Umbrella package and certificate

[skywalker_007]

We have anyconnect vpn software on all client machines connecting to a central site having ASAv.

The client machines are mix of windows and Mac OS.

Customer has purchased umbrella advantage .

Goal is to distribute modulen package, config  and root certificate to all clients .

There is no sccm .

But there's is airwave. Do we have a guide how to do it ?

Can we do it directly from ASAv the moment user connect next time to vpn? 

There should be a standard procedure for all client types like windows macos

[ToucanzooX]

Hello, you can not do this directly from the ASA at the moment.

[takiadeen · Accepted solution]

With ASA AnyConnect you can enable pushing the Umbrella module as well the deployment of OrgInfo.json file to the AnyConnect clients. For Certificates I believe it won't be possible to do it through the ASA and you will need to deploy it yourself. 

For Umbrella module
1- upload the OrgInfo.json (if required to be installed) to disk of the ASA. 
2- the configuration under webvpn 

Webvpn
anyconnect profiles orginfo disk0:/OrgInfo.json
exit

3- Enable the Umbrella module for the anyconnect group policy

group-policy <Group_Policy_Name> attribute
    webvpn
        anyconnect profiles value orginfo type umbrella
        anyconnect modules value Umbrella 

For more info you can check umbrella documentation
https://docs.umbrella.com/deployment-umbrella/docs/the-anyconnect-plugin-umbrella-roaming-security-client-administrator-guide#update

[skywalker_007 · Accepted solution]

Thank you . This is clear now 

[Marvin Rhoads]

@takiadeen 's solution takes care of the AnyConnet module plus required OrgInfo.json.

The Umbrella root certificate can be pushed via GPO.