Client Compatibility
WolfGuard implements the industry-standard AnyConnect protocol, ensuring compatibility with existing VPN clients while adding modern security features.
Full Cisco Compatibility
Drop-in replacement for Cisco AnyConnect Server with complete protocol support
Open Standards
Works with any AnyConnect-compatible client implementation
Modern Protocols
TLS 1.3 and DTLS 1.3 support for enhanced security
High Performance
Optimized with wolfSSL for minimal overhead and maximum throughput
Cross-Platform
Linux, Windows, macOS support with consistent functionality
Split Tunneling
Intelligent traffic routing to route specific apps or networks through VPN while allowing direct access for others
AnyConnect Protocol Support
WolfGuard implements the Cisco AnyConnect SSL VPN protocol, providing full compatibility with official and third-party clients. The server supports both the TLS control channel and DTLS data channel for optimal performance.
Cisco Secure Client (AnyConnect)
WolfGuard is fully compatible with Cisco Secure Client (formerly Cisco AnyConnect), allowing you to use the official client with your WolfGuard server deployment.
Version 5.x
Supported Features:
Latest version (5.1.12.146) includes TLS 1.3 support with improved performance and security. DTLS 1.2 for UDP connections.
Version 4.x
Supported Features:
Legacy AnyConnect client with TLS 1.2 and DTLS 1.2 support. Reliable but lacks modern protocol features.
Protocol Limitations
While WolfGuard server supports modern protocols including TLS 1.3, DTLS 1.3, and QUIC, current Cisco clients are limited to older protocol versions:
- •Cisco 5.x: Supports TLS 1.3 for TCP, but only DTLS 1.2 for UDP (not DTLS 1.3)
- •Cisco 4.x: Limited to TLS 1.2 and DTLS 1.2 only
- •No QUIC support: Neither version supports next-generation QUIC protocol
The upcoming WolfGuard Connect client will unlock full server capabilities with DTLS 1.3 and QUIC support.
Supported Features
Get Cisco Secure Client
Download the official Cisco Secure Client (AnyConnect) from Cisco's website. The client is available for Windows, macOS, Linux, iOS, and Android.
Connecting to WolfGuard
To connect to your WolfGuard server using Cisco Secure Client:
- Launch Cisco Secure Client (AnyConnect)
- Enter your WolfGuard server address (e.g.,
vpn.example.com) - Click Connect and accept the server certificate if prompted
- Enter your credentials (username/password or certificate as configured)
- The client will establish a secure VPN connection
Note: WolfGuard supports the same connection profiles and configuration options as Cisco AnyConnect Server, so existing client configurations will work without modification.
Cisco Secure Client Compatibility Matrix
WolfGuard is compatible with Cisco Secure Client (formerly AnyConnect) versions 4.9 through 5.1. The following matrix shows OS support across all major client versions.
Looking for information about Windows 7, Windows 8.1, or other end-of-life operating systems? See the Legacy System Support section below.
Legend:
Windows
| Operating System | 4.9.x | 4.10.x | 5.0.x | 5.1.x |
|---|---|---|---|---|
| Windows 11 (x64) | ||||
| Windows 11 ARM64VPN only in 4.x | ||||
| Windows 10 (x64) | ||||
| Windows 10 (x86) | ||||
| Windows 8.1EOL Jan 2023 | ||||
| Windows 7EOL Jan 2020 |
macOS
| Operating System | 4.9.x | 4.10.x | 5.0.x | 5.1.x |
|---|---|---|---|---|
| macOS 26 Tahoe5.1.12.146+ | ||||
| macOS 15 Sequoia5.1.6.103+ | ||||
| macOS 14 Sonoma | ||||
| macOS 13 Ventura | ||||
| macOS 12 MontereyRemoved in 5.1.6.103 | ||||
| macOS 11 Big SurRemoved in 5.1.3.62 | ||||
| macOS 10.15 CatalinaVPN only in 5.0 |
Linux
| Operating System | 4.9.x | 4.10.x | 5.0.x | 5.1.x |
|---|---|---|---|---|
| Red Hat 10.x | ||||
| Red Hat 9.x | ||||
| Red Hat 8.x8.2+ for 4.9 | ||||
| Red Hat 7.xEOL Jun 2024 | ||||
| Ubuntu 24.04 LTS | ||||
| Ubuntu 22.04 LTS | ||||
| Ubuntu 20.04 LTSRemoved in 5.1.10.233 | ||||
| Ubuntu 18.04 LTSEOL | ||||
| SUSE SLES 15Limited features | ||||
| Linux ARM64Added in 5.1.11.388 |
Key Version Milestones
Protocol Support by Version:
TLS Protocol:
- • TLS 1.3: Versions 5.0+ (requires ASA 9.19.1+)
- • TLS 1.2: All versions
- • TLS 1.0/1.1: Deprecated in 4.9+, removed in 5.0+
DTLS Protocol:
- • DTLS 1.2: All versions
- • DTLS 1.3: Not yet implemented by Cisco
- • DTLS 1.0: Legacy support in older versions
Alternative VPN Clients
WolfGuard works with any AnyConnect-compatible VPN client. Here are some popular open-source and third-party alternatives to Cisco Secure Client.
OpenConnect
Open-source AnyConnect-compatible client with excellent Linux support
Key Features:
Quick Install:
ubuntu:
sudo apt install openconnectfedora:
sudo dnf install openconnectmacos:
brew install openconnectOpenConnect GUI
Graphical user interface for OpenConnect on Windows and Linux
Key Features:
NetworkManager OpenConnect
NetworkManager plugin for seamless VPN integration in Linux desktop environments
Key Features:
Quick Install:
ubuntu:
sudo apt install network-manager-openconnect-gnomefedora:
sudo dnf install NetworkManager-openconnect-gnomeMobile Clients
Cisco Secure Client official mobile apps for iOS and Android
Key Features:
Compatibility Matrix
| Client | TLS 1.3 | DTLS 1.3 | Certificate Auth | Password Auth | OTP/2FA |
|---|---|---|---|---|---|
| Cisco Secure Client 5.x | |||||
| OpenConnect 9.x | |||||
| NetworkManager Plugin | |||||
| OpenConnect GUI |
OTP/2FA Support: All clients support One-Time Password authentication via RADIUS integration. WolfGuard server can authenticate users using TOTP (Time-based One-Time Password) or HOTP (HMAC-based One-Time Password) tokens. Compatible with Google Authenticator, Microsoft Authenticator, Authy, and other RFC 6238/4226 compliant authenticator apps.
WolfGuard Connect
The official WolfGuard VPN client is currently under development. It will unlock the full potential of WolfGuard server with support for DTLS 1.3 and QUIC protocol - modern features that current Cisco clients cannot provide.
Unlock Full Server Capabilities
WolfGuard Connect will be a modern, open-source VPN client built with C++ and Qt6, unlocking advanced protocols that legacy clients cannot support:
Technology Stack:
Key Features
DTLS 1.3 Support
Next-generation datagram protocol for secure UDP VPN connections - not available in current Cisco clients
QUIC Protocol
Modern transport protocol combining TCP reliability with UDP performance for superior VPN experience
Cross-Platform Desktop
Native applications for Windows, macOS, and Linux with consistent UI/UX
Mobile Apps
iOS and Android applications with platform-specific features and optimizations
Modern Qt6 UI
Clean, intuitive interface with native look and feel on each platform
Auto-Update
Automatic update mechanism to keep your VPN client secure with the latest features and patches
Protocol Advantage
WolfGuard Connect will support next-generation protocols that provide significant advantages over legacy implementations:
| Protocol | Cisco Clients | WolfGuard Connect | Benefit |
|---|---|---|---|
| TLS (TCP) | 1.3 (v5.x), 1.2 (v4.x) | TLS 1.3 | Faster handshakes |
| DTLS (UDP) | 1.2 only | DTLS 1.3 | Better performance, security |
| QUIC | Not supported | Supported | Mobile optimization, 0-RTT |
Why this matters: DTLS 1.3 and QUIC provide faster connection establishment, improved security, and better performance on unreliable networks - making them ideal for modern VPN deployments, especially on mobile devices.
Development Roadmap
Phase 1: Core Functionality
Basic VPN connection with DTLS 1.3 and QUIC support, authentication, tunnel management
Phase 2: Platform Integration
Native OS integration, system tray, auto-connect features, network detection
Phase 3: Advanced Features
Split tunneling, connection profiles, diagnostics tools, performance monitoring
Phase 4: Mobile Clients
iOS and Android applications with QUIC optimization for mobile networks
Follow Development
The WolfGuard Connect client will be developed openly on GitHub. Watch the repository to stay updated on progress, or contribute to development.
In the Meantime
While WolfGuard Connect is under development, we recommend using:
- •OpenConnect for Linux and macOS users seeking an open-source solution
- •Cisco Secure Client for the most feature-complete experience across all platforms
- •NetworkManager OpenConnect Plugin for seamless Linux desktop integration