Cisco AnyConnect ISE Posture Module
Overview
Cisco AnyConnect ISE Posture Module is a software program developed by Cisco Systems. The most common release is 4.1.04011, with over 98% of all installations currently using this version. During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The setup package generally installs about 87 files and is usually about 25.64 MB (26,882,961 bytes). Relative to the overall usage of users who have this installed on their PCs, most are running Windows 10 and Windows 7 (SP1). While about 73% of users of Cisco AnyConnect ISE Posture Module come from the United States, it is also popular in Singapore and Hong Kong.
Program details
URL: www.cisco.com
Help link: www.cisco.com/TAC
Installation folder: C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\
Uninstaller: MsiExec.exe /X{A0EBA48E-6BCA-49CA-8659-871A506079E7}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 25.64 MB
Language: English (United States)
Files installed by Cisco AnyConnect ISE Posture Module
-
ac_sock_fltr_api.dll - Cisco AnyConnect Secure Mobility Client (Cisco AnyConnect Kernel Driver Framework Socket Layer Configuration Library)
-
acnamagent.exe - Cisco AnyConnect Network Access Manager (AnyConnect NAM Service)
-
acnamapi.dll - AnyConnect NAM L2 API Library
-
acnamauth.dll - AnyConnect NAM Authentication Library
-
acnamcontrol.exe - AnyConnect NAM Control Utility
-
acnamcorelib.dll - AnyConnect NAM OS Core Library
-
ACNAMctl.dll - AnyConnect NAM Plugin Manager Library
-
acnamfdapi.dll - Cisco AnyConnect Network Access Manager Filter Driver API
-
acnamihv.dll - Cisco AnyConnect Network Access Manager IHV Service
-
acnamihvapi.dll - Cisco AnyConnect Network Access Manager IHV Service API DLL
-
acnamlogging.dll - AnyConnect Nam Logging Library
-
acnamlogonagent.exe - AnyConnect NAM Logon Agent
-
acnampwdcredprovider.dll - AnyConnect NAM Password Credential Provider Library
-
acnamsyslib.dll - AnyConnect NAM System Library
-
acnvmagent.exe - Cisco AnyConnect Network Visibility Agent
-
acsock.sys - Cisco AnyConnect Kernel Driver Framework Socket Layer Interceptor
-
acsock64.sys
-
acumbrella.dll - Cisco AnyConnect Umbrella Roaming Security Plugin
-
acumbrellaagent.exe - Cisco AnyConnect Roaming Security Agent
-
acumbrellacore.dll - Cisco AnyConnect Umbrella Plugin
-
acumbrellaipprotection.dll - Cisco AnyConnect Umbrella IP Filtering
-
acumbrellanetlistmgr.dll - Cisco AnyConnect Roaming Security Interop Library for netlistmgr
-
InstallHelper.exe - AnyConnect Secure Mobility Client Install Helper
-
InstallHelper64.exe
-
ManifestTool.exe - Cisco AnyConnect Secure Mobility Client ManifestTool
-
Uninstall.exe - Cisco AnyConnect Secure Mobility Client Setup Application
-
VACon.exe - AnyConnect Secure Mobility Client Virtual Adapter Installer
-
VACon64.exe
-
vpnagent.exe - VPN Agent Service
-
vpnagentutilities.dll - AgentUtilities
-
vpnapi.dll - AnyConnect Secure Mobility Client VPN API
-
vpncli.exe - VPN Client Command Line Interface
-
vpncommon.dll - Common
-
vpncommoncrypt.dll - CommonCrypt
-
vpndownloader.exe - Cisco AnyConnect Secure Mobility Client Downloader
-
vpnui.exe - Cisco AnyConnect User Interface
-
vpnva-6.sys - Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
-
vpnva64-6.sys
-
acwebsecagent.exe - Cisco AnyConnect Web Security Module (Cisco AnyConnect Web Security Agent)
-
acruntime.dll - Cisco AnyConnect Runtime Framework
-
acise.exe - Cisco AnyConnect ISE Posture
-
aciseagent.exe - Cisco AnyConnect ISE Posture Service
-
aciseposture.exe
-
aciseuac.exe
-
libacise.dll - Cisco AnyConnect ISE Posture Lib
-
acciscocrypto.dll (by The OpenSSL Project, http://www.openssl.org/) - The OpenSSL Toolkit (OpenSSL Shared Library)
-
acciscossl.dll (by The OpenSSL Project, http://www.openssl.org/)
-
zlib1.dll - zlib (zlib data compression library)
Behaviors exhibited
Scheduled Task
- vpnui.exe is scheduled as a task named 'Morning - Outlook' (runs daily at 5:55 AM).
7 Services
- acnamlogonagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager Logon Module' (namlm) "Provides Single Sign On support for the Cisco AnyConnect Network Access Manager".
- acnamagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager' (nam) "Establishes secure, authenticated WiFi or Ethernet connections for this computer.".
- aciseagent.exe runs as a service named 'Cisco AnyConnect Secure Mobility ISE Posture Agent' (aciseagent) "Cisco AnyConnect ISE Posture Service".
- acumbrellaagent.exe runs as a service named 'Cisco AnyConnect Umbrella Roaming Security Agent' (acumbrellaagent) "Cisco AnyConnect Umbrella Roaming Security Framework Service".
- acwebsecagent.exe runs as a service named 'Cisco AnyConnect Web Security Agent' (acwebsecagent) "Cisco AnyConnect Advanced Web Security Framework Service".
- acnvmagent.exe runs as a service named 'Cisco AnyConnect Network Visibility Agent' (acnvmagent) "Cisco AnyConnect Network Visibility Service for Windows".
Plus 1 more
Startup File (All Users Run)
- vpnui.exe is loaded in the all users (HKLM) registry as a startup file name 'Cisco AnyConnect Secure Mobility Agent for Windows' which loads as "C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized.
Windows Firewall Allowed Program
- vpnui.exe is added as a firewall exception for 'C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe'.
How do I remove Cisco AnyConnect ISE Posture Module?
You can uninstall Cisco AnyConnect ISE Posture Module from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Cisco AnyConnect ISE Posture Module, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Cisco AnyConnect ISE Posture Module.
OS VERSIONS
Win 10 68%
Win 7 (SP1) 32%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 10%
Keep it 90%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 10 |
68.00% |
|
| Windows 7 |
32.00% |
|
Which OS releases does it run on? |
| Windows 10 Pro |
28.00% |
|
| Windows 7 Enterprise |
16.00% |
|
| Windows 7 Home Premium |
12.00% |
|
| Windows 10 Enterprise |
8.00% |
|
| Windows 8.1 Pro |
8.00% |
|
| Windows 10 Home Single La... |
8.00% |
|
Geography
72.97% of installs come from the United States
Which countries install it?
| United States |
72.97% |
| Singapore |
5.41% |
| Hong Kong |
2.70% |
| South Africa |
2.70% |
| Brazil |
2.70% |
| France |
2.70% |
| Iran |
2.70% |
| United Arab Emirates |
2.70% |
| Egypt |
2.70% |
| Hungary |
2.70% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
34.78% |
|
| Lenovo |
26.09% |
|
| Hewlett-Packard |
17.39% |
|
| Sony |
8.70% |
|
| MSI |
4.35% |
|
| Alienware |
4.35% |
|
| ASUS |
4.35% |
|
Common models |
| Sony SVS15126PGB |
4.17% |
|
| Micro-Star Co., Ltd. CR42... |
4.17% |
|
| LENOVO 20347 |
4.17% |
|
| HP HP EliteBook 840 G3 |
4.17% |
|
| DELL__ CBX3___ |
4.17% |
|
| Dell OptiPlex 760 |
4.17% |
|
About Cisco Systems
Cisco designs, manufactures, & sells networking equipment whose portfolio of products & services is focused on market segments, Enterprise & Service Provider, Small Business & the Home.
Publisher URL: www.cisco.com