| For Organizations | Action | |------------------|--------| | Still using v4.x after Jan 2025 | – You are running an unsupported, vulnerable client. | | Using v4.10.x before Jan 2025 | Plan upgrade within 3–6 months. | | Using older v4.x (<4.10) | Upgrade now – already EoL and exposed to known exploits. | | Bound to legacy OS (Win7/macOS 10.13) | Isolate VPN access, consider network-based ZTNA as alternative. |

It is a lightweight client. Modules can be added—like Cisco Umbrella Roaming for web protection or Network Access Manager—without needing to overhaul the entire agent. Broad Device Support:

v4.x was the first branch to robustly support (Security Assertion Markup Language) for modern SSO integration with Azure AD, Okta, or Ping. Prior to v4.6, SAML support was buggy. From 4.7 onward, it became production-ready, allowing users to authenticate via MFA push notifications without touching the AnyConnect GUI (a browser window pops up).

No deep story is complete without the shadows. v4.x had a notorious lifecycle. By the time v4.10 (the final feature release) arrived, Cisco had already shifted focus to v5. But v4.x lingered because it was stable . However, that stability bred dangerous complacency.