FIPs Issue with Anyconnect

So lets say you are getting the FIPs error that looks like :

This is one annoying issue let me tell you. So I was installing a VPN client after establishing a new profile on for the Anyconnect Client. Well low and behold I get the FIPs issue. 

Just to note the ASA does not give out any certs and had no certs on it so I had to make a change to the local machine. 


The change is as follows :

C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client

In order to get to the directory make sure you have "Show hidden files, folders, or drives" selected in your folder options so you can see the Program Data Folder.

Go to that directory and once in that directory we will have to change the file called:

AnyConnectLocalPolicy.xml

We have to change the following code to be "false" where it states "true" and then save the file as the same name and directory replacing the old.



<?xml version="1.0" encoding="UTF-8"?>
-<AnyConnectLocalPolicy acversion="3.0.08057" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectLocalPolicy.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.xmlsoap.org/encoding/"> <FipsMode>true</FipsMode> </AnyConnectLocalPolicy>

                  CHANGE TO and SAVE


<?xml version="1.0" encoding="UTF-8"?>
-<AnyConnectLocalPolicy acversion="3.0.08057" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectLocalPolicy.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.xmlsoap.org/encoding/"> <FipsMode>false</FipsMode> </AnyConnectLocalPolicy>



After doing so make sure its saved and retry the anyconnect client and it should work!