(Optional) Disable VPN Functionality (Post-Installation)
If the VPN functionality is not disabled during installation, it can be (optionally) disabled with a post-installation task or script. The Secure Client VPN functionality can be disabled after installation by creating a special profile, VPNDisable_ServiceProfile.xml. Place the profile in the following directory:
/opt/cisco/secureclient/vpn/profile/VPNDisable_ServiceProfile.xml
Instead of copying the umbrella profile, you can create it with a script. This is useful for management software that supports post-install script. The following example shows how to create the VPNDisable_ServiceProfile.xml using a bash script.
# !/bin/bash
profile_file="/opt/cisco/secureclient/vpn/profile/VPNDisable_ServiceProfile.xml"
data="<?xml version="1.0" encoding="utf-8"?>\\n
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">\\n
<ClientInitialization>\\n
<ServiceDisable>true</ServiceDisable>\\n
</ClientInitialization>\\n
</AnyConnectProfile>\\n"
if ! test -f $profile_file; then
echo -e $data > $profile_file
fi
For more information, see How to Disable VPN Functionality in Cisco Secure Client.