access guy here says that he believes that was resolved in 2.2 or even a late build of 2.1.
to clarify, i did NOT have to import a root or mid level cert from the SD card. once I was on (CM7) 2.3, citrix reciever just worked but on (rooted) 2.1 it did not.
Not sure what the fix is, if any, for anyone running a rooted nook instead of a custom rom. if I find a fix I'll update though.
I too find i can't get citrix working on a stick 1.1 rooted nook. It'll make the initial connection but wont bring up the desktop window. Is there an explanation and a workaround?
wkearney99 said:
I too find i can't get citrix working on a stick 1.1 rooted nook. It'll make the initial connection but wont bring up the desktop window. Is there an explanation and a workaround?
Click to expand...
Click to collapse
For me it works perfectly on my Epic 4g (Froyo), but not on my Xoom (HC3.1), where it would obviously be much more useful. Get my list of published apps but when I launch just sits at waiting. Same exact settings, very fustrating.
Citrix Reciever "The Server encountered an error"
All, I'm have a rooted NC that's at 1.2 running 2.2 (sorry, I'm not 100% on the right verbiage to use)
I downloaded and installed Citrix Receiver from the market. I enter all of my settings and it shows me my published apps. However, when I try to click on anyone of them I gett the following.
Server error "The server encountered an error."
Any idea on the fix?

[Q] Re:Cisco anyconnect VPN

Hey all,
A question for all you lucky buggers who have one already, but does the SGS2 have the cisco anyconnect on board already?
This is probably the phone I'll be getting - its just sounds amazing, but the cisco thing would be icing on the cake.
Also if its already there - how is it working?
thanks
bump.....
surely someone has tried it?
Apologies if this is a double post - but I recieved my galaxy s2 from expansys yesterday (so UK spec unlocked) and it had no cisco clients installed
So it looks like they may well be released later
I wondering the same, where is it? Also looked everywhere on the internet. If it´s going to be released later, shouldn´t samsung say something?
Hoping to make Android more attractive to security-minded CIOs, Samsung has added encryption and integrated Cisco's AnyConnect VPN client on its latest smartphone, the Galaxy S II, it said at the Mobile World Congress.
http://www.computerworlduk.com/news...samsung-galaxy-s-ii-boosts-business-features/
Click to expand...
Click to collapse
Other than S2, Tab 10.1 also....
http://www.greatereader.org/?p=20535
However it should be SSL VPN client instead of a IPSec VPN client.
Has anyone tried configuring this or does this feature even exist yet? It would be nice to import a .pcf file.
My collegue currently have an Galaxy S II.
The Cisco Anyconnect client (SSL VPN based client) seems not to be in the phone.
This even if Samsung is saying that on various advertisements.
We have looked everywhere and can't find it.
And Samsung support have no good answer either yet.
So far anyconnect client is not found in the Samsung Galaxy S II.
Anyone with any other information ?
Version
Android 2.3.3 (Samsung release I9100XXKDJ)
cisco anyconnect client on the galaxy s2
I too have tried to get the built in (supposedly cisco anyconnect) client to work.
To be the ssl client that is used by the iphone and ipad then it needs
to be the cisco anyconnect secure mobility client, which I am pretty certain
it is not.
None of the four types of vpn connections that you can configure are correct.
They all seem to be using ipsec.
I have asked Samsung to clarify this and have not had a response.
Once the case...
I've logged a call with Samsung UK and asked them where the famous Cisco AnyConnect VPN client is, and also requested more details of the on device Engryption.
They don't seem to know either but they are going to look into it and (hopefully) get back to me. Will report back.
chard101 said:
I've logged a call with Samsung UK and asked them where the famous Cisco AnyConnect VPN client is, and also requested more details of the on device Engryption.
They don't seem to know either but they are going to look into it and (hopefully) get back to me. Will report back.
Click to expand...
Click to collapse
I am looking forward to that answer. BTW I am fine with the built in client if it works with my university VPN...
The question is, is it possible to make sure, that ALL TRAFFIC goes through the VPN tunnel?
smfbradshaw said:
I too have tried to get the built in (supposedly cisco anyconnect) client to work.
To be the ssl client that is used by the iphone and ipad then it needs
to be the cisco anyconnect secure mobility client, which I am pretty certain
it is not.
None of the four types of vpn connections that you can configure are correct.
They all seem to be using ipsec.
I have asked Samsung to clarify this and have not had a response.
Click to expand...
Click to collapse
Do any of the IPSEC connections include the ability for group authentication?
chard101 said:
I've logged a call with Samsung UK and asked them where the famous Cisco AnyConnect VPN client is, and also requested more details of the on device Engryption.
They don't seem to know either but they are going to look into it and (hopefully) get back to me. Will report back.
Click to expand...
Click to collapse
Any answer from Samy yet? I am also looking for it. It was even one of the number one reasons i bought that phone...
mbienz said:
Any answer from Samy yet? I am also looking for it. It was even one of the number one reasons i bought that phone...
Click to expand...
Click to collapse
Samsung responded to our case (in Sweden) that anyconnect client will be available throu an app in Samsung market during the summer.
Sent from my HTC Vision using Tapatalk
Fifth attempt to get Samsung to answer
So far Samsung have answered my first four attempts to find out about
the Cisco anyconnect client in the SGs2 I9100 wrongly.
They are just pointing me at the standard ipsec clients in settings/wireless and network/Vpn settings.
Below is my latest attempt to get them to understand the question ...
Dear sirs.
After numerous attempts from me to get you to anwer the question you are
still
misunderstanding what I am saying.
I would like to know where the cisco anyconnect vpn client is on the
Galaxy S2 (GT-I9100)
See your Web page ...
(I am unable to paste the external link here due to not enough postings yet)
The third paragraph from the end states the following ...
VPN (Virtual Private Network)
The Samsung GALAXY S II has adopted Cisco’s AnyConnect to provide
reliable and easy-to-deploy encrypted network connectivity by delivering
persistent corporate access for users on the go. Whether providing
access to business email, a virtual desktop session, or other Android
applications, it enables business-critical application connectivity.
The Cisco anyconnect client is not on the phone !!!
Please let me know where to get it from !
Regards.
I will post their response when I have it, although I don't expect it
to answer the question since their first four attempts didn't.
We will see ...
Samsungs response
Thank you for contacting Samsung and I have pleasure in providing the
following assistance.
Regarding your case, kindly note we sincerely apologize for any
inconvenience, caused by the replies in the previous correspondences.
Please inform him that the Cisco VPN Client is not a built in feature on
the phone.
Although the phone supports Cisco but you will not find it built into
the phone. In this case, you will need to contact the server that you’re
trying to connect to, for the VPN settings as we don’t have them.
We sincerely apologize for any inconvenience.
If you require any further assistance, please contact Samsung again and
we will be more than happy to help.
Kind regards,
----------------------------------
As I was expecting.
Totally useless ...............
Don't worry, it's (apparently) coming
OK, so after two weeks of pain repeatedly calling Samsung tech support I was finally given the secret number for their UK head office, just to get me off their backs! HA!
I was told that these missing features are indeed scheduled for a future firmware release. They are going to try and find someone for me to talk to (apparently in Sales) who knows when these are scheduled to land.
Looks like being a persistent pain in the @$$ has started to pay off.
Will let you know more if I hear back from them.
Hope they will respond soon, need this VPN for work.....
It's available !
I have just discovered that it is now available from Android Market.
Just go to Android market and search for anyconnect and download.
I have tested it and it works fine.
I now have an anyconnect connection into work.
Yes.... seems like it's released
http://www.cisco.com/en/US/docs/sec...onnect24/android-user/guide/android-acug.html
Works nicely also on a rooted HTC DesireZ running an older Virtuous 0.9.0 release.
With OTP signon!!!!
Finally

TetherGPS not working for ICS, any Alts?

Greetings fellow Primers,
Didn't see this anywhere specifically for the Transformer Prime but have seen it in spotty locations on other device forums.
Since the GPS does not work as a standalone then we will have to utilize our android phones to get our navigation working. I have seen that the TetherGPS app prior to ICS update worked flawlessly for this purpose.
Is there another app or something else anyone is using/doing in order to get navigation working on their Prime? Was anyone else using the TetherGPS app prior to ICS on any other device?
Wish this could be a sticky:
on the phone:
https://market.android.com/details?id=com.Saenko.GpsOverBt&hl=en
on the prime:
https://market.android.com/details?id=googoo.android.btgps&hl=en
pair the prime with your phone...
enable all built-in location services, enable "mock locations"
That did it...and I agree it should be in a sticky somewhere. Wish they had a toggle version of those apps so you wouldn't have to open up the apps to accomplish this.
Beggars can't be choosers though...it works. Thanks!
I agree this should be stickied. I was trying to use Bluetooth GPS yesterday but had it backwards. Obviously not ideal but it works
Why it doesn't work? I got the client started.
[email protected]
Just an update for those still interested -
The 1.2.1 TetherGPS update fixes the ICS issue, and will now work with your Transformer Primes. It's on the Android Market, and will be up on Amazon's market in a few days.
Let me know if you run into any issues!
At least the latest lite version still does not work on my galaxy nexus :-/

Help with Citrix Receiver

Using the CM7 alpha that was briefly available here.
I'm trying to access my employer's citrix server. I've installed the receiver and configured everything properly. I can login, but before it displays my apps, I get an error that says:
Too many server redirects.
I get the same error when accessing the web interface using the default Browser or Dolphin. I installed UCBrowser, and it properly displays the apps. However, when I click them, it simply downloads the ica file, rather than opening it. If I use a file manager and click on the ica file, nothing happens. If I long press it and select Citrix Receiver, nothing happens.
Can anyone point me in the right direction to get this working?
As the alpha was pulled for various reasons as well as not being ready, I would recommend waiting for a stable release as that problem could be resolved with a future release.
I understand where you are coming from... but the alpha was pulled for reasons not related to this issue. I also had the same problems using Snowball. I'm hoping there is some configuration that will ignore the multiple server redirects...
I just tried it my Evo 4G, running stable CM 7.1, and have the same issue... works fine on my windows and Linux boxes, and on my co-workers iPhone.
Sounds like an overall Android issue. Maybe try the Android forum?
http://forum.xda-developers.com/forumdisplay.php?f=1424
Have you read this thread:
http://androidforums.com/desire-support-troubleshooting/120577-websites-cannot-log-too-many-redirects.html
~ Veronica
lavero.burgos said:
Have you read this thread:
http://androidforums.com/desire-support-troubleshooting/120577-websites-cannot-log-too-many-redirects.html
~ Veronica
Click to expand...
Click to collapse
I did read that thread, and tried opera (and a few other browsers) with no success... I'm not sure what APN is though... I'll see if anyone in the general Android forum has seen this.
You might also want to email one of the Citrix Reciver developers, to see if you can download an earlier version of Citrix for testing. They used to have 2.1 and 2.2 on the website, but I don't see that page anymore.

Gen8 archos 101 16gb HELP!!!!!!!

Hi just new to the forum.
I have a archos 101 gen8 16gb it is about 5years old and has been in a cupboard for a couple of years it is running on the original software, I tried last night to put arctools on it via appslib but its coming up with a server error.
What I want to do if its possible is load kodi onto it for my daughter I am not really fussed about using it for anything else as have a newer tablet now.
Can someone advise will this be possible and if so tell me how.
Thanks in advance, G
pointy1 said:
Hi just new to the forum.
I have a archos 101 gen8 16gb it is about 5years old and has been in a cupboard for a couple of years it is running on the original software, I tried last night to put arctools on it via appslib but its coming up with a server error.
What I want to do if its possible is load kodi onto it for my daughter I am not really fussed about using it for anything else as have a newer tablet now.
Can someone advise will this be possible and if so tell me how.
Thanks in advance, G
Click to expand...
Click to collapse
Well I'm late but what do you actually want to achieve with arctools, if you want to install play store then that doesn't seem to be possible anymore as when you login you get a mail with a report that a unsecure device (to today's standards) tried to login and wasn't allowed so the market can't even properly update to play store thus not allowing you to login. (which is pretty much a dumb fail loop)
Also I do not think kodi can run on 2.2, I think the old xbmc builds yes but I am pretty sure kodi has a 2.3 or 4.0 minimum version so you would still need to install either openaos gingerbread or cyanobiz.
On the other hand android 2.3 is also in the same boat with the market place but the good news is that you can just download the apk from the kodi website and sideload it (and IIRC kodi has an auto-update feature built in so you don't even need play store to update it but it will still be done manually).
On the other hand even if kodi would work on 2.2 I would strongly advise flashing SDE and the custom root kernel as kodi has many root only features that make it behave so much better than on a non-rooted device (on some devices without root some of the core features are in fact unavailable) also this would make it possible to overclock using the milestone overclock app which gives a huge boost to overall performance.
Hope this helps you out and feel free to ask any more questions.
EDIT: Seems like newer versions of kodi need android 4.2+ but I think you should be able to use 14.2 or 15 on 4.0+ (cyanobiz).

Categories

Resources