Types of Secure Client modules

This topic lists the different types of Secure Client modules and describes their functionality and deployment characteristics.

The Secure Client supports these modules:

  • AMP Enabler: Deploys Cisco Secure Endpoint to endpoints from a locally hosted enterprise server, providing malware detection, removal, and protection. In Cisco Secure Client 5.0, this module is available only for macOS. Windows offers native Secure Endpoint integration.

  • DART: Collects system logs and diagnostic information to troubleshoot Secure Client installation and connection issues. You can send this data to Cisco TAC to troubleshoot issues. By default, Diagnostics and Reporting Tool (DART) is not enabled in new remote access VPN group policies for version 6.7 and later.

  • Feedback: Sends feature and module usage data to the Cisco Feedback Server to help improve Secure Client quality and performance. Secure Client does not download the Feedback module to the endpoint.

  • ISE Posture: Performs client-side endpoint compliance checks, including antivirus, antispyware, and OS verification using Cisco Identity Services Engine (ISE). The client receives the posture policy from the headend, collects posture data, compares results against the policy, and reports back to the headend.

  • Network Access Manager: Manages device authentication and user identity for secure access to wired and wireless networks at layer 2. This module is not supported on macOS and Linux.

  • Network Visibility: Monitors endpoint application usage to identify behavior anomalies and support capacity planning, auditing, compliance, and security analytics. You can share the usage data with NetFlow tools such as Cisco Stealthwatch.

  • Umbrella Roaming Security: Provides DNS-layer security using Cisco Umbrella, including content filtering, multiple policies, robust reporting, and Active Directory integration.

  • Start Before Login: Establishes a VPN connection before Windows login, enabling domain authentication over VPN. You must enable SBL in the Secure Client VPN profile and add it to the remote access VPN group policy.

  • Web Security: Protects endpoints by blocking risky sites and testing unknown sites using , powered by Cisco Talos. Supports on-premises and cloud-based deployments. This module is not available in AnyConnect version 4.5 and later or in Secure Client Version 5.0.