Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Cisco AnyConnect Secure Mobility Client Modules, Minimum Release Requirements, License Requirements, and Supported Operating Systems

Objective

The Cisco AnyConnect Secure Mobility Client, also known as the Cisco AnyConnect VPN Client, is a software application for connecting to a Virtual Private Network (VPN) that works on various operating systems and hardware configurations. This software application makes it possible for remote resources of another network become accessible as if the user is directly connected to the network, but in a secure way. Cisco AnyConnect Secure Mobility Client provides an innovative new way to protect mobile users on computer-based or smart-phone platforms, providing a more seamless, always-protected experience for end users and comprehensive policy enforcement for an IT administrator.

One or more of the following AnyConnect licenses may be required for your deployment:

  • AnyConnect Plus — Supports basic AnyConnect features such as VPN functionality for PC and mobile platforms (AnyConnect and standards-based IPsec Internet Key Exchange version 2 (IKEv2) software clients), Federal Information Processing Standard (FIPS), basic endpoint context collection, 802.1x Windows supplicant, and web security Secure Sockets Layer (SSL) VPN. Plus licenses are most applicable to environments previously served by the AnyConnect Essentials license and users of Cisco Identity Services Engine (ISE) posture, Network Access Manager, or Web Security modules.
  • AnyConnect Apex — Supports all basic AnyConnect Plus features in addition to advanced features such as clientless VPN, VPN posture agent, unified posture agent, Next Generation Encryption or Suite B, Security Assertion Markup Language (SAML), all plus services and flex licenses. Apex licenses are most applicable to environments previously served by the AnyConnect Premium, Shared, Flex, and Advanced Endpoint Assessment licenses.
  • VPN Only (Perpetual) — Supports VPN functionality for PC and mobile platforms, clientless (browser-based) VPN termination on Adaptive Security Appliance (ASA), VPN-only compliance and posture agent in conjunction with ASA, FIPS compliance, and next-generation encryption (Suite B) with AnyConnect and third-party IKEv2 VPN clients. VPN only licenses are most applicable to environments wanting to use AnyConnect exclusively for remote access VPN services but with high or unpredictable total user counts. No other AnyConnect function or service (such as Web Security module, Cisco Umbrella Roaming, ISE Posture, Network Visibility module, or Network Access Manager) is available with this licensee.

The objective of this document is to show you the modules matrix of the Cisco AnyConnect Secure Mobility Client and the minimum release requirements, license requirements, and supported operating systems.

Software Version

  • 4.4

Mobility Modules

Hostscan and Posture Assessment

ISE Posture

Web Security

AMP Enabler

Network Visibility Module

Umbrella Roaming Security Module

Reporting and Troubleshooting Modules

Customer Experience Feedback

Diagnostic and Report Tool (DART)

Hostscan and Posture Assessment

Feature

Minimum ASA or ASDM Release

License Required

Windows

Mac

Linux

Endpoint Assessment

ASA 8.0 (4)

ASDM 6.3 (1)

Apex

yes

yes

yes

Endpoint Remediation

 

Apex

yes

yes

yes

Quarantine

 

Apex

yes

yes

yes

Quarantine status & terminate message

ASA 8.3 (1)

ASDM 6.3 (1)

Apex

yes

yes

yes

Hostscan Package Update

ASA 8.4 (1)

ASDM 6.4 (1)

Apex

yes

yes

yes

Host Emulation Detection

 

Apex

yes

no

no

OPSWAT v4

ASA 9.7 (1)

ASDM 7.7 (1)

Apex

yes

yes

yes

ISE Posture

Feature

Minimum AnyConnect Release

Minimum ASA orASDM Release

Minimum ISE Release

License Required

Windows

Mac

Linux

Change of Authorization (CoA)

4.0

ASA 9.2.1

ASDM 7.2.1

1.4

Plus

yes

yes

yes

ISE Posture Profile Editor

4.0

ASA 9.2.1

ASDM 7.2.1

n/a

Apex

yes

yes

yes

AC Identity Extensions (ACIDex)

4.0

n/a

1.4

Plus

yes

yes

yes

ISE Posture Module

4.0

n/a

1.4

Apex

yes

yes

no

Detection of USB mass storage devices (v4 only)

4.3

n/a

2.1

Apex

yes

no

no

OPSWAT v4

4.3

n/a

2.1

Apex

yes

yes

no

Stealth Agent for posture

4.4

n/a

2.2

Apex

yes

yes

no

Continuous endpoint monitoring

4.4

n/a

2.2

Apex

yes

yes

no

Next-generation provisioning and discovery

4.4

n/a

2.2

Apex

yes

yes

no

Application kill and uninstall capabilities

4.4

n/a

2.2

Apex

yes

yes

no

Web Security

Feature

Minimum ASA orASDM Release

License Required

Windows

Mac

Linux

Core

ASA 8.4 (1)

ASDM 6.4 (1)

Plus

Yes

Yes

No

Cloud-Hosted Configuration

Secure Trusted Network Detection

ASA 8.4 (1)

ASDM 7.0

Dynamic Configuration Elements

Fail Close / Fail Open Policy

AMP Enabler

Feature

Minimum ASA or ASDM Release

Minimum ISE Release

License Required

Windows

Mac

Linux

AMP enabler

ASDM 7.4.2

ASA 9.4.1

ISE 1.4

Plus

Yes

Yes

No

Network Visibility Module

Feature

Minimum ASA orASDM Release

Minimum ISE Release

License Required

Windows

Mac

Linux

Network Visibility Module

ASDM 7.5.1

ASA 9.5.1

no ISE dependency

Apex

Yes

Yes

No

Adjustment to the rate at which data is sent

ASDM 7.5.1

ASA 9.5.1

no ISE dependency

Apex

Yes

Yes

No

Customization of NVM timer

ASDM 7.5.1

ASA 9.5.1

no ISE dependency

Apex

Yes

Yes

No

Broadcast and multicast option for data collection

ASDM 7.5.1

ASA 9.5.1

no ISE dependency

Apex

Yes

Yes

No

Creation of anonymization profiles

ASDM 7.5.1

ASA 9.5.1

no ISE dependency

Apex

Yes

Yes

No

Broader data collection and anonymization with hashing

ASDM 7.7.1

ASA 9.7.1

no ISE dependency

Apex

Yes

Yes

No

Support for Java as a container

ASDM 7.7.1

ASA 9.7.1

no ISE dependency

Apex

Yes

Yes

No

Configuration of cache to customize

ASDM 7.7.1

ASA 9.7.1

no ISE dependency

Apex

Yes

Yes

No

Periodic flow reporting

ASDM 7.7.1

ASA 9.7.1

no ISE dependency

Apex

Yes

Yes

No

Umbrella Roaming Security Module

Feature

Minimum ASA orASDM Release

Minimum ISE Release

License Required

Windows

Mac

Linux

Umbrella Roaming Security Module

ASDM 7.6.2

ASA 9.4.1

ISE 1.3

Either Plus or Apex

Umbrella licensing is mandatory

Yes

Yes

No

Reporting and Troubleshooting Modules

Customer Experience Feedback

Feature

Minimum ASA orASDM Release

License Required

Windows

Mac

Linux

Customer Experience Feedback

ASA 8.4 (1)

ASDM 7.0

Plus

yes

yes

no

Diagnostic and Report Tool (DART)

Log Type

Minimum ASA orASDM Release

License Required

Windows

Mac

Linux

VPN

ASA 8.0 (4)

ASDM 6.3 (1)

Plus

Apex

yes

yes

yes

Network Access Manager

ASA 8.4 (1)

ASDM 6.4 (1)

 

yes

no

no

Posture Assessment

   

yes

yes

yes

Web Security

   

yes

yes

no

 

48
Views
0
Helpful
0
Comments