AnyConnect 3.1 Client - Tamper Proof Solution Needed

[Nilanjan Sengupta]

Hi Team,

Customer has a used case where they do not want the remote users of their organization ever get a chance to un-install / tamper with the AnyConnect Client, when Always on VPN feature is configured for them. The Laptops where Anyconnect Clients will be installed might have Admin Rights with users as well. While AD will be used to have limit on the security on the Software, customer also wants some tamper free solution for the client, so that users do not get a chance to tamper with the client installation; might be a Password to Protect from Uninstall, or some hidden registry settings etc etc.

Any pointers on this will be helpful.

Nilanjan

[Marius Gunnerud]

AFAIK there are no settings that can be made on the ASA, AnyConnect client, or Anyconnect Profile that will prevent a user from being able to delete it or tamper with it especially if the user has Admin rights to the PC.  You would need to look into perhaps setting up group policies in your Active Directory.

--
Please remember to rate and select a correct answer