Some checks failed
Test / test (push) Has been cancelled
After VPN reconnects, Cisco agent creates its chains asynchronously, pushing our ACCEPT rules down where they're ineffective. Fix: 1. Wait up to 30s for ciscovpn chain to exist 2. Delete any existing rules (they may be in wrong position) 3. Insert fresh rules at position 1 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>