topic Anyconnect client profile in Network Security

Anyconnect client profile

giuseppe parlato — Tue, 12 Mar 2019 04:43:38 GMT

Hello,

some doubts about anyconnect..

1. I've created a client profile, then associated it with a group policy, and changed some preferences settings. When I install anyconnect by web-deploy under client preferences those settings are not corresponding. How can I be sure client profile was correctly deployed to the client?

2. Into the same client profile I've configured a server list with a host display name. Then installed anyconnect client. Then removed the list from client profile. However every time I install anyconnect client I always have that host display name. I've tried to uninstall/install many times. Does anyconnect client cache something somewhere ?

3. I noticed that when I login to install anyconnect by web-deploy after anyconnect is installed I have two vpn connections (they actually have the same connection profile and group policy) , clientless and anyconnect. After disconncting anyconnect vpn client clientless vpn connection is still active. Are there any way after web-deploy and anyconnect vpn connection to logout clientless vpn?

Hi poiu720408 , 1. You need

rvarelac — Tue, 09 Sep 2014 19:13:34 GMT

Hi poiu720408 ,

1. You need to set up a web-url or group-alias under the group policy as web have enable the "tunnel-group-list enable" under the webvpn configuration. So once the user connect to the proper URL/alias the profile will be applied.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html

2. Yes the Anycopnnect store a "Cache " information on the PC , if you want to clan up you have to go to the anyconnect folder on C: on the PC and delete the global_preferences.xml profile.

3. This behavior is totally expected and they should disappear after a some minutes , however if you wan to force this , you can use the command "vpn-sessionsdb logoff webvpn noconfirm"

Please rate helpful post !

Hope this helps

- Randy -

Actually I do not have any

giuseppe parlato — Sat, 04 Oct 2014 16:25:22 GMT

Actually I do not have any global_preferences.xml file

On Windows 7 it's in a hidden

Marvin Rhoads — Sat, 04 Oct 2014 18:03:19 GMT

On Windows 7 it's in a hidden folder:

C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client.

The file name is preferences_global.xml. Your various profiles should be in a subdirectory there called "Profiles". You can see them update in that folder.

There are also preferences which are in a different hidden folder:

C:\Users\<username>\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client

Re: Anyconnect client profile

er.ankitsharma — Sun, 11 Mar 2018 11:14:36 GMT

Hello,

Can we add the "OrgInfo.jason" for Cisco Umbrella Roaming client integration with Anyconnect using FMC/FTD ?

I found the below for ASA/ASDM:

Navigate to Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Client Profile.
Choose Add.
Give the profile a name.
Choose the Umbrella Security Roaming Client type from the Profile Usage drop-down list. The OrgInfo.json file populates in the Profile Location field.
Click Upload and browse to the location of the OrgInfo.json file that you downloaded from the dashboard.
Associate it with the DfltGrpPolicy at the Group Policy drop-down list.

How can we perform it on FMC/FTD ? Can we use the standlone Anyconnect profile editor for this setup and how ?

Thanks 🙂