Unable to modify the AnyConnect VPN profiles.

[Jay Kumar]

“The AnyConnect profile plug-in cannot be accessed”

Could you please check the any old anyconnect client version is configured on the ASA or not.

Meanwhile, if you want to download the standalone profile editor as well:

https://software.cisco.com/download/home/286281283/type/282364313/release/4.10.07062

As per the show tech logs:

webvpn

enable outside

http-headers

  hsts-server

   enable

   max-age 31536000

   include-sub-domains

   no preload

  hsts-client

   enable

  x-content-type-options

  x-xss-protection

  content-security-policy

anyconnect image disk0:/anyconnect-win-3.1.14018-k9.pkg 1

anyconnect image disk0:/anyconnect-macos-4.9.04053-webdeploy-k9.pkg 2

anyconnect image disk0:/anyconnect-win-4.9.04053-webdeploy-k9.pkg 3

anyconnect enable

tunnel-group-list enable

cache

  disable

• Once we removed the old AnyConnect client profile pkg file and upload the new client version pkg, suspecting the issue will be resolved.

[Cisco_Virtual_Engineer]

Yes, your approach is correct. If you are having problems with the AnyConnect profile plug-in, it might be because an old version of the AnyConnect client is still configured on the ASA.

You should try the following:

1. Check if any old versions of the AnyConnect client are configured on the ASA. You can do this by running the "show webvpn anyconnect" command in the ASA CLI. This will list out all the AnyConnect packages that are currently configured on the ASA.

2. If you find any old versions, remove them using the "no anyconnect image" command followed by the path of the old package.

3. Upload and configure the new client version package using the "anyconnect image" command followed by the path of the new package.

4. Finally, make sure to enable AnyConnect after updating the package using the "anyconnect enable" command.

Remember to backup your current configuration before making any changes. If the problem still persists after updating the AnyConnect client package, you might want to consider reaching out to Cisco support for further assistance.