topic Re: Cisco ASA- Updated Firmware and AnyConnect Packages in Network Security

Cisco ASA- Updated Firmware and AnyConnect Packages

LovejitSingh130013 — Sun, 13 Jun 2021 18:50:01 GMT

Hello Experts @balaji.bandi @Rob Ingram @Richard Burts @Marius Gunnerud @Leo Laohoo

I updated Cisco ASA Fimware and VPN packages. The VPN Packages updated from 4.8 to 4.10.

Is there anyway Cisco ASA push update of AnyConnect client on all the machines which are connecting to ASA?

Thanks

Re: Cisco ASA- Updated Firmware and AnyConnect Packages

Rob Ingram — Sun, 13 Jun 2021 18:56:33 GMT

@LovejitSingh130013

If you've uploaded the AnyConnect client to the ASA, the clients will automatically upgrade AnyConnect next time they connect to the VPN.

If you want to push out the upgrade you'd need to use your network management tools, such as SCCM to pre-deploy. Alternatively if you have Umbrella, you can configure it to auto-upgrade the AnyConnect client without having to connect to the VPN.

HTH

Re: Cisco ASA- Updated Firmware and AnyConnect Packages

LovejitSingh130013 — Sun, 13 Jun 2021 18:58:33 GMT

Hello @Rob Ingram

Do I need to add any config for clients automatically updating AnyConnect or it will auto sense once we updated packages on ASA?

Thanks

Re: Cisco ASA- Updated Firmware and AnyConnect Packages

balaji.bandi — Sun, 13 Jun 2021 19:08:48 GMT

Once the new Anyconnect Package available in ASA, the client gets the update automatically.

Re: Cisco ASA- Updated Firmware and AnyConnect Packages

Rob Ingram — Sun, 13 Jun 2021 19:13:05 GMT

By default the clients will always try to upgrade the client upon connecting to the VPN. The except to this is if you configure the AnyConnectLocalPolicy to bypass the downloader. If you haven't done that, then the client will attempt an upgrade.

https://community.cisco.com/t5/security-documents/how-to-update-the-anyconnect-and-hostscan-images/ta-p/3157306

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-firewalls/1140-cisco-asa-firewall-anyconnect-secure-mobility-4-upgrade.html