Which Anyconnect Package do I use to install on Surface Pro 8.1. I don't have the time right now to migrate my ASA's to 9.x and am stuck on 8.2 right now. If I can't use a manual install method for the Anyconnect client, can I load the install package on a 5520 with 8.2?
The only software I see on the site for a "pre-deploy" is for an iso. All of the clients on our ASA are pkg.
Also, can I push the package to the ASA during production without interfering with those who are using the ACL's and Static Maps? Also, will all of the existing VPN users need to uninstall and upgrade their AnyConnect Clients to continue to work?
That is why I would like to start with a stand alone client if it's possible. If it is, which install pkg goes on the tablet?
The AnyConnect pre-deploy packages have to be either installed manually or distributed via a software management tool (like SCCM, group policy object, LANdesk, etc.). You are correct they are an ISO file which, when unpacked, contains the msi and exe files for the various AnyConnect components (including the VPN client).
The pre-deploy builds cannot be deployed from the ASA - otherwise they wouldn't be "pre". :)
On the ASA, the current "non-pre-deploy" package for Windows clients would be "anyconnect-win-3.1.05160-k9.pkg", found here.
Yes, you can unpack the ISO and install - I use 7-zip (free) and it works very well for unpacking ISO files.
If you deploy the pkg file onto your ASA (without some manipulation of the client checking logic) it would have the effect of downloading the new software to your older clients as they establish new connections.
I'm not sure what you mean by "Surface Pro with an Android OS". The Microsoft Surface Pro runs Windows 8, so the AnyConnect Secure Mobility Client (VPN Module) Windows distribution is the correct Cisco product for SSL VPN (full tunnel client-based) or IPsec (IKEv2) VPN.
The legacy Cisco VPN Client software (for IPsec IKEv1 VPN) is end of sales and end of engineering and does not support Windows 8 clients. People trying to make it work have reported mixed results and in any event it is not supported.
There is a Cisco AnyConnect client for Android OS. It's distributed via the Google Play Android marketplace here. It, along with the Apple iOS version, requires you have the AnyConnect for Mobile license on your ASA in order for mobile users to connect.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...