Home
Support
Product Support
Security
Cisco Secure Client
Maintain and Operate Guides

Cisco Secure Client (Including AnyConnect) Administrator Guide, Release 5.1

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Secure Client (Including AnyConnect) Administrator Guide, Release 5.1

Expand all sections

About this content

Deploy Cisco Secure Client

Before You Begin
Cisco Secure Client Deployment Overview
Preparing the Endpoint for Cisco Secure Client
Using Network Visibility Module on Linux
Predeploying Cisco Secure Client
Web Deploying Cisco Secure Client
Updating Cisco Secure Client Software and Profiles

Customize and Localize Secure Client and Installer

Modify Cisco Secure Client Installation Behavior
Enable DSCP Preservation
Set Public DHCP Server Route
Customize the Cisco Secure Client GUI Text and Messages
Create Custom Icons and Logos for the Cisco Secure Client GUI
Create and Upload the Cisco Secure Client Help File
Write and Deploy Scripts
Write and Deploy Custom Applications with the Cisco Secure Client API
Use the Cisco Secure Client CLI Commands

The Cisco Secure Client Profile Editor

About the Profile Editor
The Cisco Secure Client VPN Profile
The Cisco Secure Client Local Policy

Zero Trust Access Module

Zero Trust Access
Getting Zero Trust Access Up and Running on Desktop
Updates to Zero Trust Access Module Tile
Zero Trust Access on Android Devices
Zero Trust Access on iOS Devices
Starting Resource Access
How Do I Unenroll on Desktop
How Do I Uninstall on Desktop
Configuring Zero Trust Access on Desktop
Use Certificate Enrollment Without User Action
Operation Details for Desktop Zero Trust Access Module
Troubleshooting Zero Trust Access Module on Desktop
Troubleshooting Zero Trust Access App for Android
Troubleshooting Zero Trust Access App for iOS

Configure AnyConnect VPN

Connect and Disconnect to a VPN
Configure Start Before Login (PLAP) on Windows Systems
Use Trusted Network Detection to Connect and Disconnect
Require VPN Connections Using Always-On
Use Captive Portal Hotspot Detection and Remediation
Configure Cisco Secure Client over L2TP or PPTP
Use Management VPN Tunnel
Configure Cisco Secure Client Proxy Connections
Select and Exclude VPN Traffic
Manage VPN Authentication

Configure Network Access Manager

About Network Access Manager
Network Access Manager Deployment
Disable DHCP Requests by Network Access Manager During Connectivity Testing
Network Access Manager Profile

Configure Posture

What ISE Posture Module Provides
Operations That Interrupt Cisco Secure Client ISE Flow
Status of ISE Posture
Script Remediation Messaging
Posture Condition Script
Posture and Multi Homing
Simultaneous Users on an Endpoint
Logging for Posture Modules
Posture Modules' Log Files and Locations
ISE Posture Profile Editor
Advanced Panel
What Secure Firewall Posture Module Provides
OPSWAT Support

Cisco Secure Endpoint Integration

About Cisco Secure Endpoint

Network Visibility Module

About Network Visibility Module
Provide Full Disk Access Manually for macOS
How to Use Network Visibility Module
Collection Parameters for Network Visibility Module
Transport Securely to Connector
Extend Linux Kernel Capabilities
About Flow Filters
Osquery Data Configuration
Customer Feedback Module Gives NVM Status

Umbrella Roaming Security

Umbrella Module for Cisco Secure Client (for Android OS)
Umbrella Module for Cisco Secure Client (for Windows or macOS)

Cisco Secure Client ThousandEyes Endpoint Agent Module

About Cisco Secure Client ThousandEyes Endpoint Agent Module
ThousandEyes Endpoint Agent Module Deployment

Enable FIPS in the Local Policy

About FIPS, NGE, and Cisco Secure Client
Configure FIPS for AnyConnect VPN
Configure FIPS for the Network Access Manager

Cisco Secure Client on Mobile Devices

Cisco Secure Client Operation and Options on Mobile Devices
Cisco Secure Client on Android Devices
Cisco Secure Client on Apple iOS Devices
Cisco Secure Client on Chrome OS Devices
Cisco Secure Client on Universal Windows Platform
Configure Mobile Device VPN Connectivity on the Secure Firewall ASA Gateway
Configure Per-App VPN
Configure Mobile Device Connections in the Cisco Secure Client VPN Profile
Automate Cisco Secure Client Actions Using the URI Handler
Troubleshoot Cisco Secure Client on Mobile Devices

Cisco Secure Client Customer Experience Feedback Module

Configure Customer Experience Feedback

Troubleshoot Cisco Secure Client

Gather Information for Troubleshooting
Cisco Secure Client Connection or Disconnection Issues
VPN Service Failures
Driver Crashes
Other Crashes
Security Alerts
Dropped Connections
Installation Failures
Incompatability Issues
Known Third-Party Application Conflicts

Cisco Secure Client Changes Related to macOS 11 (and Later)

About the Cisco Secure Client System Extension
Approving the Cisco Secure Client System Extension
Deactivate the Cisco Secure Client System Extension
Sample MDM Configuration Profile for Cisco Secure Client System Extension Approval
Managed Login Items
Sample MDM Configuration Profile for Cisco Secure Client Managed Login Items

Cisco Secure Client (Including AnyConnect) Administrator Guide, Release 5.1

Cisco Secure Client Changes Related to macOS 11 (and Later)

Updated: June 30, 2026

About the Cisco Secure Client System Extension

Learn about the Secure Client system extension on macOS, including its required components and how to ensure proper operation.

Approving the Cisco Secure Client System Extension

Learn about the Secure Client system extension on macOS, including its required components and how to ensure proper operation.

Deactivate the Cisco Secure Client System Extension

Learn how to deactivate the Secure Client system extension during unisnstallation by providing administrator credentials or by deploying a management profile for silent removal.

Sample MDM Configuration Profile for Cisco Secure Client System Extension Approval

A sample to learn how to use the MDM configuration profile to approve and load the Secure Client system and kernel extensions.

Managed Login Items

Learn how to allow administrators to approve VPN and ZTA modules without user intervention and to prevent users from disabling essential login items.

Sample MDM Configuration Profile for Cisco Secure Client Managed Login Items

Learn how to allow administrators to approve VPN and ZTA modules without user intervention and to prevent users from disabling essential login items.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.