Disable Cisco AnyConnect Network Access Manager Filter Driver

[Paul Sell]

Hopefully this is the right community to post this in.

I was wondering if it is possible to script disabling the "Cisco AnyConnect Network Access Manager Filter Driver" for a LAN connection?

By diffing the registry before and after this is manually unchecked through Control Panel -> Network and Internet -> Network Connections -> Local Area Connection, I came up with:

:: remove the Cisco AnyConnect Network Access Manager Filter Driver
:: from the filter list for the LAN adapter
reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\0007\Linkage /v FilterList /f

:: import the Cisco AnyConnect Network Access Manager Filter Driver
:: to the filter list excluding the LAN adapter
reg import linkage-no-lan.reg

:: remove the Cisco AnyConnect Network Access Manager Filter Driver
:: from the network config for the LAN adapter
reg delete HKLM\SYSTEM\CurrentControlSet\Control\Network /v Config /f

:: import the Cisco AnyConnect Network Access Manager Filter Driver
:: to the network config excluding the LAN adapter
reg import network-no-lan.reg

:: Remove the LAN adapter from the list of adapters where the
:: Cisco AnyConnect Network Access Manager Filter Driver is used
reg delete HKLM\SYSTEM\CurrentControlSet\services\acnamfd\Parameters\Adapters\{77197E43-5875-469F-A3A5-A97F63A32E0A} /f

This unchecks "Cisco AnyConnect Network Access Manager Filter Driver" for the LAN connection, but it does not automatically switch to my Wireless connection.  However, if I manually go in an uncheck the "Cisco AnyConnect Network Access Manager Filter Driver", the connection automatically switches over to my wireless.

The end result I am looking for is to be able to use a Wireless connection and at the same time be able to use the LAN connection when I have to directly connect to certain equipment for work to upload firmware files.

Any thoughts would be greatly appreciated.

Thanks.

[Marvin Rhoads]

AnyConnect NAM is designed to NOT allow you to use two different networks simultaneously as one of its primary purposes is to enforce the security profile of the client's network connectivity.

You might be able to hack around it but it's working against the product's purpose and design to do so.

[Paul Sell]

Marvin, sorry for the delayed reponse.  Thanks for getting back to me so quick.

Since I only need this in certain instanaces and I can make it work by unchecking the "Cisco AnyConnect Network Access Manager Filter Driver", I will leave it at that.

Again, thanks for the help.

[Marvin Rhoads]

You're welcome.

Feel free to rate if my answer helped at all. :)

[stsargen · Accepted solution]

Hi Paul,

Instead of hacking the registry you could use nvspbind.exe to accomplish this task.  You can download the tool here.  It will also cause NAM to switch to automatically switch interfaces.

https://gallery.technet.microsoft.com/Hyper-V-Network-VSP-Bind-cf937850

disable:  nvspbind.exe /d "Wireless Network Connection" csco_acnamfd

enable:   nvspbind.exe /e "Wireless Network Connection" csco_acnamfd

Thanks.

[Paul Sell]

stsargen,

Sorry for the really late reply on this.  This is great and exactly what I need.

-paul

[matthew.otto]

Is there a way to do this in windows 10?

I have a need to disable the anyconnect driver while hooked to test equipment with the ethernet adapter while maintaining a Wi-Fi connection. We are switching IP address often and I would like to do this in a batch file.

Thanks.