cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
470
Views
1
Helpful
1
Replies

Cisco Secure Client- AnyConnect vpn service

invokergowda
Level 1
Level 1

We managed to deploy a new version of Cisco and since it’s deployed through an MDM which in our case is Intune for MacOs we have a prompt that comes up asking for enabling in Login items on mac and we tried everything but of no help. Any help is much appreciated! We want to roll out to production of 70k users and this is a pain and a road block to us at this point! 

Yes we have added the team bundle identifier and still having the same issue. 

IMG_2813.jpeg

1 Reply 1

dogx
Level 1
Level 1

Had this problem, too. The Cisco documentation is missing a step to create the required MDM profile.

If you are using Intune you need to add a Configuration Profile using Settings Catalog for "Login → Service Management - Managed Login Items":

Bildschirmfoto 2024-04-14 um 17.16.42.png

The same should be possible in other MDMs using a .mobileconfig profile (untested):

 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadType</key>
			<string>com.apple.servicemanagement</string>
			<key>Rules</key>
			<array>
				<dict>
					<key>RuleType</key>
					<string>BundleIdentifierPrefix</string>
					<key>RuleValue</key>
					<string>com.cisco.secureclient.vpn.service</string>
					<key>Comment</key>
					<string>VPN Service</string>
				</dict>
				<dict>
					<key>RuleType</key>
					<string>TeamIdentifier</string>
					<key>RuleValue</key>
					<string>DE8Y96K9QP</string>
					<key>Comment</key>
					<string>Cisco TeamID</string>
				</dict>
			</array>
			<key>PayloadDescription</key>
			<string></string>
			<key>PayloadOrganization</key>
			<string>Cisco Systems, Inc.</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>PayloadDisplayName</key>
			<string>Cisco Secure Client - Anyconnect VPN Service</string>
			<key>PayloadIdentifier</key>
			<string>161D2FCC-4DE2-416F-84F7-2D14027831BA</string>
			<key>PayloadUUID</key>
			<string>161D2FCC-4DE2-416F-84F7-2D14027831BA</string>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string>Allow VPN background service without user input</string>
	<key>PayloadOrganization</key>
	<string>MyOrg</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
	<key>PayloadDisplayName</key>
	<string>Cisco Secure Client Login Items</string>
	<key>PayloadIdentifier</key>
	<string>28E1567E-F1E6-429F-A04E-1D77BEBB0CD6</string>
	<key>PayloadUUID</key>
	<string>692BAC2B-6604-4B09-B40E-7E6CB1FFE99D</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadScope</key>
	<string>System</string>
</dict>
</plist>

 

https://support.apple.com/en-hk/guide/deployment/dep91dff5936/1/web/1.0

https://support.apple.com/en-hk/guide/deployment/dep07b92494/1/web/1.0