Guidelines for configuring Secure Client modules

This topic lists the guidelines for configuring Secure Client on Threat Defense devices.

  • All Secure Client modules are supported from AnyConnect version 4.8 and later, and in Secure Client version 5.0.

  • Each module supports profiles with specific file extensions. The table lists the modules and the supported file extensions of their profiles.

    Supported file extensions of profiles

    Module

    File extension

    AMP Enabler

    *.xml, *.asp

    Feedback

    *.xml

    ISE Posture

    *.xml, *.isp

    Network Access Manager

    *.xml, *.nsp

    Network Visibility

    *.xml, *.nvmsp

    Umbrella Roaming Security

    *.xml, *.json

    Web Security

    *.xml, *.wsp, *.wso

  • Configure only one entry per client module.

  • Install Network Access Manager before enabling ISE Posture for Windows systems.

  • Disable the Always send DNS requests over tunnel option under split tunnelling in the remote access VPN group policy to use the Umbrella Roaming Security module.

  • Enable SBL in the Secure Client VPN profile to use SBL.