Cisco Security Cloud Control: Secure Firewall Management

PDF

Cisco Security Cloud Control: Secure Firewall Management

Upgrade ASA Secure Client Packages

Updated: September 10, 2026

Want to summarize with AI?

Log in

Explains how ASA Secure Client package upgrades are managed and distributed to users by Cloud Control.

A Secure Client package upgrade is a software distribution feature that

  • enables administrators to manage and deploy Cisco Secure Client (formerly AnyConnect) webdeploy packages,

  • automates upgrades for users connecting to ASA Remote Access (RA) VPN headends, and

  • ensures that managed organizations receive the latest client versions seamlessly upon VPN connection.

Benefits for ASA Secure Client Packages Upgrade

  • Simplify the upgrade process by utilizing a centralized, guided workflow.

  • Upgrade Secure Client packages for multiple ASA RA VPN headends.

  • Provides full visibility into currently installed packages to verify compatibility before deployment.

  • Updates all platforms simultaneously or target specific operating systems.

Upgrade ASA Secure Client Packages

Follow the steps below to select compatible versions, manage platform-specific packages, and monitor your deployment status.

Before you begin

Before initiating an upgrade, ensure your devices meet the following criteria:

  • Devices must be online and synced with Security Cloud Control Firewall Management for connectivity.

  • Devices must be configured as ASA RA VPN headends.

Procedure

  1. From the Security Cloud Control Firewall Management Home page, click Firewall.

  2. Choose Operations > Upgrades.

  3. Click Begin an Upgrade and select ASA Secure Client Upgrade from the drop-down list.

    ASA Secure Client Upgrade

  4. Enter a name for your upgrade in the Job / Update name name field.

  5. Select the ASA devices you want to upgrade and click Next.

    Click next to select ASA devices
    Note

    • Only eligible ASA RA VPN headends are displayed.

    • The device list includes information such as device name, IP address, model, current version, and installed Secure Client packages.

  6. Select the Secure Client version you want to install.

    Note: The available versions are based on compatibility with the selected ASA devices. Not all devices are compatible with every Secure Client version.

  7. Review the available platform packages for the selected version.

    versions and platforms for secure client upgrade

    Note: By default, all available platforms are selected. To upgrade only specific packages, select the required platforms, such as Windows, macOS, or Linux.

  8. Click Begin to start the upgrade.

  9. Click Back to Upgrades to navigate to the Upgrades page and monitor your progress.

    Click back to upgrades under secure client upgrades
    Note
    The Status column provides real-time updates on your upgrade; if the process fails or completes with warnings, you must check this column to review the specific error details.

Your selected ASA devices now run the upgraded Secure Client packages. Real-time progress and errors appear in the Status column.