Cisco Secure Access Help

Download and Install Cisco Secure Client

Updated: August 24, 2026

Want to summarize with AI?

Explains how to obtain the installer and the specific configuration files required to activate the VPN, Zero Trust Access, Internet Security, and ThousandEyes modules in your Secure Access organization.

This section describes how to download and install the Cisco Secure Client on endpoint devices. It also covers downloading the configuration files required to connect the Secure Client VPN module, Zero Trust Access, Internet Security, and ThousandEyes modules to your Secure Access organization.

For more information on Cisco Secure Client deployment, see Deploy Cisco Secure Client in the Cisco Secure Client (including AnyConnect) Administrator Guide, Release 5.

Procedure

Navigate to Connect > End User Connectivity.
On the End User Connectivity page, click Cisco Secure Client.

The Download Cisco Secure Client window appears.
In the Download Cisco Secure Client window, choose one of the following options to obtain the installer:
- Download the latest version of Secure Client from Secure Access: Click the Download icon next to your specific operating system. To see version details, hover over the Information (i) icon beside the client name.
- Download the cloud-managed version of Secure Client:To manage your deployment through the cloud, click Secure Client Management at the bottom of the Download Cisco Secure Client menu and choose one of the following options:
  
  Option 1: For Cisco XDR Customers
  - Select your XDR region to obtain the client and manage your clients in the cloud. For more information, see XDR: Client Management.
  - If you are not automatically directed to Cisco XDR, launch XDR and click the link below for your region:
  - For more information, see the Cisco XDR product page.
  Option 2:For Non-XDR Customers
  
  Use Secure Client Management to download and manage your clients. This is a free cloud-based application available upon registration. For more information, see About Cisco Secure Client Cloud Management.
  - Existing SecureX Users: If you used SecureX before the End of Life (EoL) date of July 31, 2024, you should already have access. The Secure Client Management link will take you there directly. For more information, see Accessing Secure Client Cloud Management after the SecureX EoL.
  - New Users: If you did not use SecureX before July 31, 2024, follow the Instructions for Requesting a New Secure Client Cloud Management Tenant.
  - Alternative AccessYou can also access the Secure Client Management application through your personalized Cisco Application portal.
    1. In the Cisco Application Portal, click the Expand icon for your region.
    2. Navigate to Secure Client Management, then click Launch.
    3. Once subscribed, you will receive an email with a link to sign in through Security Cloud Sign On. For more information, see the Cisco Security Cloud Sign On Quick Start Guide.
- Download a previous version of Secure Client from Cisco Secure Central: Click the Cisco Software link.
  Note
  You must have a valid service contract associated with your Cisco.com profile to access these files.
  
  In Cisco Secure Central, download the desired Secure Client pre-deployment package and the version for the OS on the end-user device.
  - Examples:
    - macOS — cisco-secure-client-macos-5.1.8.105-predeploy-k9.pkg
    - Windows — cisco-secure-client-win-5.1.8.105-predeploy-k9.msi
In the Download configuration files section, download the configuration files (also known as profiles) for your deployment:
1. VPN Module: Choose the applicable VPN profiles. The VPN profile tells Secure Access which VPN profiles to enforce. For more information, see Manage VPN Profiles.
2. Zero Trust Access: No configuration file is required for ZTNA enrollment.
3. Internet Security module: Download the orginfo.json file. This file configures policies in the Internet Security module (also known as the Umbrella roaming module).
4. ThousandEyes module: Download the ThousandEyes Endpoint Agent Configuration.json file.
  
  Note
  To register the ThousandEyes module, you must first onboard Experience Insights in Cisco Secure Access. For more information, see Onboard Experience Insights.
Install the Cisco Secure Client by running the installer (for example, Setup.exe for Windows) and following the prompts in the installation wizard. For more information, see Deploy Cisco Secure Client in the Cisco Secure Client (including AnyConnect) Administrator Guide, Release 5.

ThousandEyes Endpoint Agent Module

ThousandEyes Endpoint Agent is included as part of Cisco Secure Client. To learn how to download and manage your endpoint agents with your other Cisco Secure Client Modules, see Cisco Secure Client ThousandEyes Endpoint Agent Module.

Automatic Registration

After completing the Secure Client installation, the ThousandEyes endpoint agent will register the endpoint with your Secure Access organization automatically once the endpoint establishes a connection to VPN, ZTA, or the roaming module. For more information, see Automatic Registration of ThousandEyes Endpoint Agents.

Manual Registration

If an endpoint will not connect via VPN, ZTA, or the roaming module, you can manually register it with Secure Access by running the registration script on the endpoint command line. For more information, see Manual Registration of ThousandEyes Endpoint Agent.

MDM Registration

For an example of how to use an MDM to install Secure Client and register the ThousandEyes endpoint agent, see Deploy Cisco ThousandEyes Module via Microsoft Intune.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.