Objective

The Cisco AnyConnect Secure Mobility Client, also known as the Cisco AnyConnect VPN Client, is a software application for connecting to a Virtual Private Network (VPN) that works on various operating systems and hardware configurations. This software application makes it possible for remote resources of another network become accessible as if the user is directly connected to the network, but in a secure way. Cisco AnyConnect Secure Mobility Client provides an innovative new way to protect mobile users on computer-based or smart-phone platforms, providing a more seamless, always-protected experience for end users and comprehensive policy enforcement for an IT administrator.

The objective of this document is to show the feature matrix of the Cisco AnyConnect Secure Mobility Client for Apple iOS devices.

Software Version

4.4

Apple iOS AnyConnect Feature Matrix

Deployment and Configuration

Feature

Support

Install or upgrade from Application Store

Yes

Cisco VPN Profile support (manual import)

Yes

Cisco VPN Profile support (import on connect)

Yes

Mobile Device Management (MDM) configured connection entries

Yes

User-configured connection entries

Yes

Tunneling

Feature

Support

Transport Layer Security (TLS)

Yes

Datagram TLS (DTLS)

Yes

Internet Protocol Security Internet Key Exchange version 2 Network Address Translator Traversal (IPsec IKEv2 NAT-T)

Yes

IKEv2 - raw Encapsulating Security Payload (ESP)

No

Suite B (IPsec only)

Yes

TLS compression

Yes, 32-bit devices only

Dead peer detection

Yes

Tunnel keepalive

Yes

Multiple active network interfaces

No

Per App Tunneling (requires Plus or Apex license and ASA 9.4.2 or later)

Yes, Beta support only, requires Apple iOS 8.3 or later and MDM.

Full tunnel (OS may make exceptions on some traffic, such as traffic to the app store)

Yes

Split tunnel (split include)

Yes

Local LAN (split exclude)

Yes

Split-DNS

Yes

Auto Reconnect / Network Roaming

Yes

VPN on-demand (triggered by destination)

Yes, compatible with Apple iOS Connect on Demand.

VPN on-demand (triggered by application)

Yes, when operating in Per App VPN mode only.

Rekey

Yes

IPv4 public transport

Yes

IPv6 public transport

Yes

IPv4 over IPv4 tunnel

Yes

IPv6 over IPv4 tunnel

Yes

Default domain

Yes

DNS server configuration

Yes

Private-side proxy support

Yes

Proxy Exceptions

Yes, but wildcard specifications not supported

Public-side proxy support

No

Pre-login banner

Yes

Post-login banner

Yes

Differentiated Services Code Point (DSCP) Preservation

No

Connecting and Disconnecting

Feature

Support

VPN load balancing

Yes

Backup server list

Yes

Optimal Gateway Selection

No

Authentication

Feature

Support

Client Certificate Authentication

Yes

Manual user certificate management

Yes

Manual server certificate management

Yes

SCEP legacy enrollment Please confirm for your platform.

Yes

SCEP proxy enrollment Please confirm for your platform.

Yes

Automatic certificate selection

Yes

Manual certificate selection

Yes

Smart card support

No

Username and password

Yes

Tokens or challenge

Yes

Double authentication

Yes

Group Uniform Resource Locator (URL) (specified in server address)

Yes

Group selection (drop-down selection)

Yes

Credential prefill from user certificate

Yes

Save password

No

User Interface

Feature

Support

Standalone Graphical User Interface (GUI)

Yes

Native Operating System OS GUI

Yes, limited functions

Application Program Interface (API) / Uniform Resource Identifier (URI) Handler (See URI Handling)

Yes

UI customization

No

UI localization

Yes, app contains pre-packaged languages.

User preferences

Yes

Home screen widgets for one-click VPN access

No

AnyConnect specific status icon

No

Mobile Posture

Feature

Support

Serial number or unique ID check

Yes

OS and AnyConnect version shared with headend

Yes

URI Handling

Feature

Support

Add connection entry

Yes

Connect to a VPN

Yes

Credential pre-fill on connect

Yes

Disconnect VPN

Yes

Import certificate

Yes

Import localization data

Yes

Import Extensible Markup Language XML client profile

Yes

External (user) control of URI commands

Yes

Reporting and Troubleshooting

Feature

Support

Statistics

Yes

Logging / Diagnostic Information (DART)

Yes

Certifications

Feature

Support

FIPS 140-2 Level 1

Yes

For the most updated information on AnyConnect licensing on the RV340 series routers, check out the article AnyConnect Licensing for the RV340 Series Routers.