Objective

The Cisco AnyConnect Secure Mobility Client, also known as the Cisco AnyConnect VPN Client, is a software application for connecting to a Virtual Private Network (VPN) that works on various operating systems and hardware configurations. This software application makes it possible for remote resources of another network become accessible as if the user is directly connected to the network, but in a secure way. Cisco AnyConnect Secure Mobility Client provides an innovative new way to protect mobile users on computer-based or smart-phone platforms, providing a more seamless, always-protected experience for end users and comprehensive policy enforcement for an IT administrator.

The objective of this document is to show the features matrix of the Cisco AnyConnect Secure Mobility Client for Android devices.

Software Version

- 4.4

Android AnyConnect Feature Matrix

Deployment and Configuration

Feature

Support

Install or upgrade from Application Store

Yes

Cisco VPN Profile support (manual import)

Yes

Cisco VPN Profile support (import on connect)

Yes

Mobile Device Management (MDM) configured connection entries

Yes

User-configured connection entries

Yes

Tunneling

Feature

Support

Transport Layer Security (TLS)

Yes

Datagram TLS (DTLS)

Yes

Internet Protocol Security Internet Key Exchange version 2 Network Address Translator Traversal (IPsec IKEv2 NAT-T)

Yes

IKEv2 - raw Encapsulating Security Payload (ESP)

No

Suite B (IPsec only)

Yes

TLS compression

Yes

Dead peer detection

Yes

Tunnel keepalive

Yes

Multiple active network interfaces

No

Per App Tunneling (requires Plus or Apex license and ASA 9.4.2 or later)

Yes, Android 5.0+ or Samsung Knox

Full tunnel (OS may make exceptions on some traffic, such as traffic to the app store)

Yes

Split tunnel (split include)

Yes

Local Area Network (LAN) (split exclude)

No

Split- Domain Name System (DNS)

Yes, will work with split include.

Auto Reconnect / Network Roaming

Yes, regardless of the Auto Reconnect profile specification, AnyConnect Mobile always attempts to maintain the VPN as users move between 3G and Wi-Fi networks.

VPN on-demand (triggered by destination)

No

VPN on-demand (triggered by application)

No

Rekey

Yes

IPv4 public transport

Yes

IPv6 public transport

Yes, requires Android 5.0 or later

IPv4 over IPv4 tunnel

Yes

IPv6 over IPv4 tunnel

Yes

Default domain

Yes

DNS server configuration

Yes

Private-side proxy support

No, Wi-Fi proxies are disabled when the VPN is established.

Proxy Exceptions

No

Public-side proxy support

No

Pre-login banner

Yes

Post-login banner

Yes

Differentiated Services Code Point (DSCP) Preservation

Yes

Connecting and Disconnecting

Feature

Support

VPN load balancing

Yes

Backup server list

Yes

Optimal Gateway Selection

No

Authentication

Feature

Support

Client Certificate Authentication

Yes

Online Certificate Status Protocol (OCSP)

Yes

Manual user certificate management

Yes

Manual server certificate management

Yes

Simple Certificate Enrollment Protocol

(SCEP) legacy enrollment Please confirm for your platform.

Yes

SCEP proxy enrollment Please confirm for your platform.

Yes

Automatic certificate selection

Yes

Manual certificate selection

Yes

Smart card support

No

Username and password

Yes

Tokens or challenge

Yes

Double authentication

Yes

Group Uniform Resource Locator (URL) (specified in server address)

Yes

Group selection (drop-down selection)

Yes

Credential prefill from user certificate

Yes

Save password

No

User Interface

Feature

Support

Standalone Graphical User Interface (GUI)

Yes

Native Operating System OS GUI

No

Application Program Interface (API) / Uniform Resource Identifier (URI) Handler (See URI Handling)

Yes

UI customization

No

UI localization

Yes, app contains pre-packaged languages.

User preferences

Yes

Home screen widgets for one-click VPN access

Yes

AnyConnect specific status icon

Optional

Mobile Posture

Feature

Support

Serial number or unique ID check

Yes

OS and AnyConnect version shared with headend

Yes

URI Handling

Feature

Support

Add connection entry

Yes

Connect to a VPN

Yes

Credential pre-fill on connect

Yes

Disconnect VPN

Yes

Import certificate

Yes

Import localization data

Yes

Import Extensible Markup Language

(XML) client profile

Yes

External (user) control of URI commands

Yes

Reporting and Troubleshooting

Feature

Support

Statistics

Yes

Logging / Diagnostic Information (DART)

Yes

Certifications

Feature

Support

FIPS 140-2 Level 1

Yes

For additional information on AnyConnect licensing on the RV340 series routers, check out the article AnyConnect Licensing for the RV340 Series Routers.