Cisco Cisco ScanSafe Web Filtering

Cisco CWS

– AnyConnect Web Security Deployment Guide

Test

Deploy

Prepare

*Note: if DETECT_LAPTOP is disabled (i.e. DETECT_LAPTOP=0) Then the getchassistype.vbs and
detectlaptop.vbs scripts are not required.

TEST_MODE- when enabled and run from a command line, the installation script will print what options are
enabled and what mode the script will run in. This can be a good place to start troubleshooting if the
installation does not occur. Note that when this option is enabled, the installation script will not install the
AnyConnect Web Security client.

For the purpose of this example and most proof of concepts, the default values of these options will
suffice.

Step 1:

Open Group Policy Manager and create a Group Policy object to deploy the AnyConnect

Web Security Client. If you would like to simply get the AnyConnect Web Security client installed on a
workstation to start testing the client itself, log on to the testing system as administrator and run the
installation script.

Step 2:

Right click on the Group Policy Objects folder and select View. Provide a friendly name for

this Group Policy object, such as AnyConnect Web Security.

Step 3:

Select the newly created Group Policy object. Notice that the Group Policy object is not yet

linked to an OU or Domain Object, and the security filter is set to its default group Authenticated
Users.

Step 4:

Right click on the Group Policy object and select Edit. Drill down into Computer

ConfigurationWindows SettingsScriptsStartup.

Step 5:

Click Add. Click Browse.

Step 6:

To get the UNC path, go through My Network PlacesEntire NetworkMicrosoft Windows

Network. Choose the domain and select the computer hosting the AnyConnect Web Security
installation point.

Step 7:

Continue to browse through the installation point and select the installation script. Notice that

the path is in UNC format and is pointing to the installation script.

Figure 2.15