--- title: "Configure Cisco AnyConnect VPN for Android" slug: "configure-cisco-anyconnect-vpn-for-android" description: "Step-by-step guide on configuring Cisco AnyConnect VPN on Android devices using Scalefusion." updated: 2023-09-23T07:21:16Z published: 2023-09-23T07:21:16Z canonical: "help.scalefusion.com/configure-cisco-anyconnect-vpn-for-android" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt > Use this file to discover all available pages before exploring further. # Configure Cisco AnyConnect VPN for Android Scalefusion and Android for Work make it easy for you to configure Cisco AnyConnect VPN on your managed Android devices. Follow the guide below to configure Cisco AnyConnect. ## Before you Begin 1. Complete [**Android for Work**](/docs/android-enterprise-android-for-work-setup-with-scalefusion-emm) Setup in Scalefusion Dashboard. 2. Enroll your corporate-owned devices using [**afw#mobilock**](/docs/using-afwmobilock-for-android-device-enrollment) 3. Invite your Employees to enroll their [**personal devices**](/docs/enrolling-a-personal-employee-owned-device). The following feature works only for devices enrolled via afw#mobilock and where the Scalefusion application is set as a Device Owner. It will not work if you are using legacy methods to enroll the devices. ## Search and Approve Cisco AnyConnect The first step is to search and approve Cisco AnyConnect for your organization. The steps are, 1. Sign In Scalefusion Dashboard. 2. Navigate to **Application Management > Play For Work Apps![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-15T114227.983.png)** 3. Click on the **Add from Playstore** button. 4. In the **Google Play** dialog, search for Cisco AnyConnect,![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-2.png) 5. Click on the **Cisco AnyConnect** app and click on **Select**.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-15T114122.774.png) 6. **The Cisco AnyConnect** app will be added to the dashboard and can be published to devices.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-15T114057.727.png) ## Configuring Cisco AnyConnect Settings Once you have the AnyConnect app, the next step is to configure the application. The steps are, 1. Click on the AnyConnect application to see the details card. 2. Click on the **App Configurations** tab and click **CREATE** to see the configuration options.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-5.png) 3. Cisco AnyConnect gives you the following configuration options, | **Connection Name** | **The display name for the VPN as shown on the user's mobile device** | | --- | --- | | Host | The URL of the headend that is the actual Cisco VPN Server. | | Protocol | Choose between SSL or IPSec. | | IPSec Authentication Mode | If the selected protocol is IPSec, then choose the authentication mode. | | IKE Identity | Optional field to specify the data on how to identify a user connection. | | Keychain Certificate Alias | KeyChain alias of the client certificate to use for this VPN configuration. | | Per App VPN Allowed Apps | Deprecated. Use the setting below | | Per App VPN Allowed Apps | Specify a comma-separated list of applications that should be routed through VPN. | | Per App VPN Disallowed Apps | Specify a comma-separated list of applications that should not be routed through VPN. | | Allow Apps to Bypass the VPN Tunnel | Choose if you want the applications to bypass the VPN Tunnel. | | Set Active | Select this to make the default selected VPN Configuration. | | FIPS Mode | Select to enable FIPS mode for AnyConnect. | | Certificate Revocation | | | AnyConnect Profile | Enter the AnyConnect Profile in XML format. | | Device Identifier | Enter the device identifier that should be reported to the VPN Server. | | Report Hardware Identifiers for VPN Identification | Enable if the H/W identifiers like Mac and/or IMEI should be reported to the VPN Server. | | Allow Users to Save Credentials | Choose if users can save the VPN Credentials so that they are not asked for it repeatedly. | 4. Once you have entered the values, click on **SAVE** to save the configuration. All the saved configurations appear in the list.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-6.png) ## Publishing the Application and Configuration 1. From the App Details card, click on the **App Information** tab and click on **PUBLISH![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-8.png)** 2. Select the Android Device Groups/Profiles/Devices where you want to publish the application and click **PUBLISH![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-9.png)** 3. Now click on the **App Configuration** tab. Click on the **Publish** icon.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-10.png) 4. Select the Android Device Groups/Profiles/Devices where you have published the application in **Step 3**, and click **PUBLISH![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/cisco-11.png)** 5. This will cause the applications to be installed on the devices and then configured based on the configuration. **Please contact your VPN Service provider in case you need details on how to use a particular setting and the accepted values.**