AnyConnect - Untrusted Server Cert warning

[CyberSecLead]

Dear Members,

My scenario as follows.

++ I am trying to establish Anyconnect VPN for Domain joined computers and Workgroup computers (Non-Domain) via DAP.

++ We have certs installed on Domain PC's and it doesn't ask for Security Warning when trying to connect and its normal.

++ However, i do receive the "Security Warning: Untrusted Server Certificate" pop-up for Workgroup PC's and my question is, I need to ensure that it doesn't prompt with "Connect Anyway" option if there is no certificate installed. I need to enforce mandatory that none of the users without the cert should not be allowed to connect VPN. (Note: I have given the option for the users to install the cert manually on their non-domain pcs).

Awaiting advise from the experts.

Regards.

[Marius Gunnerud]

As far as i know this setting is user controllable, and can not be removed.  You can however set the default to be enabled but if the user knows what he/she is doing then they can change the setting.

The xml file that contains the setting is found here: %USERPROFILE%\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client