Can the Cisco Anyconnect Client be customized to remove the option Allow local (LAN) access when using VPN (if configured)

[Grosser Roger]

I would like the ability to remove or grey out options in the Anyconnect preference tab, specifically, "Allow local (LAN) access when using VPN (if configured)".

Is customizing the Anyconnect client in this way possible?

Thank you.

[Mike.Cifelli · Accepted solution]

You can accomplish this via the AnyConnect Profile Editor.  See here for full detail as there are a few things that are required: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/anyconnect-profile-editor.html#ID-1430-00000061

In the XML profile you can then reference the following XML tag:

<LocalLanAccess UserControllable="false">false</LocalLanAccess>

HTH!

[Grosser Roger · Accepted solution]

Thank you.  I will investigate this.