If you are getting an error "The VPN Client was unable to setup IP Filtering" when trying to use the Cisco Any Connect client then here is the solution for you:
- Save the file "BFE.reg" locally and then execute the file by double clicking
- Click Start > Run > regedit
- Browse to “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy”
- Right click on “Policy” and select permission
- In the "Permissions for Policy" window, select advanced
- Unselect “Include inheritable permission from this object’s parent”
- Select Add from the Windows Security popup box
- Remove Users and CREATOR OWNER
- Select Add button
- Enter in "NT Service\BFE" and select OK
- Give the Object the following Allow permissions: Query Value, Set Value, Create Subkey, Enumerate Subkeys, Notify, and Read Control
- Select OK to close all of the boxes
- Reboot Windows
- Connect with AnyConnect to test the connection
