Install Cisco Secure Endpoint without VPN disconnect?

[bickler]

In the past I've used the separate installers for AMP, Anyconnect VPN, Umbrella, etc. Now that we have the new unified Cisco Secure Endpoint installer, I can update user's machines tp the new versions via SCCM and the setup.exe file with the --quiet command line switch. This properly removes the old versions and installs the new versions. "Cisco Anyconnect VPN" is removed and "Cisco Secure Client AnyConnect VPN" replaces it. 

The issue I have, is this (understandably) disconnects the active VPN connection for the user, which could be disruptive. Is there a command line switch or other method to use in this case to tell the installer to wait until VPN is disconnected to proceed, or to just not run at all if VPN is active?

[giovanni.augusto]

I didn't try it but you may want to look at "SecureX Cloud Management Deployment"

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-0/deploy-anyconnect.html#ID-1425-00000005

https://docs.securex.security.cisco.com/Secure-Client-Help/Content/sc-deployment-management.html

[bickler]

Those do not help much. The 2nd link talks about the installer I am using. When I deploy the SecureX client with the --quiet command line switch, it does successfully install everything, but during that process it will disconnect any currently active VPN connection since it's basically uninstalling the old service before installing the newly named updated version.