Cisco Cisco AnyConnect Secure Mobility Client v3.x Release Notes
14
Release Notes for Cisco AnyConnect Secure Mobility Client, Release 3.0
New Features in Release 3.0.3050
LZS Compression
Cisco now supports compression for DTLS and TLS on AnyConnect 3.0.3050 or later. Each tunneling
method configures compression separately, and the preferred configuration is to have both SSL and
DTLS compression as LZS. You enable compression in the webvpn submode of the group policy and
username configuration modes. This feature enhances migration from the legacy VPN clients.
method configures compression separately, and the preferred configuration is to have both SSL and
DTLS compression as LZS. You enable compression in the webvpn submode of the group policy and
username configuration modes. This feature enhances migration from the legacy VPN clients.
You must have ASA release 8.4.2.8 or later for support of the LZS compression feature. Also, to take
advantage of TLS/DTLS data compression in a Linux or Mac, your PC must have libz.so or comparable
to propose the compression.
advantage of TLS/DTLS data compression in a Linux or Mac, your PC must have libz.so or comparable
to propose the compression.
Using data compression on high-speed remote access connections passing highly compressible data
requires significant processing power on the ASA. With other activity and traffic on the ASA, the
number of sessions that can be supported on the platform is reduced.
requires significant processing power on the ASA. With other activity and traffic on the ASA, the
number of sessions that can be supported on the platform is reduced.
New Features in Release 3.0.3050
The following sections describe the new features in AnyConnect 3.0.3050:
•
•
Global Site Selector
The AnyConnect VPN client is now compatible with Global Site Selector (GSS) devices. No client-side
configuration is required to take advantage of this capability; however, the end user must have the
capability to write to the system Hosts file. When you point the client at the fully qualified domain name
(FQDN) answered to the GSS, the devices provide DNS performance improvements through load
balancing mechanisms. For GSS support, server certificate verifications must occur at the outset of
authentication, including SSL handshakes performed in API, downloader, and agent.
configuration is required to take advantage of this capability; however, the end user must have the
capability to write to the system Hosts file. When you point the client at the fully qualified domain name
(FQDN) answered to the GSS, the devices provide DNS performance improvements through load
balancing mechanisms. For GSS support, server certificate verifications must occur at the outset of
authentication, including SSL handshakes performed in API, downloader, and agent.
Mac OS X v10.7 Support
AnyConnect 3.0.3050 provides support for Mac OS X v10.7.Without the appropriate Java and Web
applet, OS X users may experience CSCtq62860 or CSCto09628. You must install Java and enable the
appropriate Applet plug-in and web start applications using these steps:
applet, OS X users may experience CSCtq62860 or CSCto09628. You must install Java and enable the
appropriate Applet plug-in and web start applications using these steps:
Step 1
Open the Java Preferences when performing Hostscan or Weblaunch with Safari with Mac OS X v10.7.
Step 2
If Java is not already installed, you are prompted to do so.
Step 3
Check the Enable applet plug-in and Web Start applications option.