Collect DART Bundle for Secure Client

Introduction

This document describes DART, a tool for gathering Cisco Secure Client troubleshooting data for Cisco TAC analysis. The DART wizard runs on the device that runs Cisco Secure Client and can be launched from Secure Client, or by itself without Secure Client.

Prerequisites

Requirements

Cisco recommends you have knowledge of these topics:

• Cisco Secure Client 5.x
• Adaptive Security Appliance (ASA)
• Firepower Threat Defense (FTD)

Components Used

The information in this document is based on these operating systems:

• Windows
• MacOS
• Linux

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Procedure

Installation

There are two ways to install DART on endpoints. We can install it using pre-deploy packages manually on the targeted PC or it can be deployed from ASA/FTD by configuring it under assigned "group-policy".

Pre-deploy Packages 

Step 1. Download Secure Client pre-deploy package as per operating system from Cisco Software site.

Download Secure Client package

Step 2. Installing it manually on different operating systems.

DART for Windows:

1. Extract the pre-deploy package.

Extract pre-deploy pkg

2. Click on DART MSI installer.

MSI installer

3. Comply with on screen instructions for installation of DART.

Next to proceed

Installation Completed

DART for MacOS:

1. Double click on DMG installer file and then on  Cisco Secure Client.pkg .

Install Secure Client pkg

2. Read the license and continue accordingly.

Agree to continue

3. Check the  Diagnostic and Reporting Tool  and click on  Continue .

Install DART

4. Comply with on screen instructions for installation of DART.

Installation Completed

DART for Linux:

1. Untar the Linux pre-deploy package using command: 

tar xvzf cisco-secure-client-linux64-5.1.2.42-predeploy-k9.tar.gz

Untar linux pkg

2.  Navigate to  /cisco-secure-client-linux64-5.x/dart  and execute  dart_install.sh .

Install DART

3. Accept the terms in license agreement to install DART.

Accept agreement

4. After installation, DART and Secure Client can be accessed from:

Application > Internet > Cisco Secure Client Application > Internet > Cisco Secure Client - DART

Deploy from ASA/FTD

Headends like ASA and FTD provides functionality to deploy various anyconnect modules like dart, vpngina, ampenabler and so on, on the endpoint when user is connecting to remote access VPN.

FTD

If you are managing FTD either from FMC or FDM, please refer this guide to deploy DART and other modules to the FTD using the group-policy.

ASA

Configure  anyconnect modules value dart  in webvpn section of target group-policy.

group-policy NAME_OF_GROUP_POLICY internal
group-policy NAME_OF_GROUP_POLICY attributes
 dns-server value 8.8.8.8
 vpn-tunnel-protocol ssl-client 
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value split-acl
 webvpn
  anyconnect modules value dart
  anyconnect profiles value Asa type user

Establish a successful connection to the ASA/FTD.
Navigate to  Settings > VPN > Message History  to see the details about modules that were downloaded.

Download module

Collecting DART Bundle

Windows

Step 1. Launch DART from either Start Menu or Cisco Secure Client.

Start menu

or

Cisco Secure Client

Step 2. Click on Diagnostics to collect the DART logs.

Launch Diagnostics

Step 3. Comply with on screen instructions to collect DART bundle.

DART - Next

Step 4. Select Default option to save the DART bundle on Desktop and click  Next .

Bundle creation options

Step 5. Windows starts processing and collecting logs.

Processing logs

Step 6. After processing, DART bundle is saved on Desktop by default.

Dart created

MacOS

Step 1. Launch DART from either Mac Launchpad or Cisco Secure Client by clicking on  Generating Diagnostics Report . 

Mac Launchpad

or

Cisco Secure Client

Step 2. Select the aditional log options to include legacy and system logs as per requirement and click on  Run .

Additional Log Options

Step 3. MacOS starts processing and collecting logs.

Processing LogsStep 4. After processing, DART bundle is saved on Desktop by default.

DART bundle created

Linux

Step 1. Navigate to  /opt/cisco/secureclient/dart/  and execute  dartui. Graphical user interface for DART opens on screen and click  Next .

DART launching

Step 2. Select  Typical  bundle option for collecting logs and diagnostic information and click  Next as shown in the image.

Bundle Option

Step 3. Click on  Finish  and DART bundle is saved on Desktop by default as shown in the image.

DART bundle created

Troubleshoot

This section provides information you can use in order to troubleshoot your configuration.

Consult this guide to effectively correlate and identify logs from DART for resolving Secure Client related issues.