Goal: Upgrade from Any connect client version to Cisco Secure Client 5

[Chinmaya-Naik]

Dear Community Expert,

We have Cisco Anyconnect client version (AnyConnect Secure Mobility Client  4.10.07062) and now we need to migrate to Cisco  SSE with Secure Client 5.1.12.146.

What the possible way for deployment?

Question 1 : From cisco SSE dashboard can I push the new client?

My Answer: No not possible from cloud , either mannualy or centrally such as using SCCM tool

Question 2: From Cisco SSE dashboard can I upgrade form existing anyconnect with latest Secure client?

My Answer : No . may be some dependencies 

Question 3: Export the Secure client file from SSE dashboard and then using SCCM tool can I upgrade form any connect to Secure clint or only upgrade possible from Secure client to latest secure client?

How can upgrade the  N-1 version which is Secure client 5.1.11.388 and I need auto-upgrade to the latest available version so whether its possible or not ?

Please team help me on this.

@Chinmaya-Naik

[Jonatan Jonasson]

Hi
This topic is also covered here: https://community.cisco.com/t5/vpn/anyconnect-4-10-upgrade-to-secure-client-5-x/td-p/4954638
I recommend you read over this thread.

Parts also covered in the deployment section in the admin guide: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-1/deploy-anyconnect.html

But the summary is: Yes you can export the secure client from SSE dashboard and use it to upgrade the 4.x installation.

And once you've upgraded everything to 5.x, you can use the cloud dashboard to keep everything in latest or recommended versions.

[Chinmaya-Naik]

@Jonatan Jonasson 

Thanks for the update this below is my understanding let me known is this correct or not?

1. Secure Client to Secure Client Upgrade (e.g., 5.1.11 → 5.1.12)

• If we already have Cisco Secure Client version 5.x installed and it's connected to the Cisco SASE dashboard, then:
• We can upgrade automatically to a newer 5.x version.
• No need to use SCCM, MDM, or manual installation.
• Just need to update the version in the deployment profile on the SASE dashboard. (Cloud Management Dashboard)
• The client will check in (every 2, 4, 6, or 8 hours) and auto-update itself.

2. AnyConnect to Secure Client Upgrade

• Cisco AnyConnect, we cannot upgrade automatically to Secure Client.
• We must:
• Manually install Secure Client
• Or use tools like SCCM or MDM to push the Secure Client installer to devices
• Because Secure Client is a new product,  — But it replaces AnyConnect.

3. Once Secure Client is Installed and Managed by SASE

• After Secure Client is installed and connected to the Cisco SASE dashboard:
• All future updates (like 5.1.12 → 5.1.13) can be fully automated.
• We  just need to update the deployment profile in the dashboard.
• Clients will auto-update during their next check-in — no manual work needed.
•  

[Jonatan Jonasson]

Yes, this understanding is consistent with my experience.

The only thing I would add, because you mention updating the deployment profile to upgrade the client.
Depending on your environment, you can of course specify a certain version, but you can also select "Latest" or "Recommended" and clients will start to upgrade once Cisco either publishes a new version or changes what matches to "Recommended".