Skip to content

Instantly share code, notes, and snippets.

@xlphs
Created March 6, 2016 20:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save xlphs/f6286f79fc35ece77467 to your computer and use it in GitHub Desktop.
Save xlphs/f6286f79fc35ece77467 to your computer and use it in GitHub Desktop.
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
<ClientInitialization>
<WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>
<LocalLanAccess>true</LocalLanAccess>
<AutoUpdate>false</AutoUpdate>
<CertificateMatch>
<DistinguishedName>
<DistinguishedNameDefinition Operator="Equal">
<Name>CN</Name>
<Pattern>subject common name</Pattern>
</DistinguishedNameDefinition>
</DistinguishedName>
</CertificateMatch>
</ClientInitialization>
<ServerList>
<HostEntry>
<HostName>fqdn</HostName>
</HostEntry>
</ServerList>
</AnyConnectProfile>
@xlphs
Copy link
Author

xlphs commented Mar 8, 2016

Tested on Mac OS X El Capitan 10.11. Place this in /opt/cisco/anyconnect/profile with root being the owner. Install client certificate via Keychain Access.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment