topic Re: cisco anyconnect upgrade in Network Access Control

cisco anyconnect upgrade

MUSTAPHAABSIKE02085 — Mon, 27 Dec 2021 14:35:23 GMT

Hello Team,

I'd like to know the recommanded version of cisco any connect NAM for CISCO ISE . I find Version 4.8, 4.9, 4.10

thanks,

Re: cisco anyconnect upgrade

Mike.Cifelli — Mon, 27 Dec 2021 15:51:28 GMT

IMO for security advisory concerns I would always suggest running the latest version of AnyConnect. Take a look here for compatibility concerns: Cisco Identity Services Engine - Compatibility Information - Cisco

Re: cisco anyconnect upgrade

MUSTAPHAABSIKE02085 — Tue, 28 Dec 2021 14:48:03 GMT

Thanks Mike for your feedback, can you please tell me how can i upgrade cisco anyconnect from 4.5 to 4.10.

today cisco anyconnect 4.5 is installed and is in production on the end user workstation

Re: cisco anyconnect upgrade

Mike.Cifelli — Tue, 28 Dec 2021 14:55:13 GMT

Any chance these clients also rely on AnyConnect for some sort of vpn connection to ASAs, etc.? If so, webdeploying the upgrades to the clients that way is very efficient/easy. Your other options include some third-party software (sccm) or possibly relying on ISE provisioning portal and webdeploying the upgrade that way. The catch is that there are several components required to make this happen. I would suggest taking a look at these:

ISE Posture Prescriptive Deployment Guide - Cisco Community

Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 4.0 - Deploy AnyConnect [Cisco AnyConnect Secure Mobility Client] - Cisco

Re: cisco anyconnect upgrade

MUSTAPHAABSIKE02085 — Wed, 29 Dec 2021 14:19:43 GMT

we have CISCO ISE deployed on our network infra can I use client provisionning to deploy it on the end users workstations ?

Re: cisco anyconnect upgrade

Mike.Cifelli — Wed, 29 Dec 2021 14:41:31 GMT

we have CISCO ISE deployed on our network infra can I use client provisionning to deploy it on the end users workstations ?

-Yes you can rely on ISE to webdeploy the upgrades. I strongly suggest looking at the info shared from my previous post.