Cisco AnyConnect Web Security Module
What is Cisco AnyConnect Web Security Module? (from Cisco Systems)
You can deploy the Web Security module and benefit from the ScanSafe web scanning services without having to install an ASA and without enabling the VPN capabilities of the AnyConnect Secure Mobility Client. You still need a Secure Mobility for ScanSafe license in addition to ScanSafe Web Filtering and/or ScanSafe Mal... Read more
Overview
Cisco AnyConnect Web Security Module is a software program developed by Cisco Systems. The most common release is 3.1.05170, with over 98% of all installations currently using this version. During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The primary executable is named acwebsecagent.exe. The setup package generally installs about 96 files and is usually about 12.59 MB (13,201,938 bytes). Relative to the overall usage of users who have this installed on their PCs, most are running Windows 7 (SP1) and Windows 10. While about 79% of users of Cisco AnyConnect Web Security Module come from the United States, it is also popular in Germany and United Kingdom.
Program details
URL: www.cisco.com
Help link: www.cisco.com/TAC
Installation folder: C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\
Uninstaller: MsiExec.exe /X{10ADE805-14C1-4D5E-900C-A3D046E503DF}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 12.59 MB
Language: English (United States)
Files installed by Cisco AnyConnect Web Security Module
| Program executable: | acwebsecagent.exe |
| Name: | Cisco AnyConnect Web Security Module |
| Cisco AnyConnect Web Security Agent |
| Path: | C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\acwebsecagent.exe |
| MD5: | fac2d952b227f77cf37ce0b84ed8eb2f |
Additional files:
-
ac_sock_fltr_api.dll - Cisco AnyConnect Secure Mobility Client (Cisco AnyConnect Kernel Driver Framework Socket Layer Configuration Library)
-
acnamagent.exe - Cisco AnyConnect Network Access Manager (AnyConnect NAM Service)
-
acnamauth.dll - AnyConnect NAM Authentication Library
-
acnamcontrol.exe - AnyConnect NAM Control Utility
-
acnamcorelib.dll - AnyConnect NAM OS Core Library
-
acnamfdapi.dll - Cisco AnyConnect Network Access Manager Filter Driver API
-
acnamihv.dll - Cisco AnyConnect Network Access Manager IHV Service
-
acnamihvapi.dll - Cisco AnyConnect Network Access Manager IHV Service API DLL
-
acnamlogging.dll - AnyConnect Nam Logging Library
-
acnamlogonagent.exe - AnyConnect NAM Logon Agent
-
acnampwdcredprovider.dll - AnyConnect NAM Password Credential Provider Library
-
acnamsyslib.dll - AnyConnect NAM System Library
-
acsock.sys - Cisco AnyConnect Kernel Driver Framework Socket Layer Interceptor
-
acsock64.sys
-
InstallHelper.exe - AnyConnect Secure Mobility Client Install Helper
-
InstallHelper64.exe
-
ManifestTool.exe - Cisco AnyConnect Secure Mobility Client ManifestTool
-
Uninstall.exe - Cisco AnyConnect Secure Mobility Client Setup Application
-
VACon.exe - AnyConnect Secure Mobility Client Virtual Adapter Installer
-
VACon64.exe
-
vpnagent.exe - VPN Agent Service
-
vpnagentutilities.dll - AgentUtilities
-
vpnapi.dll - AnyConnect Secure Mobility Client VPN API
-
vpncli.exe - VPN Client Command Line Interface
-
vpncommon.dll - Common
-
vpncommoncrypt.dll - CommonCrypt
-
vpndownloader.exe - Cisco AnyConnect Secure Mobility Client Downloader
-
vpnui.exe - Cisco AnyConnect User Interface
-
vpnva.sys - Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
-
vpnva-6.sys
-
vpnva64.sys
-
vpnva64-6.sys
-
acobfuscate.exe - Cisco AnyConnect Web Security Module (Cisco AnyConnect Web Security Configuration Obfuscator)
-
acwebsecagent_original.exe - Cisco AnyConnect Web Security Agent
-
acruntime.dll - Cisco AnyConnect Runtime Framework
-
acise.exe - Cisco AnyConnect ISE Posture
-
aciseagent.exe - Cisco AnyConnect ISE Posture Service
-
aciseposture.exe
-
aciseuac.exe
-
libacise.dll - Cisco AnyConnect ISE Posture Lib
-
dartcli.exe - Cisco AnyConnect DART (Dart CLI)
-
DARTEngine.dll - Dart Engine
-
DartOffline.exe - Dart Offline
-
wineventlog.exe - Windows Event Log Utility
-
acciscocrypto.dll (by The OpenSSL Project, http://www.openssl.org/) - The OpenSSL Toolkit (OpenSSL Shared Library)
-
acciscossl.dll (by The OpenSSL Project, http://www.openssl.org/)
-
zlib1.dll - zlib (zlib data compression library)
-
boost_date_time-vc80-mt-1_47.dll
-
boost_filesystem-vc80-mt-1_47.dll
-
boost_system-vc80-mt-1_47.dll
-
boost_thread-vc80-mt-1_47.dll
-
libxml2.dll
Behaviors exhibited
2 Scheduled Tasks
- vpndownloader.exe is scheduled as a task with the class '{7D65395E-3935-4C7A-90C5-CDADA66AB45D}' (runs on registration).
- vpnui.exe is scheduled as a task with the class '{927581DD-98C8-46ED-9FC9-045AC2959403}' (runs on registration).
Scheduled Task (Boot/Login)
- vpnui.exe is automatically launched at startup through a scheduled task named Cisco AnyConnect Secure Mobility Agent for Windows.
5 Services
- acwebsecagent.exe runs as a service named 'Cisco AnyConnect Web Security Agent' (acwebsecagent) "Cisco AnyConnect Advanced Web Security Framework Service".
- acnamlogonagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager Logon Module' (namlm) "Provides Single Sign On support for the Cisco AnyConnect Network Access Manager".
- acnamagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager' (nam) "Establishes secure, authenticated WiFi or Ethernet connections for this computer.".
- aciseagent.exe runs as a service named 'Cisco AnyConnect Secure Mobility ISE Posture Agent' (aciseagent) "Cisco AnyConnect ISE Posture Service".
- vpnagent.exe runs as a service named 'Cisco AnyConnect Secure Mobility Agent' (vpnagent) "Cisco AnyConnect Secure Mobility Agent for Windows".
Startup File (All Users Run)
- vpnui.exe is loaded in the all users (HKLM) registry as a startup file name 'Cisco AnyConnect Secure Mobility Agent for Windows' which loads as "C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized.
2 Windows Firewall Allowed Programs
- vpnui.exe is added as a firewall exception for 'C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe'.
- acwebsecagent.exe is added as a firewall exception for 'C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\acwebsecagent.exe'.
Resource utilization averages
Show technical details
| vpnagent.exe |
| Memory: | 5.03 MB | |
| Total CPU: | 0.0009718095% | |
| Kernel CPU: | 0.00026349% | |
| User CPU: | 0.00070832% | |
How do I remove Cisco AnyConnect Web Security Module?
You can uninstall Cisco AnyConnect Web Security Module from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Cisco AnyConnect Web Security Module, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Cisco AnyConnect Web Security Module.
OS VERSIONS
Win 7 (SP1) 71%
Win 8.1 1%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 8%
Keep it 92%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
70.65% |
|
| Windows 10 |
27.17% |
|
| Windows XP |
2.17% |
|
Which OS releases does it run on? |
| Windows 7 Enterprise |
32.97% |
|
| Windows 7 Professional |
31.87% |
|
| Windows 8.1 Enterprise |
13.19% |
|
| Windows 7 Home Premium |
3.30% |
|
| Microsoft Windows XP |
2.20% |
|
| Windows 10 Pro |
2.20% |
|
Geography
78.79% of installs come from the United States
Which countries install it?
| United States |
78.79% |
| Germany |
3.03% |
| United Kingdom |
3.03% |
| DK |
3.03% |
| Canada |
1.52% |
| India |
1.52% |
| Netherlands |
1.52% |
| Mexico |
1.52% |
| Iran |
0.76% |
| Poland |
0.76% |
| Brazil |
0.76% |
| Hong Kong |
0.76% |
| Saudi Arabia |
0.76% |
| Singapore |
0.76% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
35.71% |
|
| Lenovo |
32.86% |
|
| Hewlett-Packard |
21.43% |
|
| Intel |
4.29% |
|
| GIGABYTE |
1.43% |
|
| Sony |
1.43% |
|
| ASUS |
1.43% |
|
| MSI |
1.43% |
|
Common models |
| Dell Latitude E6420 |
5.68% |
|
| HP EliteBook 840 G1 |
4.55% |
|
| Dell Latitude E7240 |
3.41% |
|
| HP EliteBook 2570p |
2.27% |
|
| LENOVO 4293AF4 |
2.27% |
|
| Dell Latitude E6520 |
2.27% |
|
About Cisco Systems
Cisco designs, manufactures, & sells networking equipment whose portfolio of products & services is focused on market segments, Enterprise & Service Provider, Small Business & the Home.
Publisher URL: www.cisco.com