VPN, Cisco AnyConnect (or Cisco Secure Client) Socket Filter for macOS

The Cisco Secure VPN Client (also known as AnyConnect) uses a system extension on macOS

What is Cisco AnyConnect (or Cisco Secure Connect) Socket Filter?

AnyConnect/Secure Client uses a network system extension on macOS, bundled into an application named Cisco AnyConnect Socket Filter (or Cisco Secure Client - Socket Filter). (This app controls the extension activation and deactivation and is installed under /Applications/Cisco.)

The AnyConnect (or Secure Client) extension has the following three components:

  • DNS proxy
  • App/Transparent proxy
  • Content filter

Do I need to have Cisco AnyConnect (or Secure Client) Socket Filter installed and Running?

No, not for the Urbana Campus VPN.  It is used for advanced security functions not used by the Urbana campus.

We recommend that you delete the extension by deleting the Application "Cisco AnyConnect Socket Filter.app" (or Cisco Secure Client - Socket Filter) from your computer and reboot.

How do I tell if the Socket Filter is installed and Running?

These components are visible in the macOS System Preferences – Network UI window:


Figure 1. DNS Proxy Component in the Network Preference Panel - state is green and Running


Figure 2. App/Transport Proxy Component in the Network Preference Panel - state is green and Connected


Figure 3. Content Filter Component in the Network Preference Panel - state is green and Running

You can read more technical details from Cisco.


Keywords:
vpn mac socket network system extension allow deny running run install installed 
Doc ID:
114284
Owned by:
VPN G. in University of Illinois Technology Services
Created:
2021-10-13
Updated:
2025-09-26
Sites:
University of Illinois Technology Services