Disable Anyconnect client download / url login disable

[davidsonyo]

Hello,

Is there a way to disable the Anyconnect client download when you browse to the anyconnect url? Or just make the url login not accessible
while the users still can connect with their installed anyconnect client to the corporate network.

Thanks!

Dave.

[Marvin Rhoads · Accepted solution]

You can't disable the download directly. This had been discussed several times here in CSC with at least one person having confirmed this with a TAC case. Link.

One hack is that if your Anyconnect image is an older one, the users will never be prompted to update it.

Re URLs, your can disable the aliases that populate the dropdown list on the web portal but as long as your have the SSL VPN service active, the ASA's outside interface will serve up the login page for at least the default connection profile.

What's your rationale for wanting to disable it in the first place? Perhaps there's an alternate method to achieve what you want.

[davidsonyo]

Thanks for your quick response!

Our customer asked us to disable the download / make not accessible the url of anyconect for download, so their end users only can use the pre-installed version anyconnect - which is provided by them.

Dave.

[Marvin Rhoads]

Well it definitely cannot be disabled on the ASA per se while leaving a functioning remote access SSL VPN.

Thinking more on my earlier idea - you could put only an older 32-bit Linux Anyconnect image on the ASA. That way no Windows or OS X images of any kind would be available for download yet you could still have a functioning SSL VPN.

If the end user was enterprising enough to be running Linux, they could probably hack their way around it even if there were no image on the ASA at all. :)