This is still broken. The post-connect.d workarounds don't work because NetworkManager doesn't get openconnect to use vpnc-scripts any more. So the problem is with nm-openconnect-service-openconnect-helper I guess. When debugging passed env vars I get (extract) Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASKLEN=0 Jul 07 08:48:45 Herbie NetworkManager[634766]: LANGUAGE=en_AU:en Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_DBUS_SERVICE_OPENCONNECT=org.freedesktop.NetworkManager.openconnect.Connection_29 Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_SYSLOG=1 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: PWD=/ Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: LANG=en_AU.UTF-8 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_ADDR=0.0.0.0 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETADDR=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_ADDR=10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_CSTP_OPTIONS=split-include=10.241.17.31/32 Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=10.241.17.30/32 Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=0.0.0.0/0 Jul 07 08:48:45 Herbie NetworkManager[634766]: search=officeworks.internal Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.30 Jul 07 08:48:45 Herbie NetworkManager[634766]: netmask=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: ipaddr=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: INVOCATION_ID=e13e358d737b41ef83b74684c4fdcef3 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_DNS=10.241.17.30 10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC=3 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_MTU=1422 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_ADDR=10.241.17.30 Jul 07 08:48:45 Herbie NetworkManager[634766]: SHLVL=1 Jul 07 08:48:45 Herbie NetworkManager[634766]: VPNGATEWAY=MYCOMPANYVPNIP Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_DEF_DOMAIN=MYCOMPANY.internal Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_ADDRESS=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: TUNDEV=vpn0 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASK=0.0.0.0 Jul 07 08:48:45 Herbie NetworkManager[634766]: GIO_USE_VFS=local Jul 07 08:48:45 Herbie NetworkManager[634766]: JOURNAL_STREAM=9:24405 Jul 07 08:48:45 Herbie NetworkManager[634766]: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin Jul 07 08:48:45 Herbie NetworkManager[634766]: reason=connect Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_PREFIX_TOKEN=634703 Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_LEVEL=0 Jul 07 08:48:45 Herbie NetworkManager[634766]: _=/usr/bin/env I also get, tellingly: Jul 07 08:48:45 Herbie NetworkManager[634767]: nm-openconnect[634703] [helper-634767] Ignoring invalid static route prefix '0'