Cisco Cisco AnyConnect Secure Mobility Client v4.x Release Notes
• If you are using Network Access Manager on a system that supports standby, Cisco recommends that the default Windows 8.x
association timer value (5 seconds) is used. If you find the Scanlist in Windows appears shorter than expected, increase the
association timer so that the driver can complete a network scan and populate the scanlist.
association timer so that the driver can complete a network scan and populate the scanlist.
Windows Guidelines
• Verify that the driver on the client system is supported by Windows 7 or 8. Drivers that are not supported may have intermittent
connection problems.
• For Network Access Manager, machine authentication using machine password will not work on Windows 8 or 10 / Server
2012 unless a registry fix described in Microsoft KB 2743127 (
) is applied to the client
desktop. This fix includes adding a DWORD value LsaAllowReturningUnencryptedSecrets to the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa registry key and setting this value to 1. This change permits
Local Security Authority (LSA) to provide clients like Cisco Network Access Manager with the Machine password. It is related
to the increased default security settings in Windows 8 or 10 / Server 2012. Machine authentication using Machine certificate
does not require this change and will work the same as it worked with pre-Windows 8 operating systems.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa registry key and setting this value to 1. This change permits
Local Security Authority (LSA) to provide clients like Cisco Network Access Manager with the Machine password. It is related
to the increased default security settings in Windows 8 or 10 / Server 2012. Machine authentication using Machine certificate
does not require this change and will work the same as it worked with pre-Windows 8 operating systems.
Machine authentication allows a client desktop to be authenticated to the network before
the user logs in. During this time the administrator can perform scheduled administrative
tasks for this client machine. Machine authentication is also required for the EAP
Chaining feature where a RADIUS server can authenticate both the User and Machine
for a particular client. This will result in identifying company assets and applying
appropriate access policies. For example, if this is a personal asset (PC/laptop/tablet),
and a corporate credentials are used, the endpoint will fail Machine authentication, but
succeed User authentication and the proper network access restrictions are applied to
the user's network connection.
the user logs in. During this time the administrator can perform scheduled administrative
tasks for this client machine. Machine authentication is also required for the EAP
Chaining feature where a RADIUS server can authenticate both the User and Machine
for a particular client. This will result in identifying company assets and applying
appropriate access policies. For example, if this is a personal asset (PC/laptop/tablet),
and a corporate credentials are used, the endpoint will fail Machine authentication, but
succeed User authentication and the proper network access restrictions are applied to
the user's network connection.
Note
• On Windows 8, the Export Stats button on the Preferences > VPN > Statistics tab saves the file on the desktop. In other versions
of Windows, the user is asked where to save the file.
• AnyConnect VPN is compatible with 3G data cards which interface with Windows 7 or later via a WWAN adapter.
AnyConnect Support for Linux
Linux Requirements
• x86 instruction set.
• 64-bit processor.
• 32 MB RAM.
• 20 MB hard disk space.
• Superuser privileges are required for installation.
• libstdc++ users must have libstdc++.so.6(GLIBCXX_3.4) or higher, but below version 4.
• Java 5 (1.5) or later. The only version that works for web installation is Sun Java. You must install Sun Java and configure your
browser to use that instead of the default package.
• zlib - to support SSL deflate compression
10