Firepower 2110 will not distrubute Anyconnect client profile before user connects

[steiostb1]

We have Firepower 2110 running 6.7 i HA managed by FMC. Anyconnect client profile have been added to the current group policy, but new users who have not installed anyconnect before will not get the profile downloaded before after they have been connected to the FTD. Therefor every new user have to manually write in correct server address and connect, then the FTD uploads the correct profile under C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client. Before they connect there is no Profile folder here. 

The FTD should have uploaded the profile before the users connected? It there a setting I have missed?

Regards

[Rob Ingram]

@steiostb1 

The user either needs to connect to the VPN to download the connection profile or you will need to pre-deploy the profile using you network management software i.e. SCCM.

HTH

[steiostb1]

So this is correct behavior for the FTD? I thought the Anyconnect profile would be distributed while the client downloaded the Anyconnect application from the FTD. Is it only on ASA it works like this?

Thank you for the response.

[Rob Ingram · Accepted solution]

That's the correct behaviour with FTD, and that's the same with the ASA. If the client logins to the Web portal page, it just downloads the anyconnect image - not the anyconnect profile. The user would need to at least connect to the VPN in order to download the anyconnect profile.