AnyConnect Deployment Overview
Deploying AnyConnect refers to installing, configuring, and upgrading the AnyConnect client and its related files.
The Cisco AnyConnect Secure Mobility Client can be deployed to remote users by the following methods:
Predeploy—New installations and upgrades are done either by the end user, or by using an enterprise software management system (SMS).
Web Deploy—The AnyConnect package is loaded on the headend, which is either an ASA or FTD firewall, or an ISE server. When the user connects to a firewall or to ISE, AnyConnect is deployed to the client.
For new installations, the user connects to a headend to download the AnyConnect client. The client is either installed manually or automatically (web-launch).
Updates are done by AnyConnect running on a system where AnyConnect is already installed, or by directing the user to the ASA clientless portal.
When you deploy AnyConnect, you can include optional modules that enable extra features, and client profiles that configure the VPN and optional features.
Refer to the AnyConnect release notes for system, management, and endpoint requirements for ASA, IOS, Microsoft Windows, Linux, and macOS.
内容引用：