Cisco Cisco ScanSafe Secure Mobility
Cisco CWS
– AnyConnect Web Security Deployment Guide
19
Test
Deploy
Prepare
*Note: if DETECT_LAPTOP is disabled (i.e. DETECT_LAPTOP=0) Then the getchassistype.vbs and
detectlaptop.vbs scripts are not required.
detectlaptop.vbs scripts are not required.
TEST_MODE- when enabled and run from a command line, the installation script will print what options are
enabled and what mode the script will run in. This can be a good place to start troubleshooting if the
installation does not occur. Note that when this option is enabled, the installation script will not install the
AnyConnect Web Security client.
enabled and what mode the script will run in. This can be a good place to start troubleshooting if the
installation does not occur. Note that when this option is enabled, the installation script will not install the
AnyConnect Web Security client.
For the purpose of this example and most proof of concepts, the default values of these options will
suffice.
suffice.
Step 1:
Open Group Policy Manager and create a Group Policy object to deploy the AnyConnect
Web Security Client. If you would like to simply get the AnyConnect Web Security client installed on a
workstation to start testing the client itself, log on to the testing system as administrator and run the
installation script.
workstation to start testing the client itself, log on to the testing system as administrator and run the
installation script.
Step 2:
Right click on the Group Policy Objects folder and select View. Provide a friendly name for
this Group Policy object, such as AnyConnect Web Security.
Step 3:
Select the newly created Group Policy object. Notice that the Group Policy object is not yet
linked to an OU or Domain Object, and the security filter is set to its default group Authenticated
Users.
Users.
Step 4:
Right click on the Group Policy object and select Edit. Drill down into Computer
ConfigurationWindows SettingsScriptsStartup.
Step 5:
Click Add. Click Browse.
Step 6:
To get the UNC path, go through My Network PlacesEntire NetworkMicrosoft Windows
Network. Choose the domain and select the computer hosting the AnyConnect Web Security
installation point.
installation point.
Step 7:
Continue to browse through the installation point and select the installation script. Notice that
the path is in UNC format and is pointing to the installation script.
Figure 2.15