AnyConnect VPN

[RahulPrasadh]

I have a question about AnyConnect on the iPhone. When I install, configure and run it, I get a message about the server being untrusted. I disabled the "Block untrusted servers", and I get the message that Cisco Secure Client cannot verify the identity of the VPN. Would I like to connect anyway? Is there anything we can do to prevent this message? It will just cause confusion among our users.

[KarstenI]

Without knowing your setup, it is only a guess. But it is likely that you don't use the FQDN that is shown in the AnyConnect config page but your own FQDN. Use the Meraki FQDN and you are fine.

[GIdenJoe]

Normally if you configured your Anyconnect on your MX with using the certificated provided by Meraki, make sure you connect using the dynamic-m URL and NOT the IP address.

The autogenerated certificate uses the dynamic-m name as CN and that cert should be trusted by most OS'es.