Cisco Secure Client5.1.16.264 - App Store

This is the Cisco Secure Client (including AnyConnect VPN) application for Apple iOS.

Please report any questions to ac-mobile-feedback@cisco.com.

Please consult with your EMM/MDM vendor on configuration changes required to configure this new version if you are not setting it up manually. Samples at: https://community.cisco.com/t5/security-blogs/anyconnect-apple-ios-transition-to-apple-s-latest-vpn-framework/ba-p/3098264

LICENSING AND INFRASTRUCTURE REQUIREMENTS:

You must have an active AnyConnect Plus, Apex or VPN Only term/contract to utilize this software. Use is no longer permitted for older Essentials/Premium with Mobile licensing. AnyConnect may never be used with non-Cisco servers.

Trial AnyConnect Apex (ASA) licenses are available for administrators at www.cisco.com/go/license

AnyConnect for iOS requires Cisco Adaptive Security Appliance (ASA) Boot image 8.0(4) or later.

Per App VPN requires ASA 9.3(2) or later (5500-X/ASAv only) with Plus, Apex or VPN Only licensing and a minimum Apple iOS version of 10.x.

For additional licensing questions, please contact ac-mobile-license-request (AT) cisco.com and include a copy of "show version" from your Cisco ASA.

Ordering and Licensing Guide:
https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html

Cisco Secure Client (including AnyConnect VPN) provides reliable and easy-to-deploy encrypted network connectivity from any Apple iOS by delivering persistent corporate access for users on the go. Whether providing access to business email, a virtual desktop session, or most other iOS applications, AnyConnect enables business-critical application connectivity. Through the use of Datagram Transport Layer Security (DTLS), TCP-based applications and latency-sensitive traffic (such as voice over IP [VoIP]) are provided an optimized communication path to corporate resources.
Additionally, the Cisco Secure Client support IPsec IKEv2 with Next Generation Encryption.

Features:

- Automatically adapts its tunneling to the most efficient method possible based on network constraints, using TLS and DTLS.
- DTLS provides an optimized connection for TCP-based application access and latency-sensitive traffic, such as VoIP traffic
- Network roaming capability allows connectivity to resume seamlessly after IP address change, loss of connectivity, or device standby
- Wide Range of Authentication Options: RADIUS, RSA SecurID, Active Directory/Kerberos, Digital Certificates, LDAP, multifactor authentication
- Supports certificate deployment using Apple iOS and AnyConnect integrated SCEP
- Compatible with Apple iOS Connect On Demand VPN capability for automatic VPN connections when required by an application
- Policies can be preconfigured or configured locally, and can be automatically updated from the VPN headend
- Access to internal IPv4 and IPv6 network resources
- Administrator-controlled split / full tunneling network access policy
- Per App VPN (TCP and UDP) - MDM controlled

If you are an end-user and have any issues or concerns, please contact your organization’s support department. If you are a System Administrator having difficulties configuring or utilizing the Application, please contact your designated support point of contact.

Release Notes:
https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-release-notes-list.html

User Guide:
https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-user-guide-list.html

End user license:
https://www.cisco.com/c/dam/en_us/about/doing_business/legal/seula/anyconnect-SEULA-v4x.pdf

Version History General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.16.264 May 6 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.11423 12/13/2025 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.11347 09/24/2025 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.10290 07/02/2025 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.10096 06/27/2025 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.1.6107 10/24/2024 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.05207 12/20/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.05206 12/06/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.05203 11/30/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.02602 06/25/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.02530 06/21/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.01256 03/26/2023 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.01255 03/24/2023 As of Version 5, Cisco AnyConnect is now known as Cisco Secure Client.

New Features in 5.0.01241
- Cisco Secure Client AnyConnect VPN now supports TLS version 1.3 , requires ASA version 9.19(1).
- Profile import via MDM is now supported.

General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.01241 12/21/2022 As of Version 5, Cisco AnyConnect is now known as Cisco Secure Client.

General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.00246 08/02/2022 As of Version 5, Cisco AnyConnect is now known as Cisco Secure Client.
General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com. 5.0.00230 06/02/2022 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.
AnyConnect 4.10.02093 adds initial support for the AnyConnect iOS client running on Apple silicon hardware. See the release notes for caveats.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.
* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

For details see the AnyConnect product release notes at https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-release-notes-list.html. 4.10.04060 12/07/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.
AnyConnect 4.10.02093 adds initial support for the AnyConnect iOS client running on Apple silicon hardware. See the release notes for caveats.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.
* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

For details see the AnyConnect product release notes at https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-release-notes-list.html. 4.10.03116 10/26/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.

AnyConnect 4.10.02093 adds initial support for the AnyConnect iOS client running on Apple silicon hardware. See the release notes for caveats.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.
* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

For details see the AnyConnect product release notes at https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-release-notes-list.html. 4.10.02095 09/14/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.

AnyConnect 4.10.02xxx adds support to run AnyConnect for iOS on Apple Silicon based Macs. See the release notes for caveats.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.
* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

For details see the AnyConnect product release notes at https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-release-notes-list.html. 4.10.02093 08/30/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.

* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

Please see: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/release/notes/release-notes-apple-ios-anyconnect-4-9.html#Cisco_Reference.dita_dd92937a-8748-4d79-80fa-e99120b268cc

AnyConnect 4.9 on iOS adds support for multiple tunnels (requires MDM/EMM configuration).

AnyConnect 4.9 on iOS adds support for Server Name Identification (SNI) for VPN connections.

Caveats:
On iOS 14 when tunnel DNS servers are configured without split DNS, failure to resolve an address via the tunnel DNS servers does not result in a fallback to the device's public DNS servers. This is a change in iOS behaviour. 4.10.01099 07/22/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

AnyConnect 4.10 adds Yubikey authentication support.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.

* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

Please see: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/release/notes/release-notes-apple-ios-anyconnect-4-9.html#Cisco_Reference.dita_dd92937a-8748-4d79-80fa-e99120b268cc

AnyConnect 4.9 on iOS adds support for multiple tunnels (requires MDM/EMM configuration).

AnyConnect 4.9 on iOS adds support for Server Name Identification (SNI) for VPN connections.

Caveats:
On iOS 14 when tunnel DNS servers are configured without split DNS, failure to resolve an address via the tunnel DNS servers does not result in a fallback to the device's public DNS servers. This is a change in iOS behaviour. 4.10.01097 07/04/2021 Yubikey authentication support.
General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.

* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

Please see: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/release/notes/release-notes-apple-ios-anyconnect-4-9.html#Cisco_Reference.dita_dd92937a-8748-4d79-80fa-e99120b268cc

AnyConnect 4.9 on iOS adds support for multiple tunnels (requires MDM/EMM configuration).

AnyConnect 4.9 on iOS adds support for Server Name Identification (SNI) for VPN connections.

Caveats:
On iOS 14 when tunnel DNS servers are configured without split DNS, failure to resolve an address via the tunnel DNS servers does not result in a fallback to the device's public DNS servers. This is a change in iOS behaviour. 4.10.01084 06/10/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

Please note that as of the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.

* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

Please see: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/release/notes/release-notes-apple-ios-anyconnect-4-9.html#Cisco_Reference.dita_dd92937a-8748-4d79-80fa-e99120b268cc

AnyConnect 4.9 on iOS adds support for multiple tunnels (requires MDM/EMM configuration).

AnyConnect 4.9 on iOS adds support for Server Name Identification (SNI) for VPN connections.

Caveats:
On iOS 14 when tunnel DNS servers are configured without split DNS, failure to resolve an address via the tunnel DNS servers does not result in a fallback to the device's public DNS servers. This is a change in iOS behaviour. 4.10.00072 03/30/2021 General improvements and bug fixes.
Please report any questions or problems to ac-mobile-feedback@cisco.com.

Please note that in the 4.9 AnyConnect releases certain less secure cipher suites have been removed. If you have difficulty connecting please contact your system administrator.

* For SSL VPN, AnyConnect no longer supports the following cipher suites from both TLS and DTLS:
* DHE-RSA-AES256-SHA and DES-CBC3-SHA
* For IKEv2/IPsec, AnyConnect no longer supports the following algorithms:
* Encryption algorithms: DES and 3DES
* Pseudo Random Function (PRF) algorithm: MD5
* Integrity algorithm: MD5
* Diffie-Hellman (DH) groups: 2, 5, 14, 24

Please see: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/release/notes/release-notes-apple-ios-anyconnect-4-9.html#Cisco_Reference.dita_dd92937a-8748-4d79-80fa-e99120b268cc

AnyConnect 4.9 on iOS adds support for multiple tunnels (requires MDM/EMM configuration).

AnyConnect 4.9 on iOS adds support for Server Name Identification (SNI) for VPN connections. 4.9.05043 12/19/2020