Custom Profile Settings -Block connections to untrusted servers

[cnlee]

Does anyone know where AnyConnect stores the value to turn off and on for the setting Block connections to untrusted servers for a profile/XML/registry setting?

We are trying to deploy a custom profile with new installations with this option turned off.

We were not able to locate the setting using version 4.5 of the Profile Editor software

[hslai · Accepted solution]

I believe this a preference per user and the users have the option to tick/un-tick the box.

On a Windows-10-enterprise client, I found AC 4.5 writing it to "%LOCALAPPDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\ISEPreferences"

On a macOS High Sierra client, ${HOME}/.anyconnect_ise

<?xml version="1.0" ?>
<ISEPreferences>
    <BlockUntrustedCertificates>false</BlockUntrustedCertificates>
</ISEPreferences>

[Victor_Kleist]

Works perfectly in Windows 10 but i'm seems this folder doesn't exist in MacOS Catalina/Big Sur. Does it has changed it's location?

[Dahfa17]

Can help me in linux terminal about this  ?

[cnlee]

thank you hslai!  that works for us. 

[Garry Cross]

Using a 4.9.06037 client the answer to this question is wrong.

%LOCALAPPDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\preferences.xml

The specific section int xml file is.

<ControllablePreferences>
<BlockUntrustedServers>false</BlockUntrustedServers>

</ControllablePreferences>

[jgustafzon]

Hi,

Where is the option in profile editor for this checkbox? (Using ASDM or Anyconnect Profile Editor) There seems to be no way to activate this checkbox from the editor. Neither in Preferences part 1 or part 2.