Cisco anyconnect XML profile on an M1 Macbook

[vincentbas]

Hi all,

I just installed Cisco anyconnect on my brand new Macbook pro. In order to be able to work remotely I need to use an XML profile that is provided by my company. Unfortunately the dropdown in the client does not show the XML profile that I added to the following path as instructed here:

path: opt/cisco/anyconnect/profile

related post: https://community.cisco.com/t5/vpn/how-to-install-xml-profiles-for-anyconnect-for-mac/td-p/2349880

Can someone please tell me what I'm missing? Below you can find a screenshot of the empty dropdown as described earlier:

Kind regards and thanks in advance!

Vincent

[balaji.bandi]

Can you check the files :

ls /opt/cisco/anyconnect/profile  (make sure check the XML content also.

Other side worth note of below :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/upgrade/AnyConnect_macOS_BigSur_Advisory.html

[vincentbas]

Hi BB,

First of all thanks for trying to help me, I appreciate that! After executing /opt/cisco/anyconnect/profile in the terminal I can confirm that I see the profile I added, including valid xml content. I've read the side note that you added, but that does not seem to help me either. My AnyConnect version is 4.10.05111, which is later than the minimum required version, and the client extension has approval. 

[balaji.bandi]

if any connect client is already open, when you added XML it may not take effect, so  close any connect client and re-open to take effect of profile XML file (restart also should work)

[vincentbas]

I’ve already tried this, but unfortunately that does not change anything for me. The dropdown is still empty.

[balaji.bandi]

Can you post the content of the profile -(if you like to mask the domain name)

Below below information as I asked before :

ls /opt/cisco/anyconnect/profile

more /opt/cisco/anyconnect/profile/An.......xml

[MHM Cisco World]

do you config group-alias ?

[vincentbas]

Is it supposed to be configured inside the XML file or how do I do that?

[MHM Cisco World]

as @balaji.bandi mention can we see profile 

[vincentbas]

Hi all,

Unfortunately, I don't think my company would appreciate it if I shared their profile here (even masked). It does look similar to the 'default client profile' from this article:

https://community.cisco.com/legacyfs/online/legacy/5/2/9/74925-ac03features.pdf

[MHM Cisco World]

Dont worry, i will send you example profile and how you check yours 

[vincentbas]

---

@MHM Cisco World wrote:

Dont worry, i will send you example profile and how you check yours 

---

That would be awesome, thanks in advance!

[balaji.bandi]

If this is corporate-provided Laptop, why not talk to the network/security administrator of your company to assist you to save all people time?

high level profile look as below :

<BackupServerList>
<HostAddress>site1.mydomain.com</HostAddress>
<HostAddress>site2.mydomain.com</HostAddress>
</BackupServerList>
<EnableAutomaticServerSelection UserControllable="true">false
<AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>
<AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>
</EnableAutomaticServerSelection>
<RetainVpnOnLogoff>false
</RetainVpnOnLogoff>
<AllowManualHostInput>true</AllowManualHostInput>
</ClientInitialization>
<ServerList>
<HostEntry>
<HostName>mydomain.com</HostName>
<HostAddress>mydomain.com</HostAddress>
</HostEntry>
</ServerList>

[vincentbas]

To be clear: just the xml is provided by my company. I’ll soon try to make a basic profile myself and see if that will show up in the dropdown.

[vincentbas]

Even with the following profile nothing shows up in the dropdown (image because otherwise I can't post):