Hi guys
We have umbrella and cisco endpoint, we don’t use anyconnect.
Both are good products in my opinion, cisco umbrella roaming client is about to EOL so I started to look into the new cloud deployed agent but it forces anyconnect on me, even if try to uninstall just anyconnect, it takes umbrella client with it.
Is it the only path? even if anyconnect was just silent, but it appears in the gui and as corporate thats just annoying.
Advice welcomed.
If you are deploying using some MDM tools (SCCM/Intune/other), you can specify in the MSI install the PRE_DEPLOY_DISABLE_VPN=1 option. This disables the VPN UI functionality. You still do need to install both the CORE and UMBRELLA MSI, however.
Unless you use the standalone roaming client they will be moving it into the secure client aka AnyConnect.
Secure client is meant to the be base Cisco client for many many tools going forward (Thousand Eyes, Umbrella, Duo, ISE, AMP, etc). VPN just happens to be a part of that but as mentioned in the other comment, you can hide the VPN portion of the client.
Check this article out too: https://support.umbrella.com/hc/en-us/articles/18211951038740-How-to-hide-the-VPN-module-in-Cisco-Secure-Client-Windows
One client to rule them all and in the darkness bind them…
There’s a blog entry on how to do it here too.
https://woland.com/
Old school umbrella client is going away.
Secure client is not anyconnect. AnyConnect is the VPN piece and one of the module within secure client.
to anyone that stumbles on this, the code on that site it out of date and doesnt work. Cisco posted up the new xml required.
Yes I know, for the time being it can be used. Until April 4, 2025
I hear what you are saying and it sounds good and technically you are right. Cisco announced that AnyConnect will be rebranded as Cisco secure client. The module is a part of it. So we are both right.