Cisco AnyConnect Secure Mobility Client empowers remote workers with frictionless, highly secure access to the enterprise network from any device, at any time, in any location while protecting the organization. Watch overview (1:39). Stanford is going passwordless! Cardinal Keys reduce or eliminate the need to use your SUNet ID and password for web-based logins and eliminate the need to use your username, password, and two-step authentication for VPN connections. Introduction to Cardinal Key at Stanford.
Skip to end of metadataGo to start of metadataOverview:
SLAC's VPN uses posture checking to enforce that antivirus software is installed and that antivirus updates are current. In addition, Cisco's AnyConnect Secure Mobility Client VPN software must be used so that the status of antivirus can be reported to the SLAC VPN ASA's.
SLAC has some pages on installing antivirus and AnyConnect, but they are somewhat distributed, and are mostly focused on systems that are SLAC supported Windows and SLAC supported MacOS. This document is an attempt at providing a streamlined recipe for a self-supported Mac running Linux.
The process described here is for a MacBook Air running the Elementary Linux distribution version 5.1 (based on the Ubuntu Linux 18.04 LTS distribution).
Ethernet and Wireless Networking
This section is very specific to the hardware used. While this is not a general recipe, it may be useful for inspiration of what to try. The MacBook Air has no built-in Ethernet, only wireless. Unfortunately, the default installation of many Linux distributions don't have the correct wireless driver, so the user is left with no way to connect to the network after installation. I was unable to get an Apple Thunderbolt Ethernet adapter to work, but a Linksys USB adapter (model USB3GIGV1) was recognized. Thus, I could use Ethernet to install OS updates and download wireless drivers.
To install wireless drivers, you need to know which chipset is being used. In my case, it was a Broadcom BCM4360 802.11ac adapter. This page on Broadcom Wifi on Ubuntu provided some useful documentation. The 'lspci' will display information about the PCI bus.

On the Broadcom Wifi page listed above, the driver is given by:
Installing the bcmwl-kernel-source package and rebooting allowed wireless to work. I have found wireless to be very stable. Videoscribe for mac free download.
Antivirus
CLAM AV is an open source antivirus engine. This page gives the following instructions for Ubuntu as well as other distributions. I installed clamav and clamav-daemon. I have added the necessary 'sudo' statements to the recipe.
Cisco AnyConnect VPN Client
The Service Now Linux VPN Knowledgebase article describes obtaining AnyConnect from the VPN server itself. However, the auto-detect mechanism requires Java which you may not have (I didn't). Instead, I installed Cisco AnyConnect manually following the instructions at Cisco AnyConnect manual install. To install, you need to unpack the downloaded archive and run a shell script:
Give any user highly secure access to the enterprise network, from any device, at any time, in any location.
Cisco AnyConnect - Empower your employees to work from anywhere, on company laptops or personal mobile devices, at any time. AnyConnect simplifies secure endpoint access and provides the security necessary to help keep your organization safe and protected. Whatsapp for mac desktop download.

Gain more insight into user and endpoint behavior with full visibility across the extended enterprise. With AnyConnect's Network Visibility Module (NVM), you can defend more effectively and improve network operations.
Defend against threats, no matter where they are. For example, with Cisco Identity Services Engine (ISE), you can prevent noncompliant devices from accessing the network. And with Cisco Umbrella Roaming, you can extend protection when users are off the VPN.
Provide a consistent user experience across devices, both on and off premises, without creating a headache for your IT teams. Simplify management with a single agent.
Cisco Anyconnect Stanford Login
Cisco Anyconnect Vpn Client Download
