The last two versions of Cisco Secure have had caused a weird issue in our environment. On random machines, we're getting a popup message (that locks up Finder until acknowledged) with the text "The VPN client agent was unable to create the interprocess communications depot" every 30 seconds. Looking around online, we found this was caused by Internet Connection Sharing (ICS) being enabled. Thing is, we don't enable ICS, and the machines we're seeing it on don't have ICS enabled.
My first thought was our installer was bad, but we're just doing the standard choices.xml for the install and applying their provided temp workaround for the macOS 14.2+ launchagent issue.
/usr/sbin/installer -pkg ./Cisco\\ Secure\\ Client.pkg -target / -applyChoiceChangesXML ./Cisco-Secure_choices.xml
# Temp fix for macOS 14.2 and 5.1.0.136
if [[ "$( sw_vers -productVersion | awk -F '.' '{print $1}' )" == "14" ]] && \\
[[ $( sw_vers -productVersion | awk -F '.' '{print $2}' ) -ge 2 ]] && \\
[ ! -f /Library/LaunchDaemons/com.cisco.secureclient.vpnagentd.plist ]; then
echo "Applying workaround for macOS 14.2 and higher"
cp /opt/cisco/secureclient/bin/Cisco\\ Secure\\ Client\\ -\\ AnyConnect\\ VPN\\ Service.app/Contents/Resources/com.cisco.secureclient.vpnagentd.plist /Library/LaunchDaemons/
launchctl bootstrap system /Library/LaunchDaemons/com.cisco.secureclient.vpnagentd.plist
else
echo "macOS 14.2 workaround not needed"
fi
I'm not sure where that could go wrong on our end of things. Making things weirder, sometimes just uninstalling and reinstalling the exact same package on the machine with the exact same settings fixes the issue.
We reached out to Cisco support on the issue, and they keep bouncing between sending us Windows only troubleshooting and telling us to disable the already disabled ICS. Has anyone else been seeing this? If so, were you able to figure out the cause or a potential fix?
