topic Re: Upgrade Cisco AnyConnect to Secure Client in Endpoint Security

Upgrade Cisco AnyConnect to Secure Client

kakada Atada — Wed, 16 Aug 2023 01:49:55 GMT

Dear Community,

We are using AnyConnect version 4.XX.XX

We plan to upgrade from old current version to new Secure Client.

There are four latest version of Secure client version ( 5.0.04032, 5.0.03076, 5.0.03072, 5.0.02075 ).

Please kindly recommend which suitable Secure client we can upgrade to?

using SCCM to deploy agent.

Note: We use Win10 and Win11

Thanks for your supporting and advise.

Re: Upgrade Cisco AnyConnect to Secure Client

balaji.bandi — Wed, 16 Aug 2023 06:24:26 GMT

if i were you i always want to go latest stable version by reading the release notes and compatible with your Gateway :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/release/notes/release-notes-cisco-secure-client-5-0.html

Note : first i would install manually on the test clients and test all working as expected before role out mass using SCCM.

Re: Upgrade Cisco AnyConnect to Secure Client

kakada Atada — Wed, 16 Aug 2023 09:18:23 GMT

Thanks for your commend.

Re: Upgrade Cisco AnyConnect to Secure Client

ahollifield — Wed, 16 Aug 2023 12:10:12 GMT

Yup no reason not to use the latest here.

Re: Upgrade Cisco AnyConnect to Secure Client

james.king14 — Thu, 17 Aug 2023 13:41:16 GMT

Good Morning,

We were able to push out 5.0.04032 using the SCCM with success. At this
point we are not going to try the others. Believe me it was a task! There
are certain GPO’s changes we had to make.

Re: Upgrade Cisco AnyConnect to Secure Client

balaji.bandi — Thu, 17 Aug 2023 14:19:47 GMT

good to know . hope all good ?

Re: Upgrade Cisco AnyConnect to Secure Client

Ken Stieers — Thu, 24 Aug 2023 12:52:21 GMT

Go to 5.0.4032.

Re: Upgrade Cisco AnyConnect to Secure Client

kakada Atada — Fri, 25 Aug 2023 03:16:37 GMT

Cool

Re: Upgrade Cisco AnyConnect to Secure Client

sot01 — Fri, 20 Oct 2023 08:20:59 GMT

During upgrade vai SCCM, we have challenge one things on adding MAC address manaully to client provision. That's the quit challenge for. Hence, could you share your experiences with that?
Remark: In our environment we have around 8K endpoints and the impact is sensitive. So we need to rollout scope by scope.

Re: Upgrade Cisco AnyConnect to Secure Client

Marvin Rhoads — Fri, 20 Oct 2023 16:07:40 GMT

@sot01 what do you mean regarding "adding MAC address manaully to client provision"? An endpoint MAC address is not part of an AnyConnect / Secure Client configuration.

Re: Upgrade Cisco AnyConnect to Secure Client

sot01 — Mon, 23 Oct 2023 11:16:21 GMT

Hello @Marvin Rhoads,

Thanks your for your comment.
Our environment have thousand of end points up to 8K. So, the progress of upgrade agent is take times. We need to upgrade phase by phase like 1K endpoints per time. By this if we don't use client provision and set with MAC addresss to scope that numbers. How we could do to archieve that based on your experiences?

Re: Upgrade Cisco AnyConnect to Secure Client

ahollifield — Mon, 23 Oct 2023 11:35:48 GMT

Active Directory groups? What do you mean you don’t use Client Provisioning Portal? Could you use SCCM or your package/installation manager/MDM of choice?

Re: Upgrade Cisco AnyConnect to Secure Client

Marvin Rhoads — Mon, 23 Oct 2023 16:06:13 GMT

When we want to do that with SCCM, we just create a group associated with an OU that we place the upgrade candidates into. Divide your computers into however many batches you like and put them all in the target group a batch at a time. No need to sort on MAC addresses - just use computer names.

Re: Upgrade Cisco AnyConnect to Secure Client

sot01 — Tue, 24 Oct 2023 05:49:11 GMT

Hello @Marvin Rhoads,

Let me share our

Current status as below:
We are using Anyconnect version running on 4.XX.XX, with client provisioning setting set to this version and identity group is any.
Objective:
. We would need to upgrade to anyconnect version to secure x version (5), with specific scope of endpoint only (1K endpoints per phase).

. Deployment method, we planned to use SCCM (We already clear for this).
. Client provisioning setting - Unknow (We don't know how to configure or setting on client provisioning).

Could you advise on this? How we could configure or define it phase by phase like we mentioned?

Re: Upgrade Cisco AnyConnect to Secure Client

sot01 — Tue, 24 Oct 2023 05:50:06 GMT

Hello @ahollifield,
Kindly fine here.

Current status as below:

We are using Anyconnect version running on 4.XX.XX, with client provisioning setting set to this version and identity group is any.
Objective:
. We would need to upgrade to anyconnect version to secure x version (5), with specific scope of endpoint only (1K endpoints per phase).

. Deployment method, we planned to use SCCM (We already clear for this).
. Client provisioning setting - Unknow (We don't know how to configure or setting on client provisioning).

Could you advise on this? How we could configure or define it phase by phase like we mentioned?

Re: Upgrade Cisco AnyConnect to Secure Client

Marvin Rhoads — Tue, 24 Oct 2023 13:50:03 GMT

@sot01 when you say "...client provisioning setting set to this version and identity group is any", what system are you referring to? These are not AnyConnect settings.