Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)

Anyconnect update

Is there any way to have a client by group-policy update the anyconnect client from the ASA and leave the others alone?

Here's the situation. I have a user that wants to stay on 2.3, but I have 2.4 that I want other clients to get. I set up the order for which they're checked, but that only checks the version. If there isn't any version on the workstation, it downloads the 1st line which is 2.3.

svc image disk0:/anyconnect-win-2.3.0254-k9.pkg 1
svc image disk0:/anyconnect-win-2.4.1012-k9.pkg 2


I had thought about reversing these, but that's just going to update the 2.3 client to 2.4. Is it possible to do what I want?

Thanks!

John

HTH, John *** Please rate all useful posts ***
1 REPLY
New Member

Re: Anyconnect update

Hi,

You may try tis by the following method.

Try downloading profile editor and create a profile which has automatic update disabled. Keep both anyconnect images in ASA flash and give preference 1 to 2.4.

Now upload the profile in a group policy and get the users authenticated with only that group policy to which profile is added.

Other users who are not part of that group policy will get upgraded to 2.4 and the users in the group-policy with profile will not get upgraded.

Let me know for further queries.

Regards,

Nitin Agarwal

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect25/administration/guide/ac03features.html#wp1158027

800
Views
0
Helpful
1
Replies
CreatePlease to create content