Cisco Cisco AnyConnect Secure Mobility Client v3.x Release Notes
Release Notes for Cisco AnyConnect Secure Mobility Client, Release 3.1
Important AnyConnect 3.1 and ASA 9.0 Interoperability Considerations
5
Cisco Secure Desktop Deprecation.
Note:
Pre-login assessment and returning certificate information is not available. HostScan is not an authentication
method; it simply checks to verify what exists on the device attempting to connect.
Important AnyConnect 3.1 and ASA 9.0 Interoperability
Considerations
Considerations
The following AnyConnect features require ASA 9.0 or later, or ASDM 7.0 or later, to be installed on your ASA for
them to be effective:
them to be effective:
IPv6 Support for AnyConnect VPN Features
Next Generation Encryption as it applies to VPN
Deferred Upgrades
Installation Overview
AnyConnect integrates the following modules into the AnyConnect client package:
Network Access Manager
Host Scan
Web Security
DART
If you are using the ASA to deploy AnyConnect, the ASA can deploy all the optional modules. If pre-deploying
using your SMS, you can deploy all modules, but you must pay special attention to the module installation
sequence and other details.
using your SMS, you can deploy all modules, but you must pay special attention to the module installation
sequence and other details.
AnyConnect shares its Host Scan component with Cisco Secure Desktop (CSD). The stand-alone Host Scan
package for AnyConnect provides the same features as the Host Scan package that is part of CSD. The
AnyConnect client can co-exist with Cisco Secure Desktop Vault, but it cannot be run or deployed from inside the
Vault.
package for AnyConnect provides the same features as the Host Scan package that is part of CSD. The
AnyConnect client can co-exist with Cisco Secure Desktop Vault, but it cannot be run or deployed from inside the
Vault.
Every release of AnyConnect includes a localization MST file that administrators can upload to the ASA whenever
they upload AnyConnect packages with new software. If you are using our localization MST files, make sure to
update them with the latest release from CCO whenever you upload a new AnyConnect package.
they upload AnyConnect packages with new software. If you are using our localization MST files, make sure to
update them with the latest release from CCO whenever you upload a new AnyConnect package.
For more information about deploying the AnyConnect modules, see the
Upgrading 3.1 MR12 AnyConnect Clients/Incompatibility Issues
Once AnyConnect 3.1.12020 has been automatically deployed to an endpoint, you cannot connect to a secure
gateway configured with AnyConnect versions 4.0, 4.1, 4.1MR2, or 4.1MR4, which are incompatible. If you try to
upgrade from the AnyConnect 3.1 MR12 version to any version other than AnyConnect 4.1MR8, 4.2, or 3.1
versions later than 3.1.12020, you will receive a notification that the upgrade is not allowed.
gateway configured with AnyConnect versions 4.0, 4.1, 4.1MR2, or 4.1MR4, which are incompatible. If you try to
upgrade from the AnyConnect 3.1 MR12 version to any version other than AnyConnect 4.1MR8, 4.2, or 3.1
versions later than 3.1.12020, you will receive a notification that the upgrade is not allowed.
Refer to CSCuv12386 for further information.