Cisco Anyconnect Jamf

Posted on  by



ComTech will be updating the macOS version of Cisco Anyconnect VPN delivered automatically to all clients when they connect some time in late Feb or early March 2021. The current version available for update in Jamf Pro is 4.9.06037 and the package name is NCSU-Campus-CiscoSecureAnyConnect4.9.06037.pkg. The Cisco AnyConnect provides more than just VPN it can also provide endpoint software services. It also offers enhanced security through various built-in modules. These modules provide services that include compliance through the VPN and Cisco Identity Services Engine (ISE) posture along with web security, network visibility, off-network protection, and the Network Access Manager.

Big Sur is here and there is a lot of changes under the hood. One of them is the switch from Kernel Extensions to System Extensions. It has been a while since the Kernel Extensions are deprecated but now, time is over, they are not supported anymore.

AnyconnectAnyconnect

Download AnyConnect DMG from Cisco. Extract AnyConnect.pkg from DMG to your Desktop. Run the following commands in Terminal: mkdir AnyConnectVPN pkgutil -expand AnyConnect.pkg AnyConnect cp -r AnyConnect/vpnmodule.pkg./ cp -r vpnmodule.pkg/. AnyConnectVPN/ pkgutil -flatten AnyConnectVPN AnyConnectVPN.pkg rm -r./AnyConnect.pkg./AnyConnect. Jamf Pro - Installing Prisma GlobalProtect VPN client Overview. The Prisma GlobalProtect VPN client is available for deployment in Jamf Pro. There are two versions available to deploy: the default installer and a customized on-demand installer.

So as a Jamf admin, you’ll have to do some changes if you have already allowed some kernel extensions, for example for an antivirus or VPN.

Download asphalt 8 online. Let’s see how we can allow these system extensions, and avoid popups like this to your users.

Here we have a Configuration Profile, used to allow Cisco Anyconnect VPN on a macOS 10.15

As you can see, I’ve just provided the Team ID and it was good. But with Big Sur, it’s not enough. You’ll have to give the exact name of each System Extension. Here is the macOS 11 version of the same CP :

As you can see, I had to provide the full name of the allowed System Extension. Download nora roberts for free version 1.0. But how do we find it ?

You can use this spreadsheet, filled by the community. But, as everyone can edit, you can’t be sure the data are accurate. And as you should not have to do it more than one or two times a year, I recommend to use the manual way.

Free

First, on a test Mac, install the software and approve manually the System Extension. Then open a terminal and type

Here we have the name of our System Extension that you’ve allowed before. You can now fill your Configuration Profile with the informations needed. Be careful to choose System Extension and not Approved Kernel Extensions.

Cisco Anyconnect Jamf

Overview

The Prisma GlobalProtect VPN client is available for deployment in Jamf Pro. There are two versions available to deploy: the default installer and a customized on-demand installer. Peachtree accounting software.

The customized installer has a few enhancements that are useful for automated deployment:

  • It is preconfigured with the MIT portal URL.
  • The installer is silent and will not auto-launch on installation.
  • It will not attempt to auto-connect on each login. Users will instead need to launch it from /Applications to connect, similar to using the Cisco AnyConnect client.

You can find the latest customized installer in Jamf Pro under the name 'GlobalProtect on-demand-<version-number>.pkg'.

The default installer is also available under the name 'GlobalProtect-<version-number>.pkg'. This is the same package you would get from the Software Grid.

Installing GlobalProtect with Jamf Pro

The End User Computing (EUC) team maintains a policy to install the latest supported version of GlobalProtect with a simple custom trigger. To use this in your site, follow these steps:

Cisco Anyconnect Jamf Pro

  • Create a new policy.
  • Set the scope and triggers as appropriate for your site.
  • Scroll down to the 'Files and Processes' payload and click Configure.
  • In the 'Execute Command' field, enter `sudo jamf policy -event euc-install-globalprotect`.
  • Optional: in the Maintenance payload, click Configure and check the Update Inventory box.

This will install silently and is preconfigured with MIT's portal URL.

Self Service installation

The latest supported version of GlobalProtect is available in Self Service on all computers enrolled in Jamf Pro. This will install the customized package with the portal URL preconfigured.

Cisco Anyconnect 4.9 Jamf

See Also

Cisco Anyconnect Download Windows 10

Have Questions or Still Need Help?

Cisco Anyconnect Log In

Contact the End User Computing team at euc-help@mit.edu