Cisco AnyConnect client installation configuration and default address modification techniques

Cisco launched the Cisco AnyConnect VPN Client currently have Windows, Android, iOS, OS X, Ubuntu, WebOS operating system and other clients. AnyConnect main role is to facilitate the employees to work safely on any device.

Cisco AnyConnect client installation configuration and default address modification techniques

Update History

May 24, 2019 - draft

Read the original -  https://wsgzao.github.io/post/cisco-anyconnect/

Further reading

Cisco AnyConnect Secure Mobility Client

• https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/index.html

---

Cisco AnyConnect Profile

It needs no introduction

Cisco AnyConnect configuration

1. macOS system is installed only install VPN components, other functions do not need to install
2. macOS and Windows recommend uncheckingBlock Connections to untrusted servers

 

Cisco AnyConnect modify the default link address

Change Local Policy Parameters Manually

Step 1 Retrieve a copy of the AnyConnect Local Policy file (AnyConnectLocalPolicy.xml) from a client installation.

Table 1. Operating System and AnyConnect Local Policy File Installation Path Operating System

|Operating System	|Installation Path												|
---|---|---
|Windows			|C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client	|
|Linux				|/opt/cisco/anyconnect											|
|macOS				|/opt/cisco/anyconnect											|

Step 2 Edit the parameter settings. You can either edit the AnyConnectLocalPolicy file manually, or use the VPN Local Policy editor, which is distributed with the AnyConnect Profile Editor installer.

Step 3 Save the file as AnyConnectLocalPolicy.xml and deploy the file to remote computers using a corporate software deployment system.

Step 4 Reboot the remote computers so that the changes to the local policy file take effect.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/anyconnect-profile-editor.html

macOS

注意修改中文备注

vim /opt/cisco/anyconnect/profile/Profile.xml

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/"> 
<ServerList> 
     <HostEntry>
          <User> 用户名称 </User>
          <HostName> 自定义显示名称 </HostName>
          <HostAddress> 服务器地址 </HostAddress>
     </HostEntry>
     <HostEntry>
          <User> 用户名称 </User>
          <HostName> 自定义显示名称 </HostName>
          <HostAddress> 服务器地址 </HostAddress>
     </HostEntry>
</ServerList>
</AnyConnectProfile>

Windows

注意修改中文备注

C:\Users\你的用户名\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client 目录下的 preferences.xml 文件

比如

C:\Users\wangao\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectPreferences>
<DefaultUser> 默认用户名 </DefaultUser>
<DefaultSecondUser/>
<ClientCertificateThumbprint/>
<ServerCertificateThumbprint/>
<DefaultHostName> 默认 VPN 地址 </DefaultHostName>
<DefaultHostAddress/>
<DefaultGroup> 默认组 </DefaultGroup>
<ProxyHost/>
<ProxyPort/>
<SDITokenType/>
<ControllablePreferences>
<EnableAutomaticServerSelection>false</EnableAutomaticServerSelection>
<LocalLanAccess>false</LocalLanAccess>
<BlockUntrustedServers>false</BlockUntrustedServers>
</ControllablePreferences>
</AnyConnectPreferences>