FTD AnyConnect Client Deployment

[gamoore]

Hi,

I'm configuring an FTD/FMC for AnyConnect VPN access. The customer does not want to automatically push the client image from FTD, but wants to manually install the client. Is there a way to turn the deployment feature off with FTD/FMC? I tried just deleting the images from FTD/FMC but then the AnyConnect connection fails.

Thanks,

[Marvin Rhoads · Accepted solution]

No, you cannot disable the deployment feature.

It will always check the client and either prompt them to download (if no AnyConnect Secure Mobility Client is installed) or upgrade (if an older version is detected).

[gamoore]

Thanks Marvin!

Does it authenticate a user before it does the image checks.

[Marvin Rhoads]

You're welcome. 

Yes - image and profile checks happen immediately following successful user authentication.