Umbrella agent bulk update

[manvik]

Hi, currently we are using umbrella roaming clients across 3000 roaming user laptops. Now we need to upgrade the client to Cisco Secure Client.
How the bulk upgrades can be done across roaming user laptops

[Ken Stieers · Accepted solution]

For machines that aren't using AnyConnect for your VPN, your best bet is however you do your normal application deployment.
Take a look here for some notes on how to hide Anyconnect for machines that aren't using it
https://woland.com/2023/08/11/hiding-the-secure-client-aka-anyconnect-vpn-module/

For machines using AnyConnect, you can enable it on the firewall and the next time people connect they'll get it...

If you're using SecureX management, you can just edit your deployment, and your workstations will pick it up.

They cover things here: https://docs.umbrella.com/umbrella-user-guide/docs/secure-client-deploying-umbrella

________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.

[Aref Alsouqi]

Unless the clients are running on an agent with version 3.0.466 or older, when you install the Secure Client will remove the standalone roaming agent. Alternatively, you should uninstall the standalone agent before installing the Secure Client.

Cisco Secure Client with Umbrella Module Installation – Cisco Umbrella

[manvik]

Thank you @Ken Stieers and @Aref Alsouqi the links shared are very useful, it cleared almost all the confusions.
Currently umbrella roaming users have anyconnect ASA VPN. The best approach I understand is to deploy umbrella secure client from ASA.

For "modules value umbrella" to work does any other specific anyconnect package should be uploaded to ASA ???

Anyconnect version is 4.x, as mentioned in the second link. secure client would uninstall anyconnect and do the installation?

[Aref Alsouqi]

Umbrella module would be included in Secure Client main package, so no additional packages would be required. Installing the Secure Client software will take care of removing the old packages to avoid any conflict, that includes any standalone Umbrella agent.

Deploy Umbrella for Cisco Secure Client