Feedback
Contents
Installing and Starting AnyConnect
Overview
The Cisco AnyConnect Secure Mobility Client for Android provides seamless and secure remote access to enterprise networks. AnyConnect allows any installed application to communicate as though connected directly to the enterprise network.
Your organization may provide additional documentation on using AnyConnect for Android.
Installing the AnyConnect Application
Procedure
NoteAnyConnect for Android is available for download only from the Android Market. You cannot download it from the Cisco website or after connecting to a secure gateway.
Step 1 Determine if your device is one of the supported devices and install the appropriate brand-specific AnyConnect package. Cisco provides brand-specific AnyConnect packages that offer full-featured VPN connections for these devices. These brand-specific AnyConnect clients are provided in partnership with the device vendors and are the preferred AnyConnect clients for supported devices.
Step 2 Otherwise, determine if your device is running Android 4.0 (Ice Cream Sandwich) or later to install AnyConnect ICS+. This AnyConnect client offers VPN connectivity supported by the Android VPN Framework (AVF) in Android 4.0 or later. AVF provides only basic VPN connectivity. The AnyConnect AVF client, dependent upon these basic VPN capabilities, is unable to provide the full set of VPN features available in the brand-specific packages.
Step 3 Otherwise, determine if your device is rooted and running Android 2.1 or later, install Rooted AnyConnect.
Note Cisco provides this AnyConnect package for preview and testing purposes only. Cisco does not support this client, but it works on most rooted devices running 2.1 or later.
Both a tun.ko module and iptables are required. AnyConnect displays an error message informing you about what is missing when you attempt to establish a VPN connection. If the tun.ko module is missing, obtain or build it for your corresponding device kernel and place it in the /data/local/kernel_modules/ directory.
Caution Rooting your device voids your device warranty. Cisco does not support rooted devices, nor do we provide instructions to root your device. If you choose to root your device, you do so at your own risk.
Supported Android Devices
Cisco provides AnyConnect brand-specific apps to support mobile devices from the following manufacturers:
Cisco also provides the following AnyConnect apps to support Android devices:
NoteCisco no longer provides or supports the brand-specific AnyConnect apps for Lenovo and Motorola devices. Lenovo and Motorola devices that run Android version 4.0 (Ice Cream Sandwich) or later can use the AnyConnect ICS+ app. Uninstall the old brand-specific AnyConnect package before upgrading to AnyConnect 3.0.
Samsung Devices
Samsung AnyConnect and Samsung AnyConnect Legacy support the Samsung product lines listed below. The devices must be running the latest software update from Samsung and the identified Android releases. See the Android installation procedure to determine which package applies to your device.
NoteSamsung rebrands devices in these product lines for each mobile service provider.
Product Name Product Model ACE+ GT-S7500, GT-S7500, GT-S7500W ACE II GT-I8160 Conquer 4G SPH-D600 Galaxy Appeal SGH-I827 Galaxy Beam GT-I8530 Galaxy Exhilarate SGH-I577 Galaxy Mini GT-S5570, GT-S5570B, GT-S5570BD1, GT-S5570L, GT-S5578, SCH-I559, SGH-T499 , SGH-T499V, SGH-T499Y, Galaxy Note GT-I9220, GT-N7000, GT-N7000B, SHV-E160K, SHV-E160S, SHV-E160L, SCH-I889, SCH-I717M, SCH-I717R, SCH-I717D, SGH-NO54, SCH-I717 Galaxy Note 10.1 GT-N8000, GT-N8005, SHW-M480S, SHW-M480K, GT-N8010, GT-N8013, SHW-M480W Galaxy Rush SPH-M830 Galaxy S GT-I9000, GT-I9000B, GT-I9000L, GT-I9000LD1, GT-I9000M, GT-I9000T, GT-I9001, GT-I9003, GT-I9003B, GT-I9003L, GT-I9008, GT-I9008L, GT-I9018, GT-I9070, GT-I9070P, GT-I9088, SC-02B, SCH-I400, SCH-I405, SCH-I500, SCH-I809, SCH-I909, SGH-I896, SGH-I897, SGH-I927, SGH-I997R, SGH-N013, SGH-T699, SGH-T759, SGH-T769, SGH-T959, SGH-T959D, SGH-T959P, SGH-T959V, SGH-T959W, SHW-M100S, SHW-M110S, SHW-M130L, SHW-M190S, SHW-M220L, SHW-M340K, SHW-M340L, SHW-M340S, SPH-D720 Galaxy S II GT-I9100, GT-I9100G, GT-I9100M, GT-I9100T, GT-I9100P, GT-I9103, GT-I9108, GT-I9210, GT-I9210T, SC-O2C, SC-O3D, SCH-I510, SCH-I919, SCH-I919U, SCH-I929, SCH-J001, SCH-W999, SGH-I727, SGH-I727R, SGH-I757M, SGH-N033, SGH-N034, SGH-T989, SCH-T989D, SHV-E110S, SHV-E120K, SHV-E120L, SHV-E120S, SHW-M250K, SHW-M250L, SHW-M250S, SPH-D170 Galaxy S III GT-I9300, SCH-I535, SGH-I747, SGH-T999, SHV-E210K, SHV-E210L, SHV-E210S, SPH-L710 Galaxy Stellar SCH-I200 Galaxy Tab 7 (WiFi only) 1 GT-P1000, GT-P1000L, GT-P1000M, GT-P1000N, GT-P1000R, GT-P1000T, GT-P1010, SC-01C, SCH-I800, SGH-I849, SGH-I987, SHW-M180L, SHW-M180S Galaxy Tab 7.0 Plus & 7.7 GT-P6200, GT-P6201, GT-P6210, GT-P6211, GT-P6800, GT-P6801, GT-P6810, GT-P6811, SCH-I815, SGH-N024, SGH-T869, SHV-E150S, SHW-M430W Galaxy Tab 8.9 GT-P7300, GT-P7300B, GT-P7310, GT-P7320, GT-P7320T, SCH-P739, SGH-I957, SGH-I957M, SGH-I957R, SHV-E140K, SHV-E140L, SHV-E140S, SHW-M300S, SHW-M300W, SHW-M305W Galaxy Tab 10.1 GT-P7500, GT-P7500D, GT-P7500M, GT-P7500R, GT-P7500V, GT-P7501, GT-P7503, GT-P7510, GT-P7511, SC-01D, SCH-I905, SGH-T859, SHW-M380K, SHW-M380S, SHW-M380W Galaxy Tab 2 7.0 GT-P3100, GT-P3110, GT-P3113, SCH-I705 Galaxy Tab 2 10.1 GT-P5100, GT-P5110, GT-P5113 Galaxy W GT-I8150, SGH-T679 Galaxy Xcover GT-S5690 Galaxy Y Pro GT-B5510B, GT-B5510L Illusion SCH-I110 Infuse SCH-I997 Rugby SGH-I847 Stratosphere SCH-I405 Stratosphere II SCH-I415 Transform Ultra SPH-M930 1 We do not support the Sprint distribution of the Samsung Galaxy Tab 7 mobile device.HTC Devices
HTC AnyConnect supports the HTC product lines listed at http://www.htcpro.com/enterprise/VPN.
Devices must be running the minumum software required. Go to Settings > About phone > Software information > Software number to determine the software number running on your device.
Kindle Devices
Cisco AnyConnect (Kindle Tablet Edition) Release 3.0.x is available from Amazon for the Kindle Fire HD devices, and the New Kindle Fire. Anyconnect for Kindle is supported by the Android VPN Framework and is equivalent in functionality to the AnyConnect ICS+ package
Android VPN Framework Devices
AnyConnect ICS offers VPN connectivity supported by the Android VPN Framework (AVF) in Android 4.0 (Ice Cream Sandwich) or later.
The AVF provides only basic VPN connectivity. The AnyConnect client, dependent upon these basic VPN capabilities, is unable to provide the full set of VPN features available in the brand-specific packages.
NoteCisco recommends the AVF AnyConnect client for unsupported devices running Android 4.0 or later. Supported devices should use the brand-specific AnyConnect client regardless of the version of the Android operating system.
Rooted Devices
Cisco provides Rooted AnyConnect for rooted Android mobile devices running Android 2.1 or later. This client is provided for preview and testing purposes only. Cisco does not support this client, but it works on most rooted devices running Android 2.1 or later. If you encounter issues, please report them to android-mobile-feedback@cisco.com, and we will make our best effort to resolve them.
Both a tun.ko module and iptables are required. AnyConnect displays an error message informing you about what is missing when you attempt to establish a VPN connection. If the tun.ko module is missing, obtain or build it for your corresponding device kernel and place it in the /data/local/kernel_modules/ directory.
Starting AnyConnect
Procedure
Step 1 Tap the AnyConnect Icon to start the AnyConnect app. Step 2 If this is the first time that you are starting AnyConnect after installing or upgrading, accept the displayed End User License Agreement to continue. Step 3 Add New VPN Connection or tap Menu and choose:
Statistics, to view summary and detailed statistics about the current active VPN connection. See Viewing AnyConnect Statistics.
Settings, to specify AnyConnect application preferences. See Specifying Application Preferences.
- Managing certificates; see Certificate Management.
- Managing AnyConnect profiles; see Profile Management.
- Managing AnyConnect localization; see Localization Management.
- Viewing logging and system information; see Viewing Log Messages.
About, to view AnyConnect version and license information. See Displaying the AnyConnect Version and Licensing Details.
Exit, to exit AnyConnect. See Exiting AnyConnect.
What to Do Next
Follow instructions provided to you by your administrator to configure and establish a VPN connection to your network.
