@Durgule I have a policy that installs cisco anyconnect 4.6.03049 but then during the policy installation process a pop up appears to 'allow' the extension. I only install the VPN module, all the other modules do not get installed (posture, ise posture, and a few others) using the -applychoicesxml method.
for approving the kernel extension, do you create a config profile with only using the 'approved kernel extension' payload ?
so I would have to install this config profile before the policy installs the application??
what about for computers running 10.11 and 10.12 ? looks like these kernel extension approval began with 10.13
so computers running 10.11 & 10.12 will not be prompted to approve?
