- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-11-2021 03:02 PM
We have anyconnect vpn software on all client machines connecting to a central site having ASAv.
The client machines are mix of windows and Mac OS.
Customer has purchased umbrella advantage .
Goal is to distribute modulen package, config and root certificate to all clients .
There is no sccm .
But there's is airwave. Do we have a guide how to do it ?
Can we do it directly from ASAv the moment user connect next time to vpn?
There should be a standard procedure for all client types like windows macos
Solved! Go to Solution.
- Labels:
-
Cloud Security
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-23-2021 10:34 AM
With ASA AnyConnect you can enable pushing the Umbrella module as well the deployment of OrgInfo.json file to the AnyConnect clients. For Certificates I believe it won't be possible to do it through the ASA and you will need to deploy it yourself.
For Umbrella module
1- upload the OrgInfo.json (if required to be installed) to disk of the ASA.
2- the configuration under webvpn
Webvpn anyconnect profiles orginfo disk0:/OrgInfo.json exit
3- Enable the Umbrella module for the anyconnect group policy
group-policy <Group_Policy_Name> attribute webvpn anyconnect profiles value orginfo type umbrella anyconnect modules value Umbrella
For more info you can check umbrella documentation
https://docs.umbrella.com/deployment-umbrella/docs/the-anyconnect-plugin-umbrella-roaming-security-client-administrator-guide#update
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-23-2021 10:38 AM
Thank you . This is clear now
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-23-2021 07:20 AM
Hello, you can not do this directly from the ASA at the moment.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-23-2021 10:34 AM
With ASA AnyConnect you can enable pushing the Umbrella module as well the deployment of OrgInfo.json file to the AnyConnect clients. For Certificates I believe it won't be possible to do it through the ASA and you will need to deploy it yourself.
For Umbrella module
1- upload the OrgInfo.json (if required to be installed) to disk of the ASA.
2- the configuration under webvpn
Webvpn anyconnect profiles orginfo disk0:/OrgInfo.json exit
3- Enable the Umbrella module for the anyconnect group policy
group-policy <Group_Policy_Name> attribute webvpn anyconnect profiles value orginfo type umbrella anyconnect modules value Umbrella
For more info you can check umbrella documentation
https://docs.umbrella.com/deployment-umbrella/docs/the-anyconnect-plugin-umbrella-roaming-security-client-administrator-guide#update
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-23-2021 10:38 AM
Thank you . This is clear now
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-28-2021 03:42 AM
@takiadeen 's solution takes care of the AnyConnet module plus required OrgInfo.json.
The Umbrella root certificate can be pushed via GPO.
