

The way Cisco recommends is to repackage the An圜onnect package and something called the choices xml.That will only have the modules you guys use enabled. The one I recommend is to just get the web deploy package off your ASA.If (choice_anyconnect_vpn_enabled()=false) TSelected=((choices.choice_secure_firewall_lected || choices.choice_lected || choices.choice_lected || choices.choice_nvm.selected || choices.choice_secure_lected) || (!choices.choice_secure_firewall_lected & !choices.choice_lected & !choices.choice_lected & !choices.choice_nvm.selected & !choices.choice_secure_lected)) Return (!choices.choice_secure_firewall_lected & !choices.choice_lected & !choices.choice_lected & !choices.choice_nvm.selected & !choices.choice_secure_lected) įunction choice_anyconnect_vpn_selected() My.ssage = 'Version ' + nvmStandaloneReceipt.version + ' of Cisco Secure Client - Standalone Network Visibility Module is already installed.' Var comparison = pareVersions(nvmStandaloneReceipt.version, vpnPackage.version) if version of standalone NVM installed is greater than AC package version, fail with an error message Var nvmStandaloneReceipt = my.target.receiptForIdentifier(".nvmstandalone")

My.ssage = 'Newer version ' + vpnReceipt.version + ' of the Cisco Secure Client is already installed.' Var comparison = pareVersions(vpnReceipt.version, vpnPackage.version) check to see if version in this package is newer there is a 3.1.1+ version of VPN already installed if the receipt is not there assume no VPN installed or pre-3.1.1 version so it is OK to install Var vpnPackage = choices.choice_anyconnect_vpn.packages Var vpnReceipt = my.target.receiptForIdentifier(".vpn") version of VPN being installed has to be higher than the version already installed My.ssage = 'This software requires Mac OS X version 10.9 or later.'

Return (gUpgradeModules.indexOf(moduleID) > -1) System.log("Found an existing installed version: " + my.choice.title) Var comparison = pareVersions(moduleReceipt.version, modulePkgInfo.version) Var moduleReceipt = my.target.receiptForIdentifier(modulePkgInfo.identifier)

Just be aware that this is version specific and my example only works with 6. It only installs Cisco An圜onnect and Umbrella. I have included the Distribution file we use. Then you only have the PKG to install, no other scripts needed. Once you have completed this, you can save and flatten the file. You can then action out the products you don't want to install. I run the "pkgutil -expand" to open the An圜onnect PKG.
