Objective: To set up multiple client profiles in AnyConnect
Solution:
Wondering how to access or view the list of VPN profiles you had created on AnyConnect client?
If you are a user, especially a consultant, and would like to access multiple clients then having different VPN profiles would help you. Unfortunately, with AnyConnect there's no direct way of storing and displaying multiple VPN profiles as dropdown. However, there's a workaround.
Here are a few suggestions to create multiple VPN profiles or store all the VPN profiles on Cisco AnyConnect:
A simple way is to create your own VPN profile file and storing it in the right directory in your local machine from which you're accessing the VPN clients.
Steps to add multiple profiles using XML file:
- Navigate to "%ProgramData%\Cisco\CiscoAnyConnect Secure Mobility Client\ Profile".
- Now, open your profile.xml file in notepad and enter the following text:
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/"?>
<ServerList?>
<HostEntry?>
<User?>username</User?>
<HostName?>host alias name</HostName?>
<HostAddress?>host address of vpn</HostAddress?>
</HostEntry?>
</ServerList?>
</AnyConnectProfile?>
- You can edit the username of the new VPN profile you want to create and hostname of the server or gateway you want to access as required.
- Go ahead and Add Client Certificate thumbprint to the profile file from the user certificate store. This certificate thumbprint is present in preferences.xml file in C:\Users\AppData\Local\Ciso\Cisco AnyConnect Secure Mobility Client.
- Save changes made to the file.
- Restart Cisco AnyConnect to see if the changes work properly.
Caution:
- There could be a problem if the Cisco ASA is using the same profile name as yours. In that case, build some profiles with the destination ASAs and give them unique names.
- The above solution might not work for Windows 10, as there will be no Profile directory in %ProgramData%\Cisco\CiscoAnyConnect Secure Mobility Client Profile
Here's a sample entry for Profile.xml file to create a new profile with a unique name, PROFILE_TEST.
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">;
<ServerList>
<HostEntry>
<HostName>PROFILE_TEST</HostName>
<Username> USER1</UserName>
<HostAddress>x.x.x.57</HostAddress>
</HostEntry>
</ServerList>
</AnyConnectProfile>