Cisco Umbrella Roaming Client & Anyconnect Integration via FMC/FTD

[er.ankitsharma]

Hello,

Can we add the "OrgInfo.jason" for Cisco Umbrella Roaming client integration with Anyconnect using FMC/FTD ?

I found the below for ASA/ASDM:

1. Navigate to Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Client Profile.
2. Choose Add.
3. Give the profile a name.
4. Choose the Umbrella Security Roaming Client type from the Profile Usage drop-down list. The OrgInfo.json file populates in the Profile Location field.
5. Click Upload and browse to the location of the OrgInfo.json file that you downloaded from the dashboard.
6. Associate it with the DfltGrpPolicy at the Group Policy drop-down list.

How can we perform it on FMC/FTD ?

Thanks :)

[MRCobb]

Did you happen to figure this out or is it not supported yet in FTD?

[er.ankitsharma]

Yes I got to know that it's not supported by FTD.

Thanks😊

[askaerr]

Hi, is this still not supported? If I'm not mistaken the latest FMC configuration guide states only the remote access client is supported: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/firepower_threat_defense_remote_access_vpns.html#reference_xby_dml_wy__ul_qrp_3jy_ty .

Does anybody have an idea when this will be integrated into FTD/FMC?

[Marvin Rhoads]

It's still not supported as of the current FMC/FTD release 6.3

No mention of it was made during the public presentations at Cisco Live Europe last week.

I'd reach out to your Cisco Account Manager if it's an important feature for you or your customers. That raises the priority within Cisco.

[Marvin Rhoads]

FTD only support VPN profiles at this time (i.e. as of FTD/FMC version 6.2.3).

[muneeb.ali07]

Is there any specific document that suggest about FTD with AnyConnect Secure Mobility Client with Umbrella?

[Marvin Rhoads]

It's not supported. The configuration guide confirms it here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/firepower_threat_defense_remote_access_vpns.html#reference_xby_dml_wy

The following AnyConnect features are not supported when connecting to an FTD secure gateway:

• Secure Mobility, Network Access Management, and all other AnyConnect modules and their profiles beyond the core VPN capabilities and the VPN client profile.

[askaerr]

What do you want to achieve? On ASA there's also no real integration with Umbrella. That shouldn't shop you from deploying Umbrella in an organization where FTD is also used.