browse
An incompatibility with older versions of the AnyConnect Umbrella module was introduced with Windows 11 22H2 update (KB5031354 or KB5030310). It occurs in the following situations:
- Windows 11 22H2 (KB5031354 or KB5030310)
- AnyConnect with Umbrella Roaming module older than 4.10 MR7
(or newer versions if support enabled the useOriginalDNSCryptProxy setting on your organization) - User is connected to VPN
- Domain response is too large for UDP, and is retried over TCP
- Example domains: management.azure.com, make.powerautomate.com, static.powerapps.com, api.flow.microsoft.com, api.powerapps.com
Workarounds
- Rollback or postpone installation of Microsoft update KB5031354 (22H2)
- Place any impacted domain on the Umbrella internal domains list
- Disable the Umbrella roaming module while on VPN
Fix
Update to AnyConnect 4.10.07073 or Secure Client 5.0.03076 (or newer)