Cisco AnyConnect Logo

Cisco AnyConnect Umbrella Installation without VPN module

Problem

When trying to push out the latest version of Cisco AnyConnect Umbrella to your desktop computers, you may find that you have to install the Cisco AnyConnection VPN & Core modules as prerequisites.

This can then cause an issue as you do not want your desktop computers that are internal in your office to have the VPN module. What you need is to be able to install the Cisco AnyConnect Core module without the VPN module also getting installed.

Resolution

To fix this problem, all you need to do is to add some parameters to your installation command line. This should work if you are using SCCM, Group Policy or just running a manual installation.

Installation Parameters

The installation parameters you should use for each module is as below:

Cisco AnyConnect VPN & Core Module

msiexec /package anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* vpninstall.log

Where:

  • anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • vpninstall.log – Installation log filename

Cisco AnyConnect Umbrella Module

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* umbrellainstall.log

Where:

  • anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • umbrellainstall.log – Installation log filename

Conclusion

By using these installation parameters, you will now see that the Cisco AnyConnect Core module has installed but not the VPN module. This then allows you to install the Umbrella module without installing a VPN client on a server or desktop machine.

FAQ’s

What does VPN mean?

VPN stands for Virtual Private Network.

Where does the log file get created?

You can enter your own log file path in front of the filename and it will get created there. However, if you leave it without a file path, then it will be created in the root of the installation location.

What are parameters?

Parameters are a selection of commands that you add to an installation command line to tell the installer what to do.

Will this work with other Cisco Anyconnect Modules?

Yes, if you only want to install the Cisco AnyConnect Core module for DaRT as an example, then yes this will work in the same way.

Related Posts

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.