How to pre-choose (default) the tunnel-group for AnyConnect?

[HuntLee304798]

Hi Everyone,

I am new to Cisco AnyConnect VPN

There are 3 tunnel-groups i have setup as attached.  Because the AnyConnect VPN is for mobile users, and i want the end-user experience to be as seamless as possible.  Is there a way that i can "pre-select/choose" the "COS" for the mobile users? (as i do not want any user intervention when they use AnyConnect on their mobile)

Attached is the AnyConnect login screenshot and my ASA config.

Would appreciated someone could shed some light onto this.

PS:  I am using local database for authentication, but the certificate method will be used and the certificate does work (have tested it with mobile).

Cheers,

Lee

[balaji.bandi · Accepted solution]

Look at the section Any connect profile for Mobile. :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/anyconnect-profile-editor.html#reference_388C0A6199634CFBA774906DDF18E1A3

[HuntLee304798]

Spoiler

Hi there,

I look through the section but I must be very newbie.

Would you be able to pinpoint to me which attribute/setting do i need to "pre-choose" that setting (rather than letting user to choose from a list?)

Cheers,

Lee

[balaji.bandi]

Do you have any MDM in place to Manage these Mobile devive ?

what Mobile devive is this ? Apple or Android ?

[HuntLee304798]

Hi Balaji,

They are some IOS and some Android, so both.

They will be managed by Microsoft InTune, but Intune rely on Cisco AnyConnect for the VPN.

Even with InTune, I don't see inside InTune any options for pre-selecting which tunnel-group the mobile will be login with on VPN as this is an AnyConnect setting, isn't it?

Any help would be greatly appreciated.

Cheers,

Lee