cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
992
Views
0
Helpful
3
Replies

anyconnect agent locked and PIM/PAM integration with Umbrella

sv7
Level 3
Level 3

Is it possible to lock anyconnect agent exe file so no user can't uninstall it and also can we integrate Umbrella dashboard with PIM/PAM.

 

 

3 Replies 3

sv7
Level 3
Level 3

Hi All,

 

Concern regarding user wont able to uninstall agent i got below steps but im confused where to excute it. 

 

https://support.umbrella.com/hc/en-us/articles/115004629343-AnyConnect-Roaming-Security-Module-Pre-Deployment-Tips#:%7E:text=Cisco%20AnyConnect%20can%20be%20configured,LOCKDOWN%27%20is%20available%20for%20this

 

And regarding Siem integration which is splunk in my case below is the link.

https://support.umbrella.com/hc/en-us/articles/360001388406-Configuring-Splunk-with-a-Cisco-managed-S3-Bucket

 

Can anyone help me regarding how can i achieve this.

any help please

pjain2
Cisco Employee
Cisco Employee

Hi,

 

Once the pre-deploy package win-X.X.XXXXX-umbrella-predeploy-k9.msi is put on a machine, you need to navigate to the folder having that MSI file and then run the below commands while doing the installation

 

Enable Lockdown

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive LOCKDOWN=1 /lvx* 

Hide from Programs and Features

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive ARPSYST

Please let me know if this was helpful.