Android User Guide for Cisco AnyConnect Secure Mobility Client, Release 3.0.x
Installing and Starting AnyConnect
Downloads: This chapterpdf (PDF - 1.21MB) The complete bookPDF (PDF - 2.29MB) | The complete bookePub (ePub - 302.0KB) | The complete bookMobi (Mobi - 504.0KB) | Feedback

Installing and Starting AnyConnect

Installing and Starting AnyConnect

AnyConnect Overview

The Cisco AnyConnect Secure Mobility Client for Android provides seamless and secure remote access to enterprise networks. AnyConnect allows installed applications to communicate as though connected directly to the enterprise network. AnyConnect is a sophisticated networking application that also allows you to set preferences, control the appearance and operation of AnyConnect, and use diagnostic tools and facilities on your device as recommended by your administrator.

AnyConnect may be used in your enterprise in conjunction with Mobile Device Management software. If so, work with your administrator to abide by device management rules since these rules may include restricting VPN access to a set of approved applications. Your organization may provide additional documentation on using AnyConnect for Android.

Your Android App Store provides the application for initial installation and all upgrades. The Cisco Adaptive Security Appliance (ASA) is the secure gateway that admits access to the VPN, but it does not support updates of AnyConnect for mobile devices.

Open Software License Notices

  • This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
  • This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
  • This product includes software written by Tim Hudson (tjh@cryptsoft.com).

Supported Android Devices

Samsung Devices

Samsung AnyConnect supports the Samsung product lines listed below. Samsung rebrands devices in these product lines for each mobile service provider. These devices must be running the latest software update from Samsung.

Note


Galaxy Tab devices with Intel Processors must use the AnyConnect ICS+ package.


ACE+ Galaxy Tab 7 (WiFi only)
ACE II Galaxy Tab 7.0 Plus & 7.7
Conquer 4G Galaxy Tab 8.9
Galaxy Appeal Galaxy Tab 10.1
Galaxy Beam Galaxy Tab 2 7.0
Galaxy Exhilarate Galaxy Tab 2 10.1
Galaxy Mini Galaxy W
Galaxy Note Galaxy Xcover
Galaxy Note II Galaxy Y Pro
Galaxy Note III Illusion
Galaxy Note 10.1 Infuse
Galaxy Rush Rugby
Galaxy S Stratosphere
Galaxy S II Stratosphere II
Galaxy S III Transform Ultra
Galaxy S 4
Galaxy S 5
Galaxy Stellar

Note


Cisco has discontinued access to the <SEP 2011 Legacy version of Samsung AnyConnect since Samsung no longer permits updates to this version. Customers using older Samsung devices with firmware released before September 2011 are encouraged to look for newer firmware for these devices or upgrade to a newer device since it is not possible to provide current bug fixes for this release.

HTC Devices

HTC AnyConnect supports the HTC product lines listed at http:/​/​www.htcpro.com/​enterprise/​VPN.

Devices must be running the minumum software required. Go to Settings > About phone > Software information > Software number to determine the software number running on your device.

Kindle Devices

Cisco AnyConnect (Kindle Tablet Edition) Release 3.0.x is available from Amazon for the Kindle Fire HD devices, and the New Kindle Fire. Anyconnect for Kindle is supported by the Android VPN Framework and is equivalent in functionality to the AnyConnect ICS+ package

Android VPN Framework Devices

AnyConnect ICS offers VPN connectivity supported by the Android VPN Framework (AVF) in Android 4.0 (Ice Cream Sandwich) or later.

The AVF provides only basic VPN connectivity. The AnyConnect client, dependent upon these basic VPN capabilities, is unable to provide the full set of VPN features available in the brand-specific packages.


Note


Cisco recommends the AVF AnyConnect client for unsupported devices running Android 4.0 or later. Supported devices should use the brand-specific AnyConnect client regardless of the version of the Android operating system.


Rooted Devices

Cisco provides Rooted AnyConnect for rooted Android mobile devices running Android 2.1 or later. This client is provided for preview and testing purposes only. Cisco does not support this client, but it works on most rooted devices running Android 2.1 or later. If you encounter issues, please report them to android-mobile-feedback@cisco.com, and we will make our best effort to resolve them.

Both a tun.ko module and iptables are required. AnyConnect displays an error message informing you about what is missing when you attempt to establish a VPN connection. If the tun.ko module is missing, obtain or build it for your corresponding device kernel and place it in the /data/local/kernel_modules/ directory.


Note


Rooting your device voids your device warranty. Cisco does not support rooted devices, nor do we provide instructions to root your device. If you choose to root your device, you do so at your own risk.


Installing the Android AnyConnect Application


Note


AnyConnect for Android is available for download only from the Android Market. You cannot download it from the Cisco website or after connecting to a secure gateway.


Procedure
    Step 1   Determine if your device is one of the supported devices and install the appropriate brand-specific AnyConnect package.

    Cisco provides brand-specific AnyConnect packages that offer full-featured VPN connections for these devices. These brand-specific AnyConnect clients are provided in partnership with the device vendors and are the preferred AnyConnect clients for supported devices.

    1. For Samsung Devices, install Samsung AnyConnect .
      Note    This package applies to devices produced or upgraded after September 2011. If an install attempt results in one of the following error messages, you must upgrade your device to install AnyConnect:
      • "Installation Error: Unknown reason -8"
      • "Incompatible with other application(s) using the same shared user ID."
    2. For HTC Devices, install HTC AnyConnect.
    3. For Kindle Devices, install Cisco AnyConnect (Kindle Tablet Edition).
    Step 2   Otherwise, determine if your device is running Android 4.0 (Ice Cream Sandwich) or later to install AnyConnect ICS+.

    This AnyConnect client offers VPN connectivity supported by the Android VPN Framework (AVF) in Android 4.0 or later. AVF provides only basic VPN connectivity. The AnyConnect AVF client, dependent upon these basic VPN capabilities, is unable to provide the full set of VPN features available in the brand-specific packages.

    Step 3   Otherwise, determine if your device is rooted and running Android 2.1 or later, install Rooted AnyConnect.

    Note   

    Cisco provides this AnyConnect package for preview and testing purposes only. Cisco does not support this client, but it works on most rooted devices running 2.1 or later.

    Both a tun.ko module and iptables are required. AnyConnect displays an error message informing you about what is missing when you attempt to establish a VPN connection. If the tun.ko module is missing, obtain or build it for your corresponding device kernel and place it in the /data/local/kernel_modules/ directory.

    Caution   

    Rooting your device voids your device warranty. Cisco does not support rooted devices, nor do we provide instructions to root your device. If you choose to root your device, you do so at your own risk.


    Related References

    Starting AnyConnect

    Procedure
      Step 1   Tap the AnyConnect Icon to start the AnyConnect app.

      Step 2   If this is the first time that you are starting AnyConnect after installing or upgrading, accept the displayed End User License Agreement to continue.
      Step 3   Add New VPN Connection or tap Menu and choose:

      What to Do Next

      Follow instructions provided to you by your administrator to configure and establish a VPN connection to your network.