Eng. Alessandro Mazzanti: SCCM 2012 - How to install AnyConnect VPN with SCCM 2012

If you need to install, with SCCM 2012, cisco Anyconnect 3.1.01065 at first you need to know that profiles files are at following path

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

Silent installation string

msiexec /i “anyconnect-win-3.1.01065-pre-deploy-k9.msi”    /norestart /passive

You can get .msi file at following links:

http://vpn.managednetworks.net/vpn/

https://ftp.rush.edu/users/vpn-client/

Here is a .vbs script that test if program is installed, in case install it, copy settings file and verify that installation went well.

'*****************************************************************************
' Author : Alessandro Mazzanti
' Creation date : 12/01/2015
' Version : 1.00
' Running on OS : Windows 7
'*****************************************************************************
'Installa Irfan View

Option Explicit
On error resume next

'---------------------------------------------------------------------------------------------------
'------------------------------------Variables definitions--------------------------------------
'---------------------------------------------------------------------------------------------------

Const ForWriting = 2

Dim objFile                                                                    'Create log file
Dim objFSO, objFolder 'Object filesystem
Dim windir 'windows folder
Dim WshShell, WshNetwork 'Create Shell Object
Dim strComputer                                                              'Local Computer
Dim objSoftware                                                                 'Object software installed
Dim colSoftware                                                                'collection software installed
Dim objWMIService                                                             'objectWMI
Dim folder                                                                    'Processes Collection
Dim prova, Data, Temp, strusername, strComputerName, strLogPath
Dim boolCisco, strCisco

'---------------------------------------------------------------------------------------------------
'------------------------------------ISTANCES Definition------------------------------------
'---------------------------------------------------------------------------------------------------

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set WshShell = CreateObject("WScript.Shell")
Set windir = objfso.GetSpecialFolder(0)
Set Temp = objfso.GetSpecialFolder(2)
Set WshNetwork = WScript.CreateObject("WScript.Network")

'---------------------------------------------------------------------------------------------------
'------------------------------------PROGRAMS----------------------------------
'---------------------------------------------------------------------------------------------------

'Sezione per ritrovare il nome del computer e l'username
strUserName = WshNetwork.UserName
strComputerName = WshNetwork.ComputerName

'path di destinazione dei log
strLogPath = "c:\windows\temp\" & strComputerName & "_" & strUserName & "_VPN_ESITO.log"
Set objFile = objFSO.CreateTextFile ( strLogPath, ForWriting)

objFile.WriteLine Now & " - Inizio Script"

strComputer = "."
boolCisco = False

'Verifica se la cartella è presente
'if objFSO.FolderExists("c:\vpn_install") <> True Then
'        Set objFolder = objFSO.CreateFolder("c:\vpn_install")
'End If

'verifica se la vpn non è già installata
Software_installato

If boolCisco = False Then
    'installa la vpn
    Installa_VPN
    'copia i file
    Copia
    Software_installato
End If

objFile.Close

Sub Copia

    Const OverwriteExisting = True
    objFile.WriteLine Data & " - Inizio copia file di settaggio"
    objFSO.CopyFile "\\...server...path\Packages\Cisco Anyconnect 3.1.01065\Profilo\AnyConnectProfile.xsd", "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile\AnyConnectProfile.xsd" , OverwriteExisting
    objFSO.CopyFile "\\...server...path\Packages\Cisco Anyconnect 3.1.01065\Profilo\Seves.xml", "C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile\Seves.xml" , OverwriteExisting

    objFile.WriteLine Now & " - Copiati file locali della VPN"

    if prova = 0 Then
        Data = Now
        objFile.WriteLine Data & " - Esito copia file effettuato con successo"

    else
        Data = Now
        objFile.WriteLine Data & " - Copia non effettuata con errore: " & prova
    End if

End Sub

Sub Installa_VPN
    'folder = "c:\vpn_install"
    objFile.WriteLine Now & " - Installazione VPN in corso..."
    prova = WshShell.Run ( windir & "\system32\msiexec.exe /i anyconnect-win-3.1.01065-pre-deploy-k9.msi /qn /norestart", 0, true)

    if prova = 0 or prova="3010" Then
        objFile.WriteLine Now & " - Esito Installazione VPN effettuata con successo"
    else
        objFile.WriteLine Now & " - Esito Installazione VPN NON effettuata con codice d'errore " & prova
        objFile.WriteLine "INSTALLAZIONE TERMINATA ANTICIPATAMENTE CON ERRORE IRREVERSIBILE"
        wscript.quit
    End if

    wscript.sleep 1000
    objFile.WriteLine Now & " - Fine Installazione VPN - Sleep 5 minuti..."
End Sub

Sub Software_installato
    Data = Now
    boolCisco = false

    objFile.WriteLine Data & " - Interrogazione WMI in corso per vedere il software installato..."
        Set objWMIService = GetObject("winmgmts:" _
        & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
    Set colSoftware = objWMIService.ExecQuery _
        ("Select * from Win32_Product")

    For Each objSoftware in colSoftware
        'descrizione del sw installato
        if Ucase(Trim(objSoftware.Name)) = Ucase("Cisco AnyConnect Secure Mobility Client") Then
            boolCisco = True
            strCisco = " - " & objSoftware.Name & " versione " & objSoftware.Version & " - PRESENTE"
        End If

    Next

    'test presenza Cisco e scrittura del relativo log
    Data = Now
    If boolCisco = True Then
        objFile.WriteLine Data & strCisco
    else
        objFile.WriteLine Data & " - Client Cisco AnyConnect Secure Mobility Client 3.1.05182 ASSENTE"
    End If
End Sub

Here you can find other links that you could find them useful:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/anyconnectadmin31/ac02asaconfig.pdf

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/anyconnectadmin30/ac02asaconfig.html

...

<------other -----="" articles="" blogs="" related="">

...

SCCM 2012 - How to install AnyConnect VPN with SCCM 2012

http://www.alessandromazzanti.com/2015/01/sccm-2012-how-to-install-anyconnect-vpn.html

Tips - Locating the Cisco AnyConnect Profiles

http://www.alessandromazzanti.com/2015/01/tips-locating-cisco-anyconnect-profiles.html

Linux - Creare un Gateway Server

http://www.alessandromazzanti.com/2011/09/linux-creare-un-gateway-server.html

Backup - Fare il backup delle connessioni di rete e VPN

http://www.alessandromazzanti.com/2012/09/backup-fare-il-backup-delle-connessioni.html

Tips - Cisco VPN e Vodafone Connect Card