Anyconnect Security Advisory

[DEENA VERAPPAN]

Hi All, I'm about to load the new Anyconnect client on our firepower appliance and noticed the previous version we currently push out to VPN users is 

The new Anyconnect is a windows installer ( .msi ) file anyconnect-win-4.10.07061-core-vpn-predeploy-k9.msi instead of a package ( .pkg ). Is there any stumbling blocks or special configuration to be aware when loading it on the firepower appliance?

Trying to be diligent and not break VPN.

Any thoughts and ideas are appreciated.

Thanks

Deena

[Rob Ingram]

@DEENA VERAPPAN to deploy the AnyConnect/Secure Client package from the FTD appliance you must upload the headend /webdeploy package, i.e. - "anyconnect-win-4.10.07061-webdeploy-k9.pkg"

The package you reference - "anyconnect-win-4.10.07061-core-vpn-predeploy-k9.msi" is the predeployment package, which is used to manually install anyconnect from the windows computer directly. You won't be able to upload this package to the FTD appliance.

You may wish to consider using the Secure Client 5.x version, it's the new name for anyconnect. https://software.cisco.com/download/home/286330811/type/282364313/release/5.0.02075