Thanks for the feedback. This should be a workable solution, soon if not immediately, for anyone not on a MX64/65. Shame that's the cut-off though, when those are the most popular models... ... View more

I was giving up hope of seeing a fix from either Microsoft or Meraki on this any time soon. If anything it is getting worse. I was connected to a client site earlier, and upon trying to reconnect I can see in the logs it is trying to use MSCHAP instead of PAP again. What!?   Today, started a support call to see if there is any better fix, and I've been listening to hold music for well over an hour. Could the lack of a working VPN client be contributing to the super-long hold times we've all been experiencing lately?   EDIT: Finally got through to support, and v16 of the MX firmware supports the Anyconnect client. That firmware is still BETA, and who knows when it will be out of beta, but that should actually resolve the issue. Supposedly some of the MX being shipped already have v16, so it should be close... ... View more

Thank you so much for posting this! I already spent a day troubleshooting (Labor Day. Fun). I finally just disabled the firewall on the 2019 server, cause why not. Clearly the rule is there, but sure enough that allowed authentication to take place. Really frustrating! Anyway, that's when I googled and found your article, so at least getting it resolved should be much faster! ... View more