Cisco AnyConnect Umbrella Installation without VPN module



When trying to push out the latest version of Cisco AnyConnect Umbrella to your desktop computers, you may find that you have to install the VPN & Core modules as prerequisites.

This can then cause an issue as you do not want your desktop computers that are internal in your office to have the VPN module. What you need is to be able to install the Cisco Core module without the VPN module also getting installed.


To fix this problem, all you need to do is to add some parameters to your installation command line. This should work if you are using SCCM, Group Policy or just running a manual installation.

Installation Parameters

The installation parameters you should use for each module is as below:

Cisco AnyConnect VPN & Core Module

msiexec /package anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* vpninstall.log


  • anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • vpninstall.log – Installation log filename

Cisco Umbrella Module

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* umbrellainstall.log


  • anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • umbrellainstall.log – Installation log filename


By using these installation parameters, you will now see that the module has installed but not the VPN module. This then allows you to install the Umbrella module without installing a VPN client on a server or desktop machine.


What does VPN mean?

VPN stands for Virtual Private Network.

Where does the log file get created?

You can enter your own log file path in front of the filename and it will get created there. However, if you leave it without a file path, then it will be created in the root of the installation location.

Recommended...  Our 1000th Post!

What are parameters?

Parameters are a selection of commands that you add to an installation command line to tell the installer what to do.

Will this work with other Cisco Modules?

Yes, if you only want to install the Cisco Core module for DaRT as an example, then yes this will work in the same way.

How useful was this post?

Click on a star to rate it!

Average rating / 5. Vote count:

No votes so far! Be the first to rate this post.

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.