AnyConnect VPN support for MX devices

[SLR]

Good Day -

Any status on when we expect to have full cisco anyconnect vpn support for the MX appliances? Thank you in advance been asking for 3 years now. 

[SunnyJ]

Thanks for your patience. There is no update on the status and MX is still not supporting Cisco Anyconnect VPN at this time. However, Meraki is making exciting changes on a new beta firmware - 15.x. Please check back with Support periodically for a new feature. 

Thanks,

Sunny Joo

[lbouchard]

Where can we read more about new feature of the 15.x firmware?

[DillonofAnch17]

@SLR While at Cisco Live last month I spoke with a few different Meraki employees who have spoken that the MX's will support Anyconnect eventually and it's more of a when and not if. This would be huge if it's going to be available on Beta. I will be watching closer now!

[CptnCrnch]

That‘d be phantastic news indeed!

[Nash · Accepted solution]

I hate to be a buzzkill, @DillonofAnch17 but the sales reps have been saying "in the next 6 months" for the last couple of years. It's for reasons beyond their control, but I wouldn't get excited about AnyConnect support until you can start applying AnyConnect licenses to MX devices.

[SLR]

I second this...

[NFL0NR]

how much longer is 15 going to be in beta?  I've been hearing about "the wonderful advancements in firmware 15" for about 6 months.  

[Roska]

@lbouchard I usually check these from dashboard: Organization -> Firmware upgrades. Running beta enabled org.

[Arnout]

Any update regarding the AnyConnect support? I really need this!

[cmr]

@NFL0NRfirmware stays in beta until I think ~10% of users install it, with 15.x incrementing rapidly this will take some time! We run 15.x on our production SDWAN but even with fairly regular updating we have some devices on 15.14, some on 15.15 and some on 15.16 so we aren't contributing much to the % of any of them...

[Rebry]

I am going to bounce this up again! 

anyone got any news? 

[SLR]

I got an email that is actively in development. They think they will have a beta to announce very soon.

I will believe it when I see it.

they have been saying this for years.

[dadinh]

Our sales rep just confirmed it going live in May this year!

[Rebry]

Woohoo! 

It's the best news of this decade! 

[Roska]

Seeing is believing

[lbouchard]

In the era of Trump and fake news, who can believe this anymore?

[dadinh]

well true, but I like to believe in the good in people.
Since we also asked about this feature about 2 months ago, with the answer "no date", and now Meraki proactively informed us about this, there is maybe more to it than normally.

[Roska]

I believe you´ve managed to get some attention and into the closed beta group. Good luck, please post reply here if you hear something. Thanks

[SLR]

I need in on any beta testing group for anyconnect support as we have been waiting forever since we first installed the devices into our org.

[dadinh]

I'm currently on a Cisco training and I got it approved again.
Anyconnect for Meraki is more or less already finished is is getting implemented into the beta now.

[Jason_Reed]

Wow, finally, this will be GREAT!!!

[lmorel]

Was told today same thing. I am getting an additional MX through SHI and my account manager was going back and forth with his Meraki point of contact. Then I remembered this thread so I asked him about AnyConnect. He came back and said that he was told AnyConnect is in beta and release should be late spring. Exciting news to say the least.

So the real question is: has anyone taken a 4K picture of Big Foot yet?

[Nash]

You know, I really hope we can hear from some of the beta testers.

I need to know if this will let me create multiple VPN user groups and specify split tunnel easily or not. Like, is it AnyConnect AnyConnect? Or is it AnyConnect as an SSL VPN client, but no real changes otherwise?

[cmr]

I'd bet on it being the latter option...

[Nash]

---

@cmr wrote:

I'd bet on it being the latter option...

---

Which is cool. I love dumping all of an end user's traffic out through my client's 10/1 Mbps DSL pipe when they're working from home and streaming music or Youtube.

[andrewperry]

In which firmware version it will be supported? I'm going to upgrade to 15.27 MX version but it seems still not mentioned... any news about it?

[Roska]

MX250/450 and MX67/68 are the testing platforms on closed beta.

[cmr]

@Roska what firmware version is needed, or is that not relevant?

[Roska]

EDIT: closed beta FW push. Unfortunately not aware of the FW version required.

[NFL0NR]

The version has to be pushed to your device, and the only way that happens is if you get into the closed beta.

[lmorel]

Once enabled by support in the closed beta, is it a all or nothing type of feature or an additional option and you can have mix and match versions of VPN client configs (meraki cloud, AD, Radius, etc)? (apologies in advance if I didn't use the proper terminology).

[RufTech]

Picture of Big Foot

[Roska]

@RufTech and it works? 🙂

[Justin1234]

>I need to know if this will let me create multiple VPN user groups and specify split tunnel easily or not.

It's sad that such an expensive device can't do basic functionality. I can throw something like Untangle on some random hardware for free and do that with a single click.

[Bsalami]

AnyConnect is still in development. @RufTech I love the teaser. I will update this thread when AnyConnect on the MX is  available for wider beta testing!

[cmr]

@Bsalamican you please confirm whether it is simply a proprietary client or allows more flexibility for the actual client VPN function?  From the screenshot posted by @RufTech I am hoping the latter...

[routerjockey]

As the name implies... I would assume it is Cisco AnyConnect. Not connect "any" VPN client support.

[estoril]

Any update on the beta becoming more widely available? I assume it will be a similar manner to how Cisco FTDs support AnyConnect and you will have to just drop the policy .xml into the portal?

[Duke_Nukem]

I contacted my VAR to see if he's heard anything from his rep at Cisco.  They told him that it will only be available to the MX250/450 and MX67/68.  He also they said it would go Public Beta Q1 FY21 (August of this year).  

This can't be limited to just those models.  That's crazy.  Say it ain't so.

[cmr]

I'm guessing the MX64, MX84 and MX100 might be about to be replaced then...?

[Roska]

@Duke_Nukem   Those models are correct. You gotta do beta with some platforms.

[Duke_Nukem]

I'm not talking just beta.  My fear is they will roll this out to only those models.  Can a Cisco Meraki employee confirm?

[INQ-Support]

My Meraki rep confirmed that this does not apply to the MX-100.  I'll be looking for an alternative appliance solution.

[Duke_Nukem]

Love the crickets....

[gplatret]

Hello,
Did you find a solution?
Thank you

[Roska]

AC support will be on all current MX HW models. Learned it on last weeks Ask me anything session

[mattalley]

In your statement of "all current models", does that include the MX84?

Thanks

[Roska]

I believe so yes, but @Bsalami is probably the correct person to confirm. ask me anything session a few weeks back got a suggested timeline for public beta so the train keeps moving on which is obviously a good thing.

[brad1028]

It's June, wondering if you have heard anything.