Cisco AnyConnect Socket Filter for Mac OS Big Sur

AnyConnect VPN version 4.9 and later use a system extension to provide functionality that used to be in a kernel extension for Mac OS Big Sur and later operating systems.

What is Cisco AnyConnect Socket Filter?

AnyConnect uses a network system extension on macOS 11, bundled into an application named Cisco AnyConnect Socket Filter. (This app controls the extension activation and deactivation and is installed under /Applications/Cisco.)

The AnyConnect extension has the following three components:

  • DNS proxy
  • App/Transparent proxy
  • Content filter

Do I need to have Cisco AnyConnect Socket Filter installed and Running?

Yes if you are running Big Sur or later. All three need to be installed and operational for the VPN software to function correctly.


How do I tell if the Socket Filter is installed and Running?

These components are visible in the macOS System Preferences – Network UI window:


Figure 1. DNS Proxy Component in the Network Preference Panel - state is green and Running



Figure 2. App/Transport Proxy Component in the Network Preference Panel - state is green and Connected



Figure 3. Content Filter Component in the Network Preference Panel - state is green and Running


You can read more technical details from Cisco: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/upgrade/AnyConnect_macOS_BigSur_Advisory.pdf 





Keywords:vpn mac bigsur socket network system extension   Doc ID:114284
Owner:Network E.Group:University of Illinois Technology Services
Created:2021-10-13 13:32 CSTUpdated:2021-10-14 08:05 CST
Sites:University of Illinois Technology Services
Feedback:  0   0