I just recently figured out that the available groups in the drop down menu are populated by my connection profiles that have an alias defined. If I do not define an alias that connection profile isn’t available to choose. If I want to hide a connection profile, is there a way to manually put one in when connecting to VPN? For instance I have consultants that connect to our VPN on occasion but I don’t want their connection profile visible to my employees, just have the consultants manually specify their group if possible. Any help would be appreciated.
I’m not sure you are correct - I don’t think Anyconnect shows all tunnel groups on the appliance unless there is an XML profile for each group. If you connect once to a group and there is a profile XML file associated, it will be downloaded to the client and effectively permanent. You can list the groups on the clientless portal though.
Alternatively, just set up a new tunnel group and tell them to enter the FQDN/group-url in the dropdown field in Anyconnect but don’t associate a profile file.
Thanks for the info. I just tested it. I had 6 groups to choose from in the drop down list. I removed 4 of the connection profile aliases and those 4 disappeared from the drop down as soon as I hit connect again, it updated. I’ll try the fqdn group url combo. Thank You