Deploy a VPN profile as part of the AnyConnect install?

Solved
mvalpreda
Getting noticed

Deploy a VPN profile as part of the AnyConnect install?

Looking to deploy AnyConnect to users, but trying to avoid having the users have to configure anything themselves. I tried creating a profile with the AnyConnect Profile Editor, put the .XML file into %ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile but not seeing it in the drop down in the AnyConnect client.

 

Eventually going to do a silent install and then push the .XML file, but want to get it working manually first. Just can't get the profile in the drop down...

 

Am I doing something wrong or what am I missing?

1 Accepted Solution
alemabrahao
Kind of a big deal
Kind of a big deal

Save in this path: C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

View solution in original post

7 Replies 7
alemabrahao
Kind of a big deal
Kind of a big deal

It is a local configuration in the workstation. Here is an example:

 

 

 

 

 

<?xml version="1.0" encoding="UTF-8"?>

<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">

<ServerList>

<HostEntry>

<User>Pandiyan</User>

<HostName>MyHost</HostName>

<HostAddress>local.pandiyan.com</HostAddress>

</HostEntry>

</ServerList>

<ServerList>

<HostEntry>

<User>Guest</User>

<HostName>MyGuest</HostName>

<HostAddress>guest.pandiyan.com</HostAddress>

</HostEntry>

</ServerList>

</AnyConnectProfile>

 

 

 

Save with name Profile.xml

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
alemabrahao
Kind of a big deal
Kind of a big deal

Save in this path: C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
mvalpreda
Getting noticed

Thanks, had the wrong folder!

PhilipDAth
Kind of a big deal
Kind of a big deal

You don't see it till the AnycConnect GUI has been restarted.

 

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile is a valid location for the profile.

 

I wrote an online profile editor a long time ago ...

https://www.ifm.net.nz/cookbooks/online-anyconnect-profile-editor.html 

alemabrahao
Kind of a big deal
Kind of a big deal

This is the old path, now the xml is in this path.

 

C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

Got it - it should now be:

%ProgramData%\Cisco\Cisco Secure Client\VPN\Profile

 

You can't rely on ProgramData being located at c:\ProgramData.

amabt
Building a reputation

I've had case where it seems not to pick up the config file (in the new location). This is for when the AnyConnect Client was previously installed.

Get notified when there are additional replies to this discussion.