Last updated on March 19th, 2023 at 04:42 pm
Problem
When trying to push out the latest version of Cisco AnyConnect Umbrella to your desktop computers, you may find that you have to install the VPN & Core modules as prerequisites.
This can then cause an issue as you do not want your desktop computers that are internal in your office to have the VPN module. What you need is to be able to install the Cisco Core module without the VPN module also getting installed.
Resolution
To fix this problem, all you need to do is to add some parameters to your installation command line. This should work if you are using SCCM, Group Policy or just running a manual installation.
Installation Parameters
The installation parameters you should use for each module is as below:
Cisco AnyConnect VPN & Core Module
msiexec /package anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* vpninstall.logWhere:
- anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi – MSI filename
- PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
- vpninstall.log – Installation log filename
Cisco Umbrella Module
msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* umbrellainstall.logWhere:
- anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi – MSI filename
- PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
- umbrellainstall.log – Installation log filename
Conclusion
By using these installation parameters, you will now see that the module has installed but not the VPN module. This then allows you to install the Umbrella module without installing a VPN client on a server or desktop machine.
FAQ’s
What does VPN mean?
VPN stands for Virtual Private Network.
Where does the log file get created?
You can enter your own log file path in front of the filename and it will get created there. However, if you leave it without a file path, then it will be created in the root of the installation location.
What are parameters?
Parameters are a selection of commands that you add to an installation command line to tell the installer what to do.
Will this work with other Cisco Modules?
Yes, if you only want to install the Cisco Core module for DaRT as an example, then yes this will work in the same way.
