Interpret Unprotected Web Protection Status in AnyConnect Client

Available Languages

Download Options

  • PDF     (514.6 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (647.8 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (308.6 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:September 4, 2025
Document ID:224768

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes why Web Protection status can appear as unprotected in AnyConnect 4.8.01090.

    Feature Status Behavior in AnyConnect 4.8.01090

    With AnyConnect Client version 4.8.01090, the client can report DNS Protection Status as protected, while displaying Web Protection Status as unprotected.

    Explanation of Protection States

    AnyConnect 4.8.01090 introduces support for the Umbrella Secure Web Gateway (SWG) service. Activation of this service requires an active Umbrella SIG Essentials, SIG Advantage, or SIG add-on subscription. Once the appropriate subscription is active, the AnyConnect endpoint client enables the Umbrella SWG service.

    For customers without a SIG-based subscription who install AnyConnect 4.8.01090, the client displays Umbrella SWG statistics placeholders and a message indicating the Web Protection status is unprotected.
    360043162551360043162551

    360043127312360043127312

    • Theunprotectedmessage applies only to the Umbrella SWG service.
    • DNS Protection remains active and functional, regardless of the SWG service status.
    • The status of DNS Protection is not affected by the unprotected state of Web Protection.
    • Future versions of AnyConnect provide improved messaging regarding the state and protection level of Umbrella services.

    Revision History

    Revision Publish Date Comments
    1.0
    04-Sep-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products