Cisco Cisco AnyConnect Secure Mobility Client v4.x
• You must upgrade to ASA 9.2(1) if you want to use the following features:
◦ISE Posture over VPN
◦ISE Deployment of AnyConnect 4.x
◦Change of Authorization (CoA) on ASA is supported from this version onwards
• You must upgrade to ASA 9.0 if you want to use the following features:
◦IPv6 support
◦Cisco Next Generation Encryption “Suite-B” security
◦AnyConnect client deferred upgrades
• You must use ASA 8.4(1) or later if you want to do the following:
◦Use IKEv2.
◦Use the ASDM to edit non-VPN client profiles (such as Network Access Manager, Web Security, or Telemetry).
◦Use the services supported by a Cisco IronPort Web Security Appliance. These services let you enforce acceptable use
policies and protect endpoints from websites found to be unsafe, by granting or denying all HTTP and HTTPS requests.
◦Deploy firewall rules. If you deploy always-on VPN, you might want to enable split tunneling and configure firewall rules
to restrict network access to local printing and tethered mobile devices.
◦Configure dynamic access policies or group policies to exempt qualified VPN users from an always-on VPN deployment.
◦Configure dynamic access policies to display a message on the AnyConnect GUI when an AnyConnect session is in
quarantine.
ASA Memory Requirements
The minimum flash memory recommended for all ASA 5500 models using AnyConnect 4.0 or later is
512MB. This will allow hosting of multiple endpoint operating systems, and logging and debugging to
be enabled on the ASA.
512MB. This will allow hosting of multiple endpoint operating systems, and logging and debugging to
be enabled on the ASA.
Due to flash size limitations on the ASA 5505 (maximum of 128 MB), not all permutations of the
AnyConnect package will be able to be loaded onto this model. To successfully load AnyConnect, you
will need to reduce the size of your packages (i.e. fewer OSs, no host Scan, etc,) until they fit on the
available flash.
AnyConnect package will be able to be loaded onto this model. To successfully load AnyConnect, you
will need to reduce the size of your packages (i.e. fewer OSs, no host Scan, etc,) until they fit on the
available flash.
Caution
Check for the available space before proceeding with the AnyConnect install or upgrade. You can use one of the following methods
to do so:
to do so:
• CLI—Enter the show memory command.
asa3# show memory
Free memory:
Free memory:
304701712 bytes (57%)
Used memory:
232169200 bytes (43%)
-------------
----------------
Total memory:
536870912 bytes (100%)
• ASDM—Choose Tools > File Management. The File Management window displays flash space.
6