Cisco AnyConnect Umbrella Installation without VPN module

Cisco AnyConnect Logo


When trying to push out the latest version of Cisco AnyConnect Umbrella to your desktop computers, you may find that you have to install the Cisco AnyConnection VPN & Core modules as prerequisites.

This can then cause an issue as you do not want your desktop computers that are internal in your office to have the VPN module. What you need is to be able to install the Cisco AnyConnect Core module without the VPN module also getting installed.


To fix this problem, all you need to do is to add some parameters to your installation command line. This should work if you are using SCCM, Group Policy or just running a manual installation.

Installation Parameters

The installation parameters you should use for each module is as below:

Cisco AnyConnect VPN & Core Module

msiexec /package anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* vpninstall.log


  • anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • vpninstall.log – Installation log filename

Cisco AnyConnect Umbrella Module

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* umbrellainstall.log


  • anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • umbrellainstall.log – Installation log filename


By using these installation parameters, you will now see that the Cisco AnyConnect Core module has installed but not the VPN module. This then allows you to install the Umbrella module without installing a VPN client on a server or desktop machine.


What does VPN mean?

VPN stands for Virtual Private Network.

Where does the log file get created?

You can enter your own log file path in front of the filename and it will get created there. However, if you leave it without a file path, then it will be created in the root of the installation location.

What are parameters?

Parameters are a selection of commands that you add to an installation command line to tell the installer what to do.

Will this work with other Cisco Anyconnect Modules?

Yes, if you only want to install the Cisco AnyConnect Core module for DaRT as an example, then yes this will work in the same way.

How useful was this post?

Click on a star to rate it!

Average rating / 5. Vote count:

No votes so far! Be the first to rate this post.

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?

Feedback is critical to our site so please, if this has helped you out, give the article a star rating above, it only takes one click! Thank You!

About A.J. Armstrong

Founder of TechyGeeksHome and Head Editor for over eight years! IT expert in multiple areas for over 21 years. Sharing experience and knowledge whenever possible! Making IT Happen.

View all posts by A.J. Armstrong

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.