We have done tests from different platforms (Windows, Linux and Mac) and the results were similar: 1) **Windows**: We have used the Cisco client that you provided, we have tried repeatedly but the result always is the same: ![](https://i.imgur.com/mbD3j6R.png) Although the enrollment to download the personal certificate is not mandatory when you use the Cisco client, we have tried to download it without success: ![](https://i.imgur.com/c6kvqZR.jpg) 2) **Linux**: We have used the Cisco client that you provided, we have tried repeatedly but the result always is the same: ```text VPN> >> Please enter your username and password. >> [ Certificate Enrollment ] A digital certificate is available for use with this VPN session. Do you want to enroll and use a certificate at this time? [y/n]: n Username: [ext_ernesto] Password: >> notice: Please respond to banner. VPN> **** W A R N I N G ** W A R N I N G **** To enhance security and quality of service DPDHL is discontinuing the support of old, obsolete Cisco AnyConnect client version 2.x, 3.x and some 4.x clients. The minimum supported version will be 4.5.x. All lower client versions will not be able to connect (i.e. Access will be DENIED) after January 30, 2019. Please upgrade your Cisco AnyConnect clients as soon as possible to ensure your continued access to DPDHL network. New version of client - version 4.5.x. - can be downloaded from here: https://extweb.dhl.com/download. **** I M P O R T A N T **** If you are connecting for the first time without a certicate or connecting with an expired certificate ... Anyconnect will automatically enroll for a new Certificate! **** W A R N I N G **** You are now connected to a DPDHL Private network. The use of this system is restricted to authorized user only. All access is subject to monitoring to ensure proper performance of the applicable security features or procedures. accept? [y/n]: y >> state: Connecting >> notice: Establishing VPN session... The AnyConnect Downloader is analyzing this computer. Please wait... The AnyConnect Downloader is performing update checks... >> notice: The AnyConnect Downloader is performing update checks... >> notice: Checking for profile updates... The AnyConnect Downloader updates have been completed. Please wait while the VPN connection is established... >> notice: Checking for customization updates... >> notice: Performing any required updates... >> notice: The AnyConnect Downloader updates have been completed. >> state: Connecting >> notice: Establishing VPN session... >> notice: Establishing VPN - Initiating connection... >> notice: Establishing VPN - Examining system... >> notice: Establishing VPN - Activating VPN adapter... >> notice: Establishing VPN - Configuring system... >> notice: Establishing VPN... >> state: Connected >> notice: Connected to xcvpn.dhl.com. >> state: Connected >> notice: Connected to xcvpn.dhl.com. >> notice: Certificate Enrollment - Initiating, Please Wait. >> notice: Certificate Enrollment - Request forwarded. >> notice: Certificate Enrollment - Request forwarded. >> state: Disconnecting >> notice: Disconnect in progress, please wait... >> state: Disconnecting >> warning: Certificate enrollment failed. Please try again or contact your IT administrator for more information. >> state: Disconnected >> state: Disconnected >> notice: Contacting xcvpn.dhl.com. ``` Also, we have used another client like `openconnect` and, although the result was different, we can't access any place: ```text Oct 24 12:54:50 localhost audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 24 12:54:53 localhost NetworkManager[988]: <info> [1571914493.3969] audit: op="connection-activate" uuid="568ea739-8fd1-45db-b988-21452f97bd86" name="DHL" pid=1565 uid=1000 result="success" Oct 24 12:54:53 localhost NetworkManager[988]: <info> [1571914493.4003] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",0]: Started the VPN service, PID 9214 Oct 24 12:54:53 localhost NetworkManager[988]: <info> [1571914493.4082] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",0]: Saw the service appear; activating connection Oct 24 12:54:54 localhost dhclient[9069]: XMT: Info-Request on wlp2s0, interval 18670ms. Oct 24 12:54:56 localhost gnome-keyring-daemon[4477]: asked to register item /org/freedesktop/secrets/collection/login/148, but it's already registered Oct 24 12:54:56 localhost journal[4477]: asked to register item /org/freedesktop/secrets/collection/login/148, but it's already registered Oct 24 12:54:56 localhost NetworkManager[988]: <info> [1571914496.5032] keyfile: update /etc/NetworkManager/system-connections/DHL (568ea739-8fd1-45db-b988-21452f97bd86,"DHL") Oct 24 12:54:56 localhost NetworkManager[988]: <info> [1571914496.5052] keyfile: update /etc/NetworkManager/system-connections/DHL (568ea739-8fd1-45db-b988-21452f97bd86,"DHL") after persisting connection Oct 24 12:54:56 localhost NetworkManager[988]: <info> [1571914496.5171] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",0]: VPN connection: (ConnectInteractive) reply received Oct 24 12:54:56 localhost NetworkManager[988]: <info> [1571914496.5197] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",0]: VPN plugin: state changed: starting (3) Oct 24 12:54:56 localhost openconnect[9237]: Connected to 165.72.209.14:443 Oct 24 12:54:56 localhost openconnect[9237]: SSL negotiation with 165.72.209.14 Oct 24 12:54:56 localhost openconnect[9237]: Server certificate verify failed: signer not found Oct 24 12:54:56 localhost openconnect[9237]: Connected to HTTPS on 165.72.209.14 Oct 24 12:54:56 localhost openconnect[9237]: Got CONNECT response: HTTP/1.1 200 OK Oct 24 12:54:56 localhost openconnect[9237]: CSTP connected. DPD 30, Keepalive 20 Oct 24 12:54:56 localhost openconnect[9237]: Connected as 172.25.10.243, using SSL Oct 24 12:54:57 localhost openconnect[9237]: Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-128-CBC)-(SHA1). Oct 24 12:54:58 localhost openconnect[9237]: SIOCSIFMTU: Operation not permitted Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2085] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",0]: VPN connection: (IP Config Get) reply received. Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2091] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: VPN connection: (IP4 Config Get) reply received Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2096] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: VPN Gateway: 165.72.209.14 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2096] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Tunnel Device: "vpn0" Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2096] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: IPv4 configuration: Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2096] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Internal Address: 172.25.10.243 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Internal Prefix: 18 Oct 24 12:54:58 localhost kernel: IPv6: ADDRCONF(NETDEV_UP): vpn0: link is not ready Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Internal Point-to-Point Address: 172.25.10.243 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Maximum Segment Size (MSS): 0 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Forbid Default Route: no Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Internal DNS: 165.72.12.2 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Internal DNS: 165.72.136.2 Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: DNS Domain: 'dhl.com' Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: No IPv6 configuration Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: Login Banner: Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2097] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: ----------------------------------------- Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2098] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: **** W A R N I N G ** W A R N I N G ****#012#012To enhance security and quality of service DPDHL is discontinuing the support of old, obsolete Cisco AnyConnect client version 2.x, 3.x and some 4.x clients. The minimum supported version will be 4.5.x.#012All lower client versions will not be able to connect (i.e. Access will be DENIED) after January 30, 2019.#012Please upgrade your Cisco AnyConnect clients as soon as possible to ensure your continued access to DPDHL network.#012#012New version of client - version 4.5.x. - can be downloaded from here:#012https://extweb.dhl.com/download.#012**** I M P O R T A N T ****#012#012If you are connecting for the first time without a certicate or connecting with an expired certificate ...#012Anyconnect will automatically enroll for a new Certificate!#012#012**** W A R N I N G ****#012You are now connected to a DPDHL Private network. The use of this system is restricted to authorized user only.#012All access is subject to monitoring to ensure proper performance of the applicable security features or procedures. Oct 24 12:54:58 localhost dbus-daemon[847]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.11' (uid=0 pid=988 comm="/usr/sbin/NetworkManager --no-daemon ") Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2098] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: Data: ----------------------------------------- Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2098] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: VPN plugin: state changed: started (4) Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2112] vpn-connection[0x55ea555550d0,568ea739-8fd1-45db-b988-21452f97bd86,"DHL",19:(vpn0)]: VPN connection: (IP Config Get) complete Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2119] device (vpn0): state change: unmanaged -> unavailable (reason 'connection-assumed', internal state 'external') Oct 24 12:54:58 localhost systemd[1]: Starting Network Manager Script Dispatcher Service... Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2150] keyfile: add connection in-memory (353f8976-f017-4804-a959-e59cef8c499f,"vpn0") Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2162] device (vpn0): state change: unavailable -> disconnected (reason 'connection-assumed', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2170] device (vpn0): Activation: starting connection 'vpn0' (353f8976-f017-4804-a959-e59cef8c499f) Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2196] device (vpn0): state change: disconnected -> prepare (reason 'none', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2201] device (vpn0): state change: prepare -> config (reason 'none', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2203] device (vpn0): state change: config -> ip-config (reason 'none', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2210] device (vpn0): state change: ip-config -> ip-check (reason 'none', internal state 'external') Oct 24 12:54:58 localhost dbus-daemon[847]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Oct 24 12:54:58 localhost systemd[1]: Started Network Manager Script Dispatcher Service. Oct 24 12:54:58 localhost audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:1 'vpn-pre-up' [vpn0]: new request (1 scripts) Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:2 'pre-up' [vpn0]: new request (1 scripts) Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:3 'vpn-up' [vpn0]: new request (6 scripts) Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:3 'vpn-up' [vpn0]: start running ordered scripts... Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2418] device (vpn0): state change: ip-check -> secondaries (reason 'none', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2421] device (vpn0): state change: secondaries -> activated (reason 'none', internal state 'external') Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2460] device (vpn0): Activation: successful, device activated. Oct 24 12:54:58 localhost NetworkManager[988]: <info> [1571914498.2466] policy: set 'vpn0' (vpn0) as default for IPv4 routing and DNS Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:4 'up' [vpn0]: new request (6 scripts) Oct 24 12:54:58 localhost systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive. Oct 24 12:54:58 localhost nm-dispatcher[9242]: req:4 'up' [vpn0]: start running ordered scripts... Oct 24 12:54:58 localhost systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive. Oct 24 12:54:58 localhost kernel: IPv6: ADDRCONF(NETDEV_CHANGE): vpn0: link becomes ready Oct 24 12:55:09 localhost audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 24 12:55:13 localhost dhclient[9069]: XMT: Info-Request on wlp2s0, interval 36100ms. ``` 3) **MacOS**: Like in Windows, we have used the Cisco client that you provided, we have tried repeatedly but the result always is the same: ```text 11:24:05 User accepted banner. 11:24:05 Establishing VPN session... 11:24:05 The AnyConnect Downloader is performing update checks... 11:24:05 Checking for profile updates... 11:24:05 Checking for customization updates... 11:24:05 Performing any required updates... 11:24:05 The AnyConnect Downloader updates have been completed. 11:24:05 Establishing VPN session... 11:24:05 Establishing VPN - Initiating connection... 11:24:07 Establishing VPN - Examining system... 11:24:07 Establishing VPN - Activating VPN adapter... 11:24:07 Establishing VPN - Configuring system... 11:24:08 Establishing VPN... 11:24:08 Connected to xcvpn.dhl.com. 11:24:13 Certificate Enrollment - Initiating, Please Wait. 11:24:13 Certificate Enrollment - Request forwarded. 11:25:05 Certificate Enrollment - Request forwarded. 11:25:07 Disconnect in progress, please wait... 11:25:09 Ready to connect. 11:25:09 Contacting xcvpn.dhl.com. 11:25:13 No valid certificates available for authentication. ``` In all cases, the main cert was installed at the main root level as the guide says.