Cisco AnyConnect Logo


When trying to push out the latest version of Cisco AnyConnect Umbrella to your desktop computers, you may find that you have to install the VPN & Core modules as prerequisites.

This can then cause an issue as you do not want your desktop computers that are internal in your office to have the VPN module. What you need is to be able to install the Cisco Core module without the VPN module also getting installed.


To fix this problem, all you need to do is to add some parameters to your installation command line. This should work if you are using SCCM, Group Policy or just running a manual installation.

Installation Parameters

The installation parameters you should use for each module is as below:

Cisco AnyConnect VPN & Core Module

msiexec /package anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* vpninstall.log


  • anyconnect-win-X.X.XXXXX-core-vpn-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • vpninstall.log – Installation log filename

Cisco Umbrella Module

msiexec /package anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi /passive PRE_DEPLOY_DISABLE_VPN=1 /lvx* umbrellainstall.log


  • anyconnect-win-X.X.XXXXX-umbrella-predeploy-k9.msi – MSI filename
  • PRE_DEPLOY_DISABLE_VPN=1 – This tells the installer to disable the VPN module
  • umbrellainstall.log – Installation log filename


By using these installation parameters, you will now see that the module has installed but not the VPN module. This then allows you to install the Umbrella module without installing a VPN client on a server or desktop machine.


What does VPN mean?

VPN stands for Virtual Private Network.

Where does the log file get created?

You can enter your own log file path in front of the filename and it will get created there. However, if you leave it without a file path, then it will be created in the root of the installation location.

What are parameters?

Parameters are a selection of commands that you add to an installation command line to tell the installer what to do.

Will this work with other Cisco Modules?

Yes, if you only want to install the Cisco Core module for DaRT as an example, then yes this will work in the same way.

Click to rate this post!
[Total: 0 Average: 0]

Discover more from TechyGeeksHome

Subscribe to get the latest posts to your email.

Avatar for Andrew Armstrong

Andrew Armstrong

Founder of TechyGeeksHome and Head Editor for over 15 years! IT expert in multiple areas for over 26 years. Sharing experience and knowledge whenever possible! Making IT Happen.

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.