Download Cisco Secure Client
In this document, you can learn how to download and install Cisco Secure Client on your endpoint devices. You can also download configuration files that connect the Secure Client VPN module, Zero Trust Access enrollment, Internet Security module, and ThousandEyes module to your Secure Access organization.
For more information, see Deploy Cisco Secure Client in the Administrator Guide for Secure Client Release 5.
Table of Contents
- Step 1 - Navigate to the Cisco Secure Client Download page
- Step 2 - Download Cisco Secure Client
- Step 3 - Download configuration files
- Step 4 - Install Secure Client
Step 1 - Navigate to the Download Cisco Secure Client window
- Navigate to Connect > End User Connectivity.
- On the End User Connectivity page, click Cisco Secure Client.

- In the Download Cisco Secure Client window, do one of the following:

Step 2 - Download Cisco Secure Client
Download the Secure Client installer from a Cisco cloud-managed solution or from Secure Access.
Download the latest version of Secure Client from Secure Access
The latest client version for each platform is at the top of the Download Cisco Secure Client menu. For details, hover over the (i) button beside the client name.
To download and install Cisco Secure Client from Secure Access, navigate to Connect > End User Connectivity in Secure Access, click Cisco Secure Client at the top right, then download and run the Secure Client version for your endpoint operating system.

Download the cloud-managed version of Secure Client
Click Secure Client Management at the bottom of the Download Cisco Secure Client menu.
Option 1: If you are a Cisco XDR customer:
- Select your XDR region use XDR to obtain the client and manage your clients in the cloud. For more information, see XDR: Client Management.
![]()
- If you are not automatically directed to Cisco XDR, launch XDR and click the link below for your region:
- For more information, see the Cisco XDR product page.
Option 2: If you are not a Cisco XDR customer, use Secure Client Management to download and manage Secure Client. Secure Client Management is a cloud-based application that is free to Cisco customers after registration. For more information, see About Cisco Secure Client Cloud Management.
- If you were using SecureX before the SecureX End of Life date July 31, 2024, you should already have access to the Secure Client Management application and the Secure Client Management link on the Download Cisco Secure Client page should take you there directly. For more information, see Accessing Secure Client Cloud Management after the SecureX EoL.
- If you were not using SecureX before July 31, 2024, follow the Instructions for Requesting a New Secure Client Cloud Management Tenant .
- You can also access the Secure Client Management application through your personalized Cisco Application portal. In the Cisco Application Portal, click the Expand icon for your region, navigate to Secure Client Management, then click Launch. Once you subscribe to Secure Client Management, you will receive an email with a link to sign in through Security Cloud Sign On. For more information, see the Cisco Security Cloud Sign On Quick Start Guide.
Download a previous version of Secure Client from Cisco Secure Central
You can download any version of the Secure Client installer from Cisco.com:
- Make sure you have a valid service contract that is associated with your Cisco.com profile.
- Click the Cisco Software link:
- In Cisco Secure Central, download the desired Secure Client pre-deployment package and the version for the OS on the end-user device.
- Examples:
- macOS —
cisco-secure-client-macos-5.1.8.105-predeploy-k9.pkg
- Windows —
cisco-secure-client-win-5.1.8.105-predeploy-k9.msi
- macOS —
Step 3 - Download configuration files
In the Download configuration files section of the Download Cisco Secure Client Menu, download these configuration files (also known as profiles) as needed:

- For the VPN module, choose all applicable VPN profiles. The VPN profile tells Secure Access which VPN profiles to enforce. For more information, see Manage VPN Profiles.
- For Zero Trust Access enrollment, there is no configuration file.
- For the Internet Security module, download the file named
orginfo.json
. This file configures policies in the Internet Security module (also known as the Umbrella roaming module). - For the ThousandEyes module, download the file named
ThousandEyes Endpoint Agent Configuration.json
. Note: To register the ThousandEyes module, you must have onboarded Experience Insights in Secure Access. For more information, see Onboard Experience Insights.
Step 4 - Install Secure Client
Run Setup.exe
in the Secure Client install directory and follow the steps in the installation wizard. For more information, see Deploy Cisco Secure Client in the Administrator Guide for Secure Client Release 5.
ThousandEyes Endpoint Agent Module
To include the ThousandEyes endpoint agent, follow the instructions at Cisco Secure Client ThousandEyes Endpoint Agent Module. After completing the Secure Client installation, you must configure the ThousandEyes endpoint agent with your unique ThousandEyes connection string to register the endpoint agent with your Secure Access organization.
In Secure Access, navigate to Experience Insights > Configure Account to find your organization's registration scripts with your unique connection string.
"C:\Program Files (x86)\Cisco\Cisco Secure Client\ThousandEyes Endpoint Agent\csc_te_agent" --register <connection string>
sudo /Applications/Cisco/Cisco\ Secure \Client\ -\ ThousandEyes\ Endpoint\ Agent.app/Contents/MacOS/csc_te_agent --register <connection string>
For an example of how to use an MDM to install Secure Client and register the ThousandEyes endpoint agent, see Deploy Cisco ThousandEyes Module via Microsoft Intune.
Prerequisites < Download Cisco Secure Client > Download the OrgInfo.json File
Updated 5 days ago