Pre Deployed Profile Not Working

[rjadhav163]

Hi

we are using RA VPN with AnyConnect. We are pre deploying Core Client and XML Client Profile to the employees via Microsoft SCCM. All are using Windows 10 laptops without admin rights.

We are first installing the Core Client and then putting XML Client Profile in the correct folder. 

However, when the user opens AnyConnect for the first time he does not see the profile. He has to manually type in the ASA FQDN and connect for the first time. Then from the 2nd time onwards everything works as expected.

No idea how to troubleshoot this issue. Any suggestions?

T&R,

R

[Marvin Rhoads]

Just to confirm - you're putting the VPN profile into

"C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile"?

That's distinct from the client profile which goes into

"C:\Users\%username%\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client"

[Rahul Govindan]

Marvin is correct. It could be that the profile is being downloaded to the right location from the ASA after a successful attempt.

Another possibility is that the Anyconnect client is already open in the Taskbar when the profile is downloaded. Once the profile is downloaded, the client has to be quit from the taskbar and started again for the profile to take effect.

[rjadhav163]

@Marvin,

yes we are putting VPN Profile into

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

@Rahul

The profile is installed immediately after the core client is installed. This all is done with SCCM. So the AnyConnect Client is not open when the profile is installed.

[Rahul Govindan]

A few things to check:

1)  Is the profile present in the location before the Anyconnect client is started.

2) Is there a difference in the profile before the first connection and after connection - say like "Server List"?

3) Run a DART after the first connection to see if it picks the profile settings from the profile.