Cisco Cisco AnyConnect Secure Mobility Client v4.x Release Notes
On Windows 8, starting Internet Explorer from the Windows start screen runs the 64-bit version. Starting
from the desktop runs the 32-bit version.
from the desktop runs the 32-bit version.
Note
AnyConnect Support Policy
Cisco supports all non-beta AnyConnect software versions available on the Cisco AnyConnect VPN Software Download site; however,
we provide fixes and enhancements only in maintenance or features releases based on the most recently released version.
we provide fixes and enhancements only in maintenance or features releases based on the most recently released version.
For information about when releases are no longer supported, see
Guidelines and Limitations
Win32 Limitation With Connected Standby
Because AnyConnect is a Win32 (not a Windows store) application, we have limitations with Microsoft regarding privileges; therefore,
AnyConnect cannot provide access to the Connected Standby (suspend and resume events) status in Windows 8 and later.
AnyConnect cannot provide access to the Connected Standby (suspend and resume events) status in Windows 8 and later.
No ISE Posture Remediation from Symantec AV 12.1.X
Because of architectural changes in Symantec products, ISE posture cannot support remediation from Symantec AV 12.1.x and
onwards.
onwards.
Microsoft Phasing out SHA-1 Support
A secure gateway with a SHA-1 certificate or a certificate with SHA-1 intermediate certificates may no longer be considered valid
by a Windows Internet Explorer 11 / Edge browser or a Windows AnyConnect endpoint until February 14, 2017. After February 14,
2017, Windows endpoints may no longer consider a secure gateway with a SHA-1 certificate or intermediate certificate as trusted.
We highly recommend that your secure gateway does not have a SHA-1 identity certificate and that any intermediate certificates are
not SHA-1.
by a Windows Internet Explorer 11 / Edge browser or a Windows AnyConnect endpoint until February 14, 2017. After February 14,
2017, Windows endpoints may no longer consider a secure gateway with a SHA-1 certificate or intermediate certificate as trusted.
We highly recommend that your secure gateway does not have a SHA-1 identity certificate and that any intermediate certificates are
not SHA-1.
Microsoft has made modifications to their original plan of record and timing. They have published details for how to
. Cisco is not able to make any guarantees of correct AnyConnect
operation for customers with SHA-1 secure gateway or intermediate certificates or running old versions of AnyConnect.
Cisco highly recommends that customers stay up to date with the current maintenance release of AnyConnect in order to ensure that
they have all available fixes in place. The most up-to-date version of AnyConnect 4.x and beyond are available
they have all available fixes in place. The most up-to-date version of AnyConnect 4.x and beyond are available
for customers with active AnyConnect Plus, Apex, and VPN Only terms/contracts.
and should no longer be used for any deployments.
14