Anyconnect Secure Mobility Client 3 + SBL

[Patrick Tran]

Hello,

I configured VPN SSL on ASA 5540. The version of the client is Anyconnect Secure Mobility Client v3.0.0629

Connecting during sessions works great.

I pushed Profile to clients with Start Before Logon Option.

I want to try it on Windows XP and 7 clients.

For Windows XP

In Cisco Download Software, I didn't find a version of SBL in this version:

http://www.cisco.com/cisco/software/release.html?mdfid=283000185&flowid=17001&softwareid=282364313&release=3.0.0629&rellifecycle=&relind=AVAILABLE&reltype=latest

The previous version I found "anyconnect-gina-win-2.5.2019-pre-deploy-k9.msi" doesn't work with my client.

Does a msi of SBL exist for this client?

For Windows 7

According to http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect22/administration/guide/22admin4.html#wp1008975

I have to load an add-on.

How can I do this? I don't find this add on.

Thanks for your answers,

Patrick

[Marcin Latosiewicz · Accepted solution]

Patrick,

Did you get an answer on this one?

I have not tried this but if I read the docs correctly PLAP should be included in installation package.

BTW, the SBL package should be part of anyconnect package (just change the "pkg" extension to "zip" and have a look inside).

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac03vpn.html#wp1056595

Marcin

[Patrick Tran]

Hi Marcin,

SBL installation file is in the anyconnect package as you say.

It works on WinXP and supports my certificate authentication!

I will try on Win7 and combined with Windows Smart Card Logon!

Thanks!

Patrick

[Marcin Latosiewicz]

Cool stuff Patrick,

50% of success. Now two keywords that are driving people mad (in combination with anyconnect) "Windows 7" and "Smart card", add 64bits version and I'm getting shivers

Marcin

[Patrick Tran]

SBL works great in Windows 7 with Smart Card authentication

I have not tested on x64 platforms

Last thing: enable SSO with Anyconnect Smart Card authentication and Windows Smart Card Logon!

[Alvaro Velasquez]

After I click "Connect" authentication times out. I installed the ASA and the CAC certs in the local machine store. What could be the issue?