Download Dart Cisco Anyconnect ((BETTER))
Mike Henderson
"During AnyConnect uinstallation, the user is prompted for administrator credentials to approve the system extension deactivation. On macOS 12 and later, the AnyConnect system extension can be silently removed after deploying a management profile with the addition of SystemExtensions payload to the RemovableSystemsExtensions property. This property must contain the bundle identifier of the AnyConnect system extension (com.cisco.anyconnect.macos.acsockext)."
Cisco AnyConnect Diagnostics and Reporting Tool is developed by Cisco Systems, Inc. and is used by 138 users of Software Informer. The most popular versions of this product among our users are: 3.0, 3.1 and 4.1. The names of program executable files are DartOffline.exe, dartcli.exe and rundll32.exe. The product will soon be reviewed by our informers.
I never (not yet?) figured out how to get the Cisco anyconnect software to run via script with command-line parameters sufficient for its running without having to type in your username (UCINetID) and password. I looked into the vpn command / executable supplied by Cisco (in the anyconnect-predeploy package) and running -h on it does not give much help.
Pascal researched and found that the error, anyconnect was not able to establish a connection to the specified secure gateway is a known problem with Cisco clients before version 4, when these earlier clients are installed on Ubuntu 16.04+. The solution is either to downgrade your Ubuntu, or upgrade your Cisco client. At my university we have upgraded to offering version 4 (anyconnect-predeploy-linux-64-4.3.05017-k9.tar.gz), and this supposedly works with the newer Ubuntus. I did not myself test the new version 4 Anyconnect client with Ubuntus 15.x and 16.x. But I have tested it today (April 27 2017) with my Ubuntu 17.04 system, and it works great.
We managed to get somewhere with Support this afternoon. It looks like a fix is to deploy an XML Profile Settings file. This is generated using Cisco's AnyConnect Profile Editor software, "tools-anyconnect-win-4.5.04029-profileeditor-k9"
In the Profile Editor, there are two settings that needed configured:
As per the official Cisco Release Note, there is no known compatibility issue between AnyConnect and Traps: _client/anyconnect/anyconnect49/administration/gui... however, Cisco recommends to exclude the below folders from any 3rd party security product:
AnyConnect and Secure Client both install resources in /opt. The main change here is that where AnyConnect used /opt/cisco/anyconnect and /opt/cisco/hostscan, Secure Client uses /opt/cisco/secureclient. /opt/cisco/hostscan is moved to /opt/cisco/secureclient/securefirewallposture.
The new /opt paths changes the path of every built-in uninstall script but none so more than
/opt/cisco/anyconnect/bin/anyconnect_uninstall.sh
which is now
/opt/cisco/secureclient/bin/cisco_secure_client_uninstall.sh
(Ok I write that and then I realize that
/opt/cisco/hostscan/bin64/posture_uninstall.sh
is now
/opt/cisco/secureclient/securefirewallposture/bin64/posture_uninstall.sh)