AMPEnalber Waiting for Configuration

[Daryl Clark]

We are attempting to deploy AMP via the AMP Enabler module for AnyConnect. We are using the latest version (4.4.03034) of both the software and profile editor. The AMP Enabler XML profile has been created and copied to the C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\AMPEnabler directory. However, the AMP Enabler module in AnyConnect says "Waiting for configuration..." Any idea why this is not working?

[Marvin Rhoads]

Ah OK thanks for the update. I didn't think to ask that. I almost never log into an ASA with less than level 15 privilege so it's not something I generally consider.

I wouldn't have thought you could upgrade the ASDM with only level 2 privilege.

[ositechintl]

Hi Marvin,

I upgraded the ASDM via the CLI, so that has the privilege level 15.

Also can you please refer the https://supportforums.cisco.com/t5/advanced-malware-protection-amp/amp-for-endpoints-installation-failed-due-to-the-following/m-p/3207985#M536

which is i am facing another issue with the below errors, if possible share your recommendation for the possible failure of this issue.

AMP for endpoints installation failed due to the following reason - The installed process timed out.

The FA installer failed as it took too long to respond

InstallFireAMPConnector failed with the following error - The installer process timed out.

Thanks,

Ramesh

[ricardo_puga]

Hello, Marvin 

I need install AMP with Anyconnect, but no find an example the xml profile for AMP, You know where find it ?

Regards

[Marvin Rhoads]

The XML profile for the AMP module is very short as it just directs the client to the portal (or a web server you host internally ) with the installer package. You can create it using the Cisco AnyConnect Profile Editor, using the installer location (URL) from your AMP console.

It looks like this:

<?xml version="1.0" encoding="UTF-8"?>
<FAProfile xsi:noNamespaceSchemaLocation="FAProfile.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<FAConfiguration>
	<Install>
	<WindowsConnectorLocation>https://console.amp.cisco.com/install_packages/<redacted>/download?product=WindowsProduct</WindowsConnectorLocation>
	<MacConnectorLocation></MacConnectorLocation>
	<StartMenu>true</StartMenu>
	<DesktopIcon>false</DesktopIcon>
	<ContextIcon>true</ContextIcon>
	</Install>
	</FAConfiguration>
</FAProfile>

[ricardo_puga]

Thanks Marvin, You know where can get the Cisco AnyConnect Profile Editor ?

regards

[Marvin Rhoads]

It's on the AnyConnect downloads page here:

https://software.cisco.com/download/home/286281283/type/282364313/release/4.8.03052

Look for filename:

tools-anyconnect-win-4.8.03052-profileeditor-k9.msi

(name will vary over time with the current release number)