Blocking iPads via AnyConnect on the ASAs?

[sjbdallas]

Has anyone succesfully blocked iPads from using AnyConnect to VPN in?  I can see how you can block the preinstalled IPSEC client via the IPSEC client rules, but I don't see how I can block an iPad or iPhone if they've installed the AnyConnect Mobile client.

[Ken Stieers · Accepted solution]

The release notes for Anyconnect 2.4 for iPad have a section on how to do it. You have to use a Dynamic Access Policy to test for the OS.

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect24/release/notes/rn-ac2.4-apl4.2.html#wp1095241

[sjbdallas]

That does help but the solution requires the Premium license and CSD.  Any ideas if you only have the Essentials license and no CSD?

[Ken Stieers]

I think the only other option is not having a Mobile License installed...