This article will cover the basics of installing the AnyConnect RSM (roaming security module) for users who do not currently use AnyConnect for VPN.
If you are already an AnyConnect VPN user - see our deployment guide at https://docs.umbrella.com/deployment-umbrella/docs/anyconnect-umbrella-roaming-security-client-administrator-guide.
The AnyConnect client is deployed with a multi-file installer pre-deploy file. Pre-deploy refers to a deployment not being pushed from a VPN head end.
To start, you will need a ZIP copy of the AnyConnect pre-deploy files. For a first install, open the Setup executable. Then, select the following modules:
- Core & VPN
- Umbrella Roaming Security
- Diagnostics and Reporting Tool (DART)
Ensure that all three are selected. If deploying via MSI or other mass deploy means, deploy the core MSI followed by roaming and DART. The Core and Roaming modules must both be installed for the client to function.
Deployments without the VPN module
VPN is tied in with the core; however, it is possible to install the core without VPN. For these steps, see https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-amp-core-without-vpn-module/td-p/4064215.
Migrating from standalone roaming client?
If the standalone roaming client has been in your deploy plans, ensure it is removed from your deployment service prior to installing AnyConnect. If the standalone client is installed on the same machine as AnyConnect - only one may operate at any point in time and the other will remain in error. Both clients simultaneously is unsupported at this time.