Cisco AnyConnect Secure Mobility Client 4.10 دانلود سیسکو AnyConnect

This is a maintenance release that resolves the defects described in AnyConnect 4.7.02036 :

This is a maintenance release that includes the following features and enhancements, and that resolves the defects described in AnyConnect 4.7.01076 :

• Support for management VPN tunnel in macOS—(Requires ASDM 7.10.1) Ensures connectivity to the corporate network whenever the client system is powered up, not just when a VPN connection is established by the end user.

• FIPS certification changes for Network Access Manager—802.1X/EAP supports the transitional Suite B profile only (as defined in RFC-5430)

This is a major release that includes the following features and enhancements, and that resolves the defects described in AnyConnect 4.7.00136 :

• Management VPN Tunnel—(Requires ASDM 7.10.1) Ensures connectivity to the corporate network whenever the client system is powered up, not just when a VPN connection is established by the end user.

  This feature allows patch management on systems which may not come in to the office frequently. Endpoint OS login scripts requiring corporate network connectivity will also benefit from this feature.

• The Network Access Manager component supports Transport Layer Security (TLS) Protocol Version 1.2. RFC 6279 defines the Suite B cryptography algorithms that conform to U.S. FIPS 140-2 standards: TLS v1.2 handshaking and certificate authentication is now supported.

• ISE posture updates (see important limitations in ISE Requirements for AnyConnect)—

  • Flexible notifications in grace period—The AnyConnect UI pops up a caution when an endpoint is noncompliant only when the custom notifications are configured on the ISE UI release 2.6 (or later). A notification also indicates the start of grace period and any endpoints that are non-compliant after the grace period start.

  • Exposing client’s Unique Device Identifier (UDID) in the DART CLI.

  • Elevated tasks will not be performed if the ISE server is untrusted.

  • Automatic collection of DART after an ISE posture crash or error scenario.

• NVM flow filter—Extends the current data collection policy from being just field centric, where the action is configured for a given field in each flow. With flow filter, you can create and apply rules to collect or ignore entire flows (as opposed to only particular fields), thus monitoring only the traffic of interest and potentially reducing storage requirements.

• Option to clear the logs generated by DART.

• New AnyConnect icons/images.

• VPN TLS ECDSA client certificate support—AnyConnect VPN supports the use of ECDSA client certificates for authentication when using TLS/DTLS.

• AnyConnect VPN now supports DTLSv1.2 and the following cipher suites:

  • ECDHE-RSA-AES256-GCM-SHA384

  • ECDHE-ECDSA-AES256-GCM-SHA384

  • ECDHE-RSA-AES256-SHA384

  • ECDHE-ECDSA-AES256-SHA384

  • DHE-RSA-AES256-GCM-SHA384

  • DHE-RSA-AES256-SHA256

  • DHE-RSA-AES256-SHA

  • AES256-GCM-SHA384

  • AES256-SHA256

  • AES256-SHA

  • ECDHE-RSA-AES128-GCM-SHA256

  • ECDHE-ECDSA-AES128-GCM-SHA256

  • ECDHE-RSA-AES128-SHA256

  • ECDHE-ECDSA-AES128-SHA256

  • DHE-RSA-AES128-GCM-SHA256

  • DHE-RSA-AES128-SHA256

  • DHE-RSA-AES128-SHA

  • AES128-GCM-SHA256

  • AES128-SHA256

  • AES128-SHA

  • DES-CBC3-SHA

AnyConnect HostScan 4.7.02036 is a maintenance release that includes updates to only the HostScan module. Refer to HostScan 4.7.02036 for a list of what caveats were fixed, related to HostScan, for this release.

AnyConnect HostScan 4.7.01076 is a maintenance release that includes updates to only the HostScan module. Refer to HostScan 4.7.01076 for a list of what caveats were fixed, related to HostScan, for this release.

This section identifies the management and endpoint requirements for this release. For endpoint OS support and license requirements for each feature, see AnyConnect Secure Mobility Client Features, Licenses, and OSs.

Cisco cannot guarantee compatibility with other VPN third-party clients.