AnyConnect OnConnect scripts

[hounshamp]

Has anyone successfully got the AnyConnect OnConnect scripts working on a Meraki MX? 

The following states that Run script on connect and disconnect is supported however I cannot find any documentation to support this on an MX.

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/AnyConnect_on_ASA_vs._MX

I am going to assume the file name is scripts_OnConnect_myscript.bat and you would upload this where the profile is uploaded.

Any real world experience appreciated.

[Inderdeep]

@ : Everything is here for Anyconnect on MX

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance 

[hounshamp]

Thanks but that doesn't cover anything about running scripts on login. 

Looking for real world experience rather than the useless Meraki how-to guides.

[PhilipDAth]

I don't know the answer, but check out this section of the AnyConnect manual.  Note that this has nothing to do with Meraki.  This is an AnyConnect function.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/gui... 

[JH7]

I was testing out OnConnect script as well (like OnConnect.bat as stated in the manual). Also, placed the script into here: %ALLUSERSPROFILE%\Cisco\Cisco AnyConnect Secure Mobility Client\Script

I've been having issue with script not executing at all. I ran my script manually and it worked.

Let me know if anyone can get it to run successfully. Appreciate it!

[hounshamp]

Yes got it working. So created a batch file called OnConnect_login.bat and saved it to %ALLUSERSPROFILE%\Cisco\Cisco AnyConnect Secure Mobility Client\Script

Basically anything starting with OnConnect will be executed from the directory if the run script option is enabled in the profile - Profile Editor / Preferences (Part 2) / Enable Scripting.

I uploaded the new profile to the AnyConnect section on the dashboard so it will be pulled down when the users connect next.

In my batch file I had the following calling the logon.bat from the logon server.

--------------------------------------------------

@echo off
rem logon script for AnyConnect users
call %logonserver%\netlogon\logon.bat

--------------------------------------------------

[JH7]

Excellent! Thank you for your help! The only thing i was missing is i didn't upload the profile to AnyConnect section on the dashboard.