Do you anybody know how to disable/turn off "Checking for product update" during _every_ connecting Cisco Anyconnect Secure Mobility Client (VPN) to remote sites?
I found it may by possible on the ASA side, but I need to disable it on the client (computer). I can see that checking is NOT during connecting to my company site, but when connecting to ANY OTHER site everytime is new version checked. It takes some time ... and I need to switch between VPN often.
Thank you for your help!
You should be able to do this in the AnyConnect local policy. Just add (or edit, if you already have a local policy file) the following to the local policy file:
<!--?xml version="1.0" encoding="UTF-8"?--> <anyconnectlocalpolicy acversion="2.4.140" xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemalocation="http://schemas.xmlsoap.org/encoding/ AnyConnectLocalPolicy.xsd"> <BypassDownloader>true</BypassDownloader> </AnyConnectLocalPolicy>
The local policy file can be found here:
Windows Vista/7/8: C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\AnyConnectLocalPolicy.xml
See the Enabling FIPS and Additional Security in the Local Policy section of the Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 3.1 for more details.
Hello there --
This may be a silly question but will updating the local policy keep the software from installing the Start before login module? I have a user that I removed and reinstalled the Cisco Anyconnect Secure Mobility Client and vpn did not encounter any issues until (it appears) that module was added.
Modify XML AnyConnect Client Profile as follows:
1. Navigate to:
Configuration --> Remote Access VPN --> Network (Client) Access --> AnyConnect Customization/Localization --> AnyConnect Client Profile -->
2.Select Profile Name
"Profile Name" --> VPN --> Preferences (Part 1)
3. Uncheck "Auto Update"