Cisco Anyconnect

Hello,

We need to have this module Cisco ISE Compliance module available in the catalog.

We already use anyconnect-win-4.9.05042-dart-predeploy-k9, anyconnect-win-4.9.05042-core-vpn-predeploy-k9 and anyconnect-win-4.9.05042-iseposture-predeploy-k9 but anyconnect-win-4.3.1614.6145-isecompliance-predeploy-k9 is missing.

I separate one for each since they can be independent would be best.

Hi Justin,

Do you want us to create a request for each one of the components?

Right now we use the

gina-predeploy

core-vpn-predeploy

iseposture-predeploy

umbrella-predeploy

If you need anyone else for testing, count me in. I can get any version needed for testing.

It will be based on customer feedback. You can add a new idea for each module you would like to request.

when are the other modules being added?

we would also be happy to test it

i would be happy to test as well.  This would be fantastic to have we just need the base client as well.

I'd be happy to help test

I'm changing this back to Noted. We are running some internal tests with the predeploy-k9 component only. Would any of you be able to opt-in with our team to a test of the update on a small group of machines? We need some test data from machines with the VPN configured and have it upgrade using the MSI.

Any responsible for this cisco platform should know the depencies of their env. I manually pack 4 of the components and deploy them with ConfigMgr manually. It would be nice to have this suite of apps in Patch my PC, at that point it would be like patching Java.

I want to chime is as a third on that. We only use the main VPN client file, core-vpn-predeploy-k9. 

I have no issues with extracting that one MSI into a source folder like what we do with Java. After that, it's an MSI like any other.

Agree with Mark, the components (each MSI) do not all hold dependencies on each other, other than the core MSI having to be there.  The others would be add-ons if you will.  So, take Zoom for example, you have Zoom Meetings, but also have two plugins that can be published.  Liken the Anyconnect suite to being the same thing.  Core being the primary, ISE being an add-on, NVM, Gina, diagnostics all being additional add-ons.  The only difference is that they're all included in a single zip that we then extract and pick and choose which ones are right for environment.

We actually only use the core-vpn-predeploy-k9 MSI file, and don't need the others. 

Hey Nick, one issue is the publishing of software updates only support single files. So even if we did do something like JRE, it wouldn't work because the multiple MSI's.

Hey Justin, not sure how this product would be much different than JRE files.  We (the customer) could download the files to our local content repository (these would be MSI's that we would extract from the zip file) and then select for updating.

The Zip file, ConfigMgr in-console publishing can't handle zip, and we only add products that will work via all publishing methods.

@Justin I currently publish Cisco AnyConnect via SCCM without any issues. You merely extract the zip contents, which include a series of MSI files and profile data, into a source folder and pull from there. What was it that you discovered to be the incompatibility here?

Hey Everyone,

Sorry, the windows update schema doesn't support ZIP format. Updates need to be published directly via EXE, MSP, or MSI format. We won't be able to support this product unless the vendor provides a direct MSI format. It also only supports a single file install, so even if the ZIP could be extracted (Only would be available in the publishing service method), it still would be problematic.

msiexec /package anyconnect-win-4.7.01076-core-vpn-predeploy-k9.msi /norestart /passive PRE_DEPLOY_DISABLE_VPN=1 TRANSFORMS=anyconnect-win-disable-customer-experience-feedback.mst /lvx* anyconnect-win-4.7.01076-core-vpn-predeploy-k9-install-datetimestamp.log
msiexec /package anyconnect-win-4.7.01076-nam-predeploy-k9.msi /norestart /passive /lvx* anyconnect-win-4.7.01076-nam-predeploy-k9-install-datetimestamp.log
msiexec /package anyconnect-win-4.7.01076-iseposture-predeploy-k9.msi /norestart /passive /lvx* anyconnect-win-4.7.01076-iseposture-predeploy-k9-install-datetimestamp.log
msiexec /package anyconnect-win-4.7.01076-nvm-predeploy-k9.msi /norestart /passive /lvx* anyconnect-win-4.7.01076-nvm-predeploy-k9-install-datetimestamp.log
xcopy "ProgramFiles\*.*" "%ProgramFiles%" /Y /F /C /E
xcopy "ProgramData\*.*" "%ProgramData%" /Y /F /C /E
exit

msiexec /x {1A68BE0D-4902-444E-AB94-54B79354A719} /norestart /qn
msiexec /x {E959F39D-1441-48A1-9951-8D84355AC21D} /norestart /qn
msiexec /x {22913971-76D6-4311-AA01-F514AE473220} /norestart /qn
msiexec /x {666E92A6-A5B1-4E35-878A-2E218536A3B2} /norestart /qn
rd /s /q "%ProgramFiles%\Cisco\Cisco AnyConnect Secure Mobility Client"
rd /s /q "%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client"
exit

We will evaluate these soon. Any chance any of you who have packaged this as an application and could provide some of the details mentioned here https://patchmypc.com/forum/index.php?topic=2790.0