Configuring Fiddler Everywhere alongside Cisco AnyConnect
Environment
| Product | |
| Product Version | 1.1.0 and above |
| 3rd-party tool | Cisco AnyConnect |
Description
How can I configure Fiddler Everywhere to use VPN software like Cisco AnyConnect?
Solution
To handle this issue, follow the steps in the suggested approach.
Prerequisites
- Install the latest version of Fiddler Everywhere.
- Provide the VPN software with pre-configured VPN network access. The article covers the steps needed for Cisco AnyConnect.
Configuration for System Capturing Mode
The following section showcases how to use Cisco VPN alongside the Fiddler's system capturing mode. Executing the steps in the exact order suggested in this section is crucial for properly setting up Cisco AnyConnect alongside Fiddler Everywhere.
Make sure your Cisco AnyConnect client is disconnected.
Start Fiddler Everywhere and toggle on the System Proxy switch (system capturing mode).
Open the Settings > HTTP menu, trust the Fiddler's certificate, and check the Capture HTTPS traffic box.
-
Open the Settings > Connections menu and, in Bypass Fiddler for URLs that starts with:, add the VPN addresses of your VPN servers. Click the Save button to preserve the bypass list.
You can use a comma, semicolon, new line, and white space as a separator for multiple addresses in the bypass list. All separators will be converted to the OS-supported separator after saving the values. Once the addresses in Bypass Fiddler for URLs that start with: are set, the values persist and are used by Fiddler Everywhere to set the OS bypass list. For example, you can open the Proxy Settings on Windows OS and check that the values are persisted in the Use the proxy server except for addresses that start with.. textbox.
Start the Cisco VPN client and connect to the VPN network.
Start capturing the traffic with Fiddler Everywhere using the system capturing mode.
To preserve the proper OS network configuration, refer to the Reusing the VPN section.
Reusing the VPN
To prevent Cisco AnyConnect from using cached proxy information, stop the Cisco VPN software and close Fiddler Everywhere or pause its system capturing mode.
The workflow for Cisco AnyConnect alongside Fiddler Everywhere is as follows:
Start Fiddler Everywhere and toggle on the System Proxy switch (system capturing mode).
Connect the Cisco AnyConnect client.
Capture the traffic.
Disconnect the Cisco AnyConnect client.
Toggle off the System Proxy switch and stop the Fiddler Everywhere application.
Configuration for Network Capturing Mode
The following section showcases how to use Cisco VPN alongside the Fiddler's network capturing mode. Executing the steps in the exact order suggested in this section is crucial for properly setting up Cisco AnyConnect alongside Fiddler Everywhere.
Make sure your Cisco AnyConnect client is disconnected.
Start Fiddler Everywhere and enable the network capturing mode.
Open the Settings > HTTP menu, trust the Fiddler's certificate, and check the Capture HTTPS traffic box.
Create a Do Not Decrypt rule to bypass the VPN endpoints.
- Open Traffic pange and go to the Rules tab.
- Use Add Rule to open the Rule Builder.
- Create a match condition through Add Condition and match the targeted VPN host (for example, match vpn.mycompany.com). Additionally, match all sessions that use CONNECT HTTP methods (to match the so called proxy tunnels).
- Create a new action through Add Action. Select the Do Not Decrypt action.
- Save and enable the rule.
Start the Cisco VPN client and connect to the VPN network.
Start capturing the traffic with Fiddler Everywhere using the network capturing mode.