Cisco Umbrella has Install and Uninstall scripts, and agent procedures for MSPs to deploy the Cisco Secure Client using Kaseya VSA. These scripts allow MSPs to import, set up system variables and install the Cisco Secure Client. However, Cisco does not provide comprehensive support for Kaseya. For more information about Kaseya, see Kaseya documentation.

Table of Contents

• Overview
• Deployment Procedure of Cisco Secure Client 5.0 using the Kaseya VSA Agent.
  • Select and Download Cisco Secure Client Components
  • Upload the new combined Zip file to the KVSA RMM server
• Optional Parameters
• Uninstall Scripts

Overview

The Cisco Umbrella Roaming Client has been a cornerstone of DNS security for millions of users worldwide. In our continual efforts to improve and innovate, we have introduced the Cisco Secure Client — our next-generation unified endpoint agent. This new client encompasses all the benefits of the Umbrella Roaming Client while offering a more advanced security solution, including a suite of security service modules, superior performance and extended compatibility. Cisco has announced End of Support for Umbrella Roaming client.

A new Secure Client installation does currently require 3 MSIs for operability and supportability: the core (also known as the VPN) module, the Umbrella Module and the DART tool for diagnostics.

Deployment Procedure of Cisco Secure Client 5.0 using the Kaseya VSA Agent

Select and Download Cisco Secure Client Components

1. Access the Umbrella Dashboard:

a. In the Umbrella dashboard, navigate to Deployments > Roaming Computers and click Roaming Client.

b. Select your appropriate deployment package in respective to your OS.

2. Download the OrgInfo.json File

a. In the same Download Roaming Client window, click Download Module Profile to download the OrgInfo.json file.

3. Prepare Files for Kaseya:

a. Once the Cisco Secure Client ZIP file and the OrgInfo.json file have been downloaded, the administrator must add the OrgInfo.json file to the ZIP file.

b. Place the combined ZIP file in the Kaseya VSA 'managedfiles' share.

c. At this point, all required files will be included in the resulting ZIP file.

Upload the new combined Zip file to the KVSA RMM server

a. At the top of the module pane, click Manage Files.

A pop-up will appear with links to two folders: Private Files and Shared Files.

b. Click Upload a File to browse and upload the ZIP file from Step 1. Once the upload is complete, you can close the pop-up window and continue.

c. Alternatively, you can upload files directly to the managed files directory on the IIS server, as described in the VSA help files. This directory is usually located at C:\Kaseya\WebPages\ManagedFiles. Within this directory, several sub-directories exist:

• Place private files in the directory named for the specific user.
• Place shared files in the VSASharedFiles directory.

Optional Parameters

You can use the following optional parameters to change the appearance of the roaming client on the device or control the behavior of the client regarding the internal domains configured in the Cisco Umbrella dashboard:

• HIDE_UI: Hide the roaming client icon from the system tray of the Windows device to decrease awareness of the roaming client for the end-user.
  • Values:
    • 0 – show system tray icon (default)
    • 1 – hide system tray icon
• HIDE_ARP: Hide the roaming client from the Add/Remove Program list in Windows to prevent its removal by an end-user with admin rights.
  • Values:
    • 0 – show in list (default)
    • 1 – omit from list
• NO_AUTOSUFFIX: Do not add domains present in the DNS Suffixes settings in network adapters and networking properties to the Internal Domains list. This parameter is to make the roaming client more aware of local resources and domains on foreign networks.
  • Values:
    • 0 – add the domains (default)
    • 1 – do not add the domains
• NO_NXDOMAIN: If a DNS query sent to Umbrella returns an NXDOMAIN, query the local DNS servers.
  • Values:
    • 0 – query local DNS servers (default)
    • 1 – do not query local DNS servers

Uninstall Scripts

The uninstall scripts are simple automated scripts that execute a shell command “wmic product where name=’Cisco Secure Client’ call uninstall”. This method was sourced from Umbrella Support.

NinjaOne < Kaseya> ConnectWise Automate