how to disable Anyconnect Auto start in Windows

[hashimwajid1]

Dear 

we are facing issue regarding Any connect Client auto pop up whenever user login to PC. we know there is solution in windows to disable in startup but customer want this to disable Any connect Auto Start/ pop up  in ASA Firewall Any connect Configuration. 

1- is there any way we can disable auto start on ASA Firewall/ASDM ? so Any connect Client should not pop up automatically.

2- we can see multiple connection profile in Any connect login drop down (is there any we can disable drop down option or only one profile should be visible under Any connect 

3- Any connect should Detect Trusted and Understated Network 

Thanks in Advance 

[balaji.bandi · Accepted solution]

Look at the profile editor settings :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/anyconnect-profile-editor.html

[hashimwajid1]

Thanks for your Post

i found trusted and Understated for this solution. 

can you help me how to disable this Automatic Selection in Anyconnect as i am not able to type any other IP. is there any option in ASDM 

can you  

[hashimwajid1]

Thanks for your Post

i found trusted and Understated for this solution. 

can you help me how to disable this Automatic Selection in Anyconnect as i am not able to type any other IP. is there any option in ASDM 

can you  

[balaji.bandi]

you need to change this file for your selection.

C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile\AnyConnectProfile.xml

[hashimwajid1]

Thanks Balaji

Is there any way we can do this on ASDM or firewall instead of doing on client pc. Actually customer dont want to do anything on pc.

Thanks 

[balaji.bandi]

conf t

anyconnect profiles PROFILE-NAME disk0:/PROFILE.xml   <---new profile 

Look at the below thread to understand how the profile push works.

https://community.cisco.com/t5/vpn-and-anyconnect/using-vpn-to-push-anyconnect-client-upgrade/td-p/2041165

[stsargen · Accepted solution]

The Automatic Selection option is appearing because you have Optimal Gateway Selection enabled in your VPN profile.  If you disable this option you will be allowed to type in the ASA headend address.

[NetworkUser98215]

The above answers do not solve the original question, which was posted as "how to disable Anyconnect autostart in Windows".
There is another thread on this, search AnyConnect 3.1.01 - Disable the client on startup, which has seen over 50k views!
Definitely not solved. The client auto-starts in Windows 11 and does not give the user an option to easily remove it. MSconfig is not a valid answer. Neither are hacks. Cisco needs to include an easy way to remove the VPN client from the autostart.