Cisco AnyConnect as supplicant

[Saeed Abd Elhalim Hamada]

Dear i need to know how i use anyconnect  Secure Mobility Client insted of native supplicant , i just install it and i need to know how to make it`s working sso , if the users open the computer anyconnect take the user and password and send them to the ise for auth , cuz now when the users open the pc he need to open any connect and write the username and password 

i need to know if there any artcl or something to decripe the install and how to push the anyconnect to all domain device and the best practices 

i was working with windows native supplicant but i just move to anyconnect to solve the problem with RDP ..

thanks 

[Rob Ingram]

@Saeed Abd Elhalim Hamada I assume you are wanting to use this for 802.1X authentication? You will need to download the Secure Client Profile Editor and use the Network Access Manager profile editor to create the profile, which defines the settings and protocols to use.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-1/configure_nam.html#ID-1424-00000006

[Saeed Abd Elhalim Hamada]

Hi i  just need to know how to open the network access manager to create profile , i didnt found it , i install this feature when i install the anyconnect , put i cant open it`s i see alot of vidoes pepole search for it on windows bar and open it 

[Rob Ingram · Accepted solution]

@Saeed Abd Elhalim Hamada if it is installed correctly it will be under the Cisco folder in the startmenu "Network Access Manager Profiler Editor" e.g.

The folder location is - "C:\Program Files (x86)\Cisco\Cisco Secure Client Profile Editor\NAM Standalone.exe" - if you are using the older AnyConnect version, the folder name structure might be different, do a search for NAM Standalone.exe.

[Saeed Abd Elhalim Hamada]

Bengooo found it thanks , another question as i see the NAM install separately on each machine the question is do i need to configure proflie for each machnine or is there anyway to configure a centralized profile and push it

[Rob Ingram]

@Saeed Abd Elhalim Hamada you configure the profile once and then distribute, you can push this out centrally via Windows AD Group Policies (GPO) or management software such as SCCM.