How to change the Any Connect browser

[BudgieY]

Hi, I am using Any Connect to access my office.
I found that the browser used to log in the server through Any Connect was Internet Explorer when I had a trouble and I had to delete the cache to stop the browser from automatically filling in my e-mail address.
As you know, Internet Explorer is infamous for having had serious vulnerabilities and no longer recommended even by Microsoft.
Moreover, the support of Internet Explorer ends on June 16, 2022.
Therefore I would like to make Any Connect use one of the other browsers such as Google Chrome and Microsoft Edge.
How can I change the browser called by Any Connect?
Thank you in advance.

[Mike.Cifelli]

AFAIK this is not related to AnyConnect.  I think this has something to do with your local client settings.  Try verifying/changing your default browser on your workstation.  Here is a link for Win10 clients: Change your default browser in Windows 10 (microsoft.com)

[stsargen]

Mike is correct.  AnyConnect will launch the systems default browser on all operating systems.

[BudgieY]

Hmm, I see...
The default browser is set to Google Chrome, but nevertheless AnyConnect would not use it...

Should I change some detailed settings, such as browser depending on the protocols?

[vgoverth01]

I have the same issue, even the default browser is chrome ,it wouldn't be used

[guille81]

Hi! did anyone manage to get anyconnect using the default browser instead of the embebed one?

[KvotheTheRaven]

I didn't. Did you ever manage?

[Marvin Rhoads]

This is an old thread you are updating. But if you are asking about SAML authentication which pops up a mini browser, AnyConnect / (now Secure Client ) on Windows uses the built-in WebView2 runtime browser by default.

You can change that as follows in FMC:

Choose your SAML Login Experience to configure a browser for SAML web authentication:

• VPN client embedded browser—Choose this option to use the browser embedded with the VPN client for web authentication. The authentication applies to the VPN connection only.

• Default OS Browser—Choose this option to configure the operating system that default or native browser that supports WebAuthN (FIDO2 standard for web authentication). This option enables single sign-on(SSO) support for web authentication methods such as biometric authentication.

Reference: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/760/management-center-device-config-76/vpn-remote-access.html#task_ngy_zcd_5gb

[KvotheTheRaven]

Thanks! I do think it concerns the SAML authentication. Is this a setting the vpn user can change or the administrator has to change. Also I am looking for a solution for Linux (https://community.cisco.com/t5/vpn/use-system-default-browser-on-linux-ubuntu-24-04/td-p/5205229).  Would you know what a similar procedure would be there? Is the change in setting that you are making changing some profile .xml file such as AnyConnectLocalPolicy.xml? (If so perhaps I can change it by hand.)

[jugoodwin]

I would also like to see this implemented.  Our staff uses MFA to authenticate and we use browser saved passwords for literally everything else but when it comes to using AnyConnect, we have to type in our full password (15 character minimum) to login.  Allowing us to use our default browser would fix this.