VPN Client Receives "Untrusted Server Blocked!" Error Message

Issue

When attempting to connect to the VPN service at ISU the user receives the following message.

Cisco AnyConnect Secure Mobility Client

Untrusted Server Blocked!

AnyConnect cannot verify server: vpn.indstate.edu

Connecting to the server may result in a server security compromise!

Environment

  • Cisco AnyConnect Secure Mobility Client Connection

Cause

  • System is not setup to trust the VPN service. 

Resolution

Setup trust relationship on windows machine:

Adding a security appliance to the list of trusted sites is required for some Internet Explorer versions and older Windows Operating systems. We also recommend the procedure for others to eliminate certain security pop-up messages when you connect.

For Example: Internet Explorer on Vista has "Protected Mode" enabled by default. Adding the security appliance to the trusted sites allows communications with the security appliance, even though "Protected Mode" is enabled.

To add the security appliance to the list of trusted sites:

  1. Choose Internet Options. To do so, use either of the following methods:
    • Choose Start > (Settings >) Control Panel > Internet Options.
    • Open Internet Explorer and choose Tools > Internet Options.
  2. Click the Security tab.
  3. Click the Trusted sites icon, then click the Sites button below.
  4. Type the host name of the security appliance in Trusted Sites window. https://vpn.indstate.edu/
  5. Click Add.
  6. Click OK.
  7. Click OK on the Security tab.