Anyone using AT&T as reseller? Trying to download latest Secure Client version from Cisco website.

[from_afar]

I'm seeing in Microsoft Defender Endpoint Protection that the Secure Client has several Critical Vulnerabilities in version 5.1.6.103 which is the version available in the Client VPN anyconnect client download links and installed on all of our clients (the MX-95 itself is auto-updated and appears to be up-to-date but for some reason that doesn't appear to update the Secure Client downloads...anyone know how that happens?)

I can see in the Cisco downloads that version 5.1.7.80 is available but I cannot download it because I don't have the right contract number apparently. I contacted the sales rep from ATT I bought the system from and he sent me a copy of the PDF sales contract but none of the those numbers work when trying to add to the Cisco site for entitlement enablement. 

I contacted Cisco support and they can't seem to be able to help. I've provided every number I can find (customer number in Meraki interface profile dropdown, S/N of all of our equipment, all emails used to log in, company name emails and addresses but they can't seem to be able to help (they just keep telling me to contact the reseller). 

Wondering if anyone else has experience with this or other resellers and was able to enable downloads from Cisco?

[PhilipDAth]

Purchase a support contract for Secure Client, and you'll be able to download it directly from Cisco.

[CptnCrnch]

...and to comply with the licence conditions 😇

[from_afar]

@CptnCrnch @PhilipDAth  I'm certain that I remember when going through the sales pitch(es) with ATT that the VPN user count was part of the deal. What does that pay for? Can you even use Secure Client without a support contract? It seems crazy to me that regardless of support contract status Cisco would allow people to use their VPN products with old software that contain critical vulnerabilities.

Does the AnyConnect VPN software download section in the Meraki interface ever get its software updated? Or is it just forever stuck on whichever version was available when you first set everything up?

FYI this is what is listed on the sales sheet the ATT rep gave me:

[PhilipDAth]

I can't speak for AT&T.

What I can tell you is that for my customers I sell them a "term" based AnyConnect subscription that matches their Meraki subscription.  These kinds of licences automatically include a support contract.  When I get the contract from Cisco I forward it onto my customer.

My customers are then fully entitled to use AnyConnect and can download the latest software from Cisco directly.  They can also ask me to download it on their behalf.

SWG is a Cisco Umbrella.
https://umbrella.cisco.com/products/secure-web-gateway

Cisco Umbrella does also offer a remote access solution (which does not use the MX option), called Secure Connect.  SecureConnect includes an engine that can do client updates automatically.

https://www.cisco.com/c/en/us/products/plus-as-a-service/secure-connect.html

It is not clear to me from your screenshot above which remote access solution you have been sold.  I would go back to AT&T and ask about how you get SRA configured (or even which solution it is that you have bought), and how you are meant to get software updates.

[from_afar]

Thanks. Did you mean Secure Client? It looks like Cisco references "Secure Connect" as an umbrella term for their SASE and SD-Wan solutions:

That looks like the same page, and the Meraki devices and the software running on them that provide SASE/SD-Wan do indeed auto-update, but this is different than the VPN client. The VPN client is (was) AnyConnect which they are renaming or replacing with Secure Client. This is what I can't download or get to update. 

Thanks again for the help. I've sent several follow-up emails to my AT&T salesman informing him everything I've heard from here, Cisco and Meraki support, etc. and it's been radio silence for several days (once again--this is typical).

[PhilipDAth]

No, I meant Secure Connect.

The invoice you have from AT&T does not make it clear to me what you have bought.