I am working with some fairly locked down laptops and I have been tasked with getting anyconnect to run on those laptops to replace the current IPsec VPN solution. The main problem that I'm having is that the client profile will not download to the PC. I'm not sure what runs that goes out and checks for the latest updates from the ASA but i'm sure it probably doesn't have permissions to do so.
Right now the only way I can get a successful VPN tunnel established is to export the configuration from the ASA and import it on the users desktop. I would perfer that the user be capable of downloading the latest .xml client profile. The anyconnect service runs as "local system" and from what I can tell, "system" has full rights to all folders and files that it needs. But I'm missing something here.
I did notice an executable called vpndownloader.exe, can anyone verify what this .exe actually does?