cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
177
Views
0
Helpful
3
Replies
Highlighted
Beginner

Umbrella package and certificate

We have anyconnect vpn software on all client machines connecting to a central site having ASAv.

 

The client machines are mix of windows and Mac OS.

Customer has purchased umbrella advantage .

 

Goal is to distribute modulen package, config  and root certificate to all clients .

There is no sccm .

But there's is airwave. Do we have a guide how to do it ?

 

Can we do it directly from ASAv the moment user connect next time to vpn? 

 

There should be a standard procedure for all client types like windows macos

 

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Beginner

With ASA AnyConnect you can enable pushing the Umbrella module as well the deployment of OrgInfo.json file to the AnyConnect clients. For Certificates I believe it won't be possible to do it through the ASA and you will need to deploy it yourself. 

For Umbrella module
1- upload the OrgInfo.json (if required to be installed) to disk of the ASA. 
2- the configuration under webvpn 

 

Webvpn
anyconnect profiles orginfo disk0:/OrgInfo.json
exit

 

3- Enable the Umbrella module for the anyconnect group policy

group-policy <Group_Policy_Name> attribute
    webvpn
        anyconnect profiles value orginfo type umbrella
        anyconnect modules value Umbrella 

 

 

For more info you can check umbrella documentation
https://docs.umbrella.com/deployment-umbrella/docs/the-anyconnect-plugin-umbrella-roaming-security-client-administrator-guide#update

View solution in original post

Highlighted

Thank you . This is clear now 

View solution in original post

3 REPLIES 3
Highlighted
Beginner

Hello, you can not do this directly from the ASA at the moment.

Highlighted
Beginner

With ASA AnyConnect you can enable pushing the Umbrella module as well the deployment of OrgInfo.json file to the AnyConnect clients. For Certificates I believe it won't be possible to do it through the ASA and you will need to deploy it yourself. 

For Umbrella module
1- upload the OrgInfo.json (if required to be installed) to disk of the ASA. 
2- the configuration under webvpn 

 

Webvpn
anyconnect profiles orginfo disk0:/OrgInfo.json
exit

 

3- Enable the Umbrella module for the anyconnect group policy

group-policy <Group_Policy_Name> attribute
    webvpn
        anyconnect profiles value orginfo type umbrella
        anyconnect modules value Umbrella 

 

 

For more info you can check umbrella documentation
https://docs.umbrella.com/deployment-umbrella/docs/the-anyconnect-plugin-umbrella-roaming-security-client-administrator-guide#update

View solution in original post

Highlighted

Thank you . This is clear now 

View solution in original post

Content for Community-Ad