Cisco Anyconnect Secure | Mobility Client 4.10.06...

Cisco AnyConnect Secure Mobility Client 4.10.06079 (MR6) is a maintenance release that primarily introduced support for captive portal detection in the Network Access Manager and resolved specific authentication timeout issues. March 31, 2024

, Cisco has ended software maintenance support for all 4.x versions of AnyConnect. Users are encouraged to migrate to the Cisco Secure Client 5.x , which is the next-generation replacement. Key Features & Changes Captive Portal Detection

: Added support for identifying when a user is behind a captive portal (such as at a hotel or airport) within the Network Access Manager module. Timeout Adjustments

: Refined handling of Authentication Timeout Values in the profile editor to improve stability during the login process. SAML Restriction

: This version does not support DNS load balancing when using external browser SAML authentication. Security & Vulnerabilities Versions 4.10 and earlier are affected by a high-severity Privilege Escalation Vulnerability (CVE-2023-20178)

: Improper permissions on a temporary directory created during the update process could allow a local attacker to execute code with SYSTEM privileges : Upgrade to at least 4.10.07061 (MR7) or the latest Cisco Secure Client 5.x to patch this vulnerability. Administrative Migration Notes

When moving from AnyConnect 4.10 to Cisco Secure Client 5.x, the directory paths for configuration files change:

%ALLUSERSPROFILE%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile %ALLUSERSPROFILE%\Cisco\Cisco Secure Client\VPN\Profile\ Cisco AnyConnect Secure Mobility Client 4.10.06...

Cisco AnyConnect Secure Mobility Client 4.10.06 is a specific maintenance release within the 4.10.x software train. Version 4.10 is the final maintenance path for the 4.x series, meaning users on older versions (4.0–4.9) must upgrade to this train to receive future security and defect fixes.  🛠️ Key Technical Features 

Maintenance Path Stability: Serves as the primary stable branch for 4.x users before the transition to Cisco Secure Client 5.

Multi-Platform Support: Includes installers for Windows, macOS, and Linux (available in .exe, .pkg, and .tar.gz formats).

DNS Protection: Enhanced reliability for DNS security modules, specifically fixing connectivity drops in dual-stack IPv6 environments.

SAML External Browser Support: Allows the client to use a native local browser (rather than the embedded one) for SAML authentication, enabling biometrics and WebAuthN.

FIPS Compliance: Supports Federal Information Processing Standards (FIPS) when enabled in the local policy for highly secure environments.  🔒 Security & Connectivity 

Always-On Intelligent VPN: Automatically selects the optimal network access point and adapts tunneling protocols for maximum efficiency. Cisco AnyConnect Secure Mobility Client 4

Unified Endpoint Management: Integrates with Cisco Umbrella for roaming security and endpoint posture assessment via Cisco Secure Endpoint.

Cryptographic Updates: Regular updates to the CiscoSSL libraries to protect against known vulnerabilities like DLL hijacking or privilege escalation.  🚀 Lifecycle Status 

End of Life (EoL): Cisco has announced the End-of-Sale and EoL for version 4.x.

Next Steps: Administrators are encouraged to migrate to Cisco Secure Client 5.x, which is the successor to AnyConnect and offers improved Zero Trust integration. 

If you are an administrator, I can help you find the migration guide to version 5.0 or explain how to configure Split Tunneling for this specific version. Which would be more useful for your setup? 

Cisco AnyConnect Secure Mobility Client version 4.10.06xxx (such as 4.10.06079 or 4.10.06090) is part of the legacy 4.x software line that has reached its end of life. As of March 31, 2024, Cisco ended software maintenance support for all AnyConnect 4.x versions. Key Considerations for Version 4.10.06

Security Vulnerabilities: This version is susceptible to local privilege escalation vulnerabilities. For instance, an authenticated attacker could exploit the client update process to execute code with SYSTEM privileges. Compatibility Issues: Linux split-exclude : On RHEL 9

Linux: Users on modern distributions (like Manjaro) have reported connection failures due to library dependencies (e.g., libxml2) in version 4.10.06079.

Windows 8.1: Older 4.10 versions often struggle with Multi-Factor Authentication (MFA) because the client defaults to Internet Explorer for web-based logins, which lacks modern cipher support.

Renaming: Cisco has rebranded this product line. The successor to AnyConnect is now known as the Cisco Secure Client. Recommended Actions

Known Issues in 4.10.06

No software is perfect. Documented caveats as of this writing:

• Linux split-exclude: On RHEL 9.2, the split-exclude directive sometimes fails for IPv6 routes. Workaround: Use ipv6=disabled in the profile.
• MacOS login window delay: For Macs with FileVault enabled, if AnyConnect is set to start before login, there is a 10-second dead zone. Cisco suggests disabling "Start Before Login" and using the launch daemon instead.
• SAML IdP logout: When using Azure AD SAML, the logout URL does not always terminate the IdP session if the user closes the browser window during re-authentication. Fixed in patch 4.10.06100 (expected Q3 2024).

Comparison: 4.10.06 vs 4.9.x vs 5.0 (Next Gen)

| Feature | 4.9.08010 | 4.10.06 | 5.0 (Beta/New) | |---|---|---|---| | TLS 1.3 support | Partial (RSA only) | Full (ECC + RSA) | Full | | Posture (HostScan) | v4.9 | v4.10.06 | v5.0 (requires new DART) | | Umbrella integration | v3.1 | v3.3 (SWG 2.0) | v4.0 (requires cloud console) | | Windows ARM64 | No | Yes (native) | Yes | | EOL (End of Life) | Nov 2023 | Oct 2025 | TBA 2025 |

Verdict: Unless you need the radical new UI of version 5.0 (still unstable), 4.10.06 is the most production-ready release.

1. Introduction

Cisco AnyConnect Secure Mobility Client version 4.10.06024 is a maintenance release in the 4.10.x branch. It provides secure VPN connectivity, endpoint compliance, and network visibility for remote access. This version is widely used for organizations balancing modern security requirements with legacy system support.

Note: Earlier 4.10.x builds include 4.10.01075, 4.10.02090, and 4.10.04030. Version 4.10.06024 is the recommended update within the 4.10 train.