AnyConnect

COMPATIBLE DEVICES:

Android 4.X+

KNOWN ISSUES:

- The AnyConnect icon in the notification tray is unusually large. This is a limitation with the VPN Framework.

- Some freezes are known to occur on the Diagnostics screen

- Split DNS is not available on Android 7.x/8.x (OS limitation)

LIMITATIONS:

The following features are not supported using this package:

- Filter Support

- Trusted Network Detection

- Split Exclude

- Local LAN Exception

- Secure Gateway Web Portal (inaccessible when tunneled)

APPLICATION DESCRIPTION:

AnyConnect provides reliable and easy-to-deploy encrypted network connectivity from devices by delivering persistent corporate access for users on the go. Whether providing access to business email, a virtual desktop session, or most other Android applications, AnyConnect enables business-critical application connectivity.

The Cisco Umbrella module for AnyConnect on Android provides DNS-layer protection for Android v6.0.1 and later and can be enabled with or without an AnyConnect license

LICENSING AND INFRASTRUCTURE REQUIREMENTS:

This software is licensed for exclusive use by Cisco headend customers with active Plus, Apex or VPN Only licenses (term or perpetual with active SASU contracts). Use is no longer permitted with Essentials/Premium with Mobile license. AnyConnect use with non-Cisco equipment/software is prohibited.

http://www.cisco.com/c/dam/en/us/products/security/anyconnect-og.pdf

Trial AnyConnect Apex (ASA) licenses are available for administrators at www.cisco.com/go/license

AnyConnect for Android requires Cisco Adaptive Security Appliance (ASA) Boot image 8.0(4) or later. For licensing questions and evaluation licenses, please contact ac-temp-license-request (AT) cisco.com and include a copy of "show version" from your Cisco ASA.

Umbrella licenses are required for the Umbrella module on AnyConnect. Click the link below for more information on Umbrella licensing:

https://learn-umbrella.cisco.com/datasheets/cisco-umbrella-package-comparison-2

FEATURES:

- Automatically adapts its VPN tunneling to the most efficient method based on network constraints, using TLS and DTLS

- DTLS provides an optimized network connection

- IPsec/IKEv2 also available

- Network roaming capability allows connectivity to resume seamlessly after IP address change, loss of connectivity, or device standby

- Wide range of authentication options

- Supports certificate deployment using AnyConnect integrated SCEP and the certificate import URI handler

- Policies can be configured locally, and automatically updated from the security gateway

- Access to internal IPv4/IPv6 network resources

- Administratively controlled tunnel policy

- Localizes according to the device's language and region settings

- DNS security with Umbrella module

SUPPORT:

If you are an end-user and have any issues or concerns, please contact your organization’s support department. If you are a System Administrator having difficulties configuring or utilizing the Application, please contact your designated support point of contact.

FEEDBACK:

You can provide us with feedback by sending us a log bundle by navigating to "Menu > Diagnostics > Send Logs" and choose "Feedback to Cisco" with a description of the issue. Please read the Known Issues section prior to sending feedback.

You can reach us on Twitter by directing a tweet to @AnyConnect, or by visiting our Facebook page at http://www.facebook.com/anyconnect.

DOCUMENTATION:

Release Notes: http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/release/notes/b_Release_Notes_Android_AnyConnect_4-0-x.html

User Guide:http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/user/guide/b_Android_AnyConnect_User_Guide_4-0-x.html

ACCESS ANYCONNECT BETA VERSIONS:

https://play.google.com/apps/testing/com.cisco.anyconnect.vpn.android.avf

Report issues to ac-mobile-feedback@cisco.com. No TAC support for beta versions.

兼容设备：

Android 4.X以上版本

已知的问题：

-通知托盘中的AnyConnect图标异常大。这是VPN框架的局限性。

-已知在“诊断”屏幕上会发生一些冻结

-拆分DNS在Android 7.x / 8.x上不可用（操作系统限制）

局限性：

使用此软件包不支持以下功能：

-过滤器支持

-可信网络检测

-分割排除

-本地局域网异常

-安全网关Web门户（通过隧道访问时无法访问）

应用说明：

AnyConnect通过为旅途中的用户提供持续的企业访问，从设备提供可靠且易于部署的加密网络连接。无论是提供对企业电子邮件，虚拟桌面会话或大多数其他Android应用程序的访问，AnyConnect均可实现对业务至关重要的应用程序的连接。

适用于Android上的AnyConnect的Cisco Umbrella模块为Android v6.0.1及更高版本提供DNS层保护，并且可以启用或禁用AnyConnect许可证

许可和基础设施要求：

拥有有效Plus，Apex或VPN Only许可证（有效SASU合同的有效期或永久有效期）的Cisco头端客户已许可使用此软件。 Essentials / Premium with Mobile许可不再允许使用。禁止将AnyConnect与非Cisco设备/软件一起使用。

http://www.cisco.com/c/dam/en/us/products/security/anyconnect-og.pdf

管理员可以从www.cisco.com/go/license获得试用版的AnyConnect Apex（ASA）许可证。

适用于Android的AnyConnect需要Cisco自适应安全设备（ASA）启动映像8.0（4）或更高版本。对于许可问题和评估许可，请联系ac-temp-license-request（AT）cisco.com，并包括您的Cisco ASA的“显示版本”副本。

AnyConnect上的伞模块需要伞许可证。单击下面的链接，以获取有关雨伞许可的更多信息：

https://learn-umbrella.cisco.com/datasheets/cisco-umbrella-package-comparison-2

特征：

-使用TLS和DTLS根据网络约束自动将其VPN隧道适应最有效的方法

-DTLS提供了优化的网络连接

-也提供IPsec / IKEv2

-网络漫游功能允许在IP地址更改，连接断开或设备待机后无缝恢复连接

-多种身份验证选项

-使用AnyConnect集成的SCEP和证书导入URI处理程序支持证书部署

-可以在本地配置策略，并可以从安全网关自动更新策略

-访问内部IPv4 / IPv6网络资源

-行政控制的隧道政策

-根据设备的语言和区域设置进行本地化

-带有伞模块的DNS安全

支持：

如果您是最终用户，并且有任何问题或疑虑，请与您组织的支持部门联系。如果您是系统管理员，在配置或使用应用程序时遇到困难，请联系您指定的支持联系人。

反馈：

您可以通过导航到“菜单>诊断>发送日志”并向我们发送日志包，然后选择带有问题描述的“反馈给思科”，向我们提供反馈。在发送反馈之前，请阅读“已知问题”部分。

您可以通过将推文指向@AnyConnect或通过访问我们的Facebook页面http://www.facebook.com/anyconnect来在Twitter上与我们联系。

资料：

发行说明：http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/release/notes/b_Release_Notes_Android_AnyConnect_4-0-x.html

用户指南：http：//www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/user/guide/b_Android_AnyConnect_User_Guide_4-0-x.html

访问ANYCONNECT测试版：

https://play.google.com/apps/testing/com.cisco.anyconnect.vpn.android.avf

向ac-mobile-feedback@cisco.com报告问题。 TAC不支持beta版本。