topic Updating AnyConnect Packages in ASA in Network Security

Updating AnyConnect Packages in ASA

LovejitSingh130013 — Thu, 19 May 2022 16:22:01 GMT

Hello @balaji.bandi @Rob Ingram

I am planning to update AnyConnect Packages on ASA and have a few questions.

Do I need to reboot the firewall to make the new package in effect?

Also, will the clients update when they reconnect to VPN, or ASA will disconnect and start updating them right away?

Anything else I should be verifying before updating these packages?

Thanks,

Lovejit Singh

Re: Updating AnyConnect Packages in ASA

Rob Ingram — Thu, 19 May 2022 16:24:21 GMT

@LovejitSingh130013 no you don't need to reboot the firewall, you need to upload the anyconnect package.

The client will automatically upgrade upon connecting to the VPN, this is assuming you've not configured the clients to bypass the downloader in the anyconnect profile. The clients won't be disconnected when you upload the package.

Re: Updating AnyConnect Packages in ASA

balaji.bandi — Thu, 19 May 2022 16:39:30 GMT

as @Rob Ingram mentioned, its just upload new version, the client will download automatically

if this is corporate build in AD environment, you can also push from SCCM

Re: Updating AnyConnect Packages in ASA

SinghRaminder — Fri, 20 May 2022 02:25:44 GMT

I believe you also need to move them higher in order as well

Suppose you have Verison 4.9 and 4.10 and you want users to connect and get 4.10 now, you need to move the 4.10 version higher under Configuration>RemoteAccess VPN>NetworkClient Access>Anyconenct Client Software

and make sure latest is on the top.

Also, as Rob mentioned, you need to make sure if you have profile that does not allow it, or sometimes in organization users do not have privileges to install software, that will be a problem then

Re: Updating AnyConnect Packages in ASA

Marvin Rhoads — Fri, 20 May 2022 03:23:28 GMT

The advice others already provided is correct.

I would add that upgrades to an existing AnyConnect installation do not require local administrator privileges on Windows computers.