Cisco ASA- Updated Firmware and AnyConnect Packages

[LovejitSingh130013]

Hello Experts @balaji.bandi  @Rob Ingram  @Richard Burts @Marius Gunnerud   @Leo Laohoo 

I updated Cisco ASA Fimware and VPN packages.  The VPN Packages updated from 4.8 to 4.10.

Is there anyway Cisco ASA push update of AnyConnect client on all the machines which are connecting to ASA?

Thanks

[Rob Ingram]

@LovejitSingh130013 

If you've uploaded the AnyConnect client to the ASA, the clients will automatically upgrade AnyConnect next time they connect to the VPN.

If you want to push out the upgrade you'd need to use your network management tools, such as SCCM to pre-deploy. Alternatively if you have Umbrella, you can configure it to auto-upgrade the AnyConnect client without having to connect to the VPN.

HTH

[LovejitSingh130013]

Hello @Rob Ingram   

Do I need to add any config for clients automatically updating AnyConnect or it will auto sense once we updated packages on ASA?

Thanks

[balaji.bandi · Accepted solution]

Once the new Anyconnect Package available in ASA, the client gets the update automatically.

[Rob Ingram · Accepted solution]

By default the clients will always try to upgrade the client upon connecting to the VPN. The except to this is if you configure the AnyConnectLocalPolicy to bypass the downloader. If you haven't done that, then the client will attempt an upgrade.

https://community.cisco.com/t5/security-documents/how-to-update-the-anyconnect-and-hostscan-images/ta-p/3157306

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-firewalls/1140-cisco-asa-firewall-anyconnect-secure-mobility-4-upgrade.html