FWIW, here is what I saw two years ago (same remotehost and using the same config file with usergroup=vendor): POST https://remotehost/vendor Attempting to connect to server 1.2.3.4:443 SSL negotiation with remotehost Connected to HTTPS on remotehost Got HTTP response: HTTP/1.0 302 Temporary moved GET https://remotehost/vendor Attempting to connect to server 1.2.3.4:443 SSL negotiation with remotehost Connected to HTTPS on remotehost Got HTTP response: HTTP/1.0 302 Temporary moved GET https://remotehosst/+webvpn+/index.html SSL negotiation with remotehost Connected to HTTPS on remotehost Please enter your username and password. PASSCODE: