Issue with Cisco any connect

Have you added an approved kernel extension for AnyConnect? com.cisco.kext.acsock ?

Doing a search here in JAMF Nation revealed the following threads that will more than likely answer your question.

What's causing it
More solutions

Yes i have added

@Durgule I have a policy that installs cisco anyconnect 4.6.03049 but then during the policy installation process a pop up appears to 'allow' the extension. I only install the VPN module, all the other modules do not get installed (posture, ise posture, and a few others) using the -applychoicesxml method.

for approving the kernel extension, do you create a config profile with only using the 'approved kernel extension' payload ?

so I would have to install this config profile before the policy installs the application??

what about for computers running 10.11 and 10.12 ? looks like these kernel extension approval began with 10.13
so computers running 10.11 & 10.12 will not be prompted to approve?