Cisco AnyConnect Secure Mobility Client 4.10.06079 (MR6) is a maintenance release that primarily introduced support for captive portal detection in the Network Access Manager and resolved specific authentication timeout issues. March 31, 2024

, Cisco has ended software maintenance support for all 4.x versions of AnyConnect. Users are encouraged to migrate to the Cisco Secure Client 5.x , which is the next-generation replacement. Key Features & Changes Captive Portal Detection

: Added support for identifying when a user is behind a captive portal (such as at a hotel or airport) within the Network Access Manager module. Timeout Adjustments

: Refined handling of Authentication Timeout Values in the profile editor to improve stability during the login process. SAML Restriction

: This version does not support DNS load balancing when using external browser SAML authentication. Security & Vulnerabilities Versions 4.10 and earlier are affected by a high-severity Privilege Escalation Vulnerability (CVE-2023-20178)

: Improper permissions on a temporary directory created during the update process could allow a local attacker to execute code with SYSTEM privileges : Upgrade to at least 4.10.07061 (MR7) or the latest Cisco Secure Client 5.x to patch this vulnerability. Administrative Migration Notes

When moving from AnyConnect 4.10 to Cisco Secure Client 5.x, the directory paths for configuration files change:

%ALLUSERSPROFILE%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile %ALLUSERSPROFILE%\Cisco\Cisco Secure Client\VPN\Profile\

Cisco AnyConnect Secure Mobility Client 4.10.06 is a legacy version of Cisco's VPN software that reached End-of-Life (EoL) on March 31, 2024. It was part of the 4.10 maintenance path, which Cisco used to address bugs and security vulnerabilities for users not yet ready to transition to the newer Cisco Secure Client 5.x. Key Status and Milestones

End-of-Life (EoL): Software maintenance for all 4.x versions officially ended on March 31, 2024.

Current Support State: Cisco no longer provides patches, maintenance releases, or bug fixes for this version.

Final Support Deadline: Application software support will completely cease on March 31, 2027.

Recommended Migration: Users are strongly encouraged to upgrade to Cisco Secure Client 5.x to ensure continued security and compatibility with modern operating systems. Core Functionality

Version 4.10.06 offered several features designed for secure enterprise remote access:

Adaptive Tunneling: Automatically selects the most efficient network access point and tunneling protocol (SSL or DTLS).

Operating System Support: Provided secure connections for Windows, macOS, and Linux, as well as mobile versions for iOS and Android.

Enhanced Security: Included features like captive portal remediation for macOS and the ability to individually allow or disallow specific scripts in local policies.

Module Support: Integrated with other Cisco services, including the Umbrella roaming security module and HostScan for device posture checks. Critical Security Considerations

Remaining on version 4.10.06 poses risks because it is no longer receiving security updates. Historically, the 4.x branch has been subject to several high-severity vulnerabilities:

The Cisco AnyConnect Secure Mobility Client 4.10.06... series refers to a specific maintenance release branch of Cisco's unified security endpoint software. This version branch is particularly notable for being the final major transition point before Cisco rebranded the product to Cisco Secure Client (Version 5.0+). Core Version & Patch Details

Within the 4.10.06 range, several specific builds were released to address security vulnerabilities and stability:

4.10.06079: A standard maintenance release used by IT administrators.

4.10.06090: Widely distributed build, often cited as a critical update for Windows 10/11 environments.

4.10.07061 (and later): These versions (4.10 MR7) were the first to provide fixes for critical privilege escalation vulnerabilities found in earlier 4.10 builds. Troubleshooting & Tools

If you are generating a "report" for technical support or troubleshooting, you should utilize the following:

Cisco AnyConnect Secure Mobility Client 4.10.06079 (often referred to by its build number, such as 4.10.06x) is a key maintenance release within the 4.10 software cycle. This version provides a unified security endpoint that extends enterprise access to remote users across various wired and wireless connections. Key Features and Functions

Secure Remote Access: Facilitates highly secure SSL and IPsec IKEv2 VPN connections for a wide range of devices.

Modular Architecture: Supports optional modules such as the Network Access Manager (NAM), Posture, and Web Security to enhance endpoint security.

Endpoint Compliance: Works with Cisco Identity Services Engine (ISE) to verify that devices meet corporate security policies before allowing network access.

Cross-Platform Support: Compatible with Windows (including Windows 10/11), macOS, Linux, and mobile platforms like Android and iOS. Installation and Setup

To deploy this specific version, administrators typically use one of two main methods:

Web-Based Deployment: Users navigate to the VPN headend (ASA or FTD) via a browser, where the client is automatically pushed to their machine.

Pre-Deployment: Administrators download the "Pre-deployment Package" (e.g., anyconnect-win-4.10.06079-pre-deploy-k9.iso) from the Cisco Software Central to distribute via management tools like Jamf Pro or Microsoft Endpoint Manager. Maintenance and Evolution Cisco AnyConnect Secure Mobility Client v4.x

3. What’s Fixed / Improved in 4.10.06024

This patch addresses several stability and compatibility issues:

  • Resolved: Rare disconnect when roaming between Wi-Fi and Ethernet on Windows 10/11.
  • Resolved: High CPU usage on macOS Ventura (13.x) during DTLS rekey.
  • Resolved: Start Before Logon (SBL) failure on certain Windows builds after OS updates.
  • Resolved: Memory leak in the HostScan module for Linux.
  • Improved: Certificate validation handling when using TLS 1.3.
  • Improved: Logging granularity for DART (Diagnostic and Reporting Tool).
  • Security: Backported fixes for open-source components (OpenSSL, zlib).

Reasons to upgrade to Cisco Secure Client 5.x

  • TLS 1.3 – Mandatory for compliance (e.g., NIST SP 800-52r3).
  • Modern UI – Better SAML and OAuth login experience.
  • Native ARM64 support – For Surface Pro X/9 users.
  • Orchestrator management – The new 5.x client plays nicer with Cisco Defense Orchestrator.

Migration path: You can push a software upgrade from ASA to AnyConnect 4.x clients to move to 5.x, but not across major branches (4.x to 5.x) without a headend update first. Cisco recommends a staged rollout.

Cisco AnyConnect Secure Mobility Client 4.10.06024: Overview & Key Information