Any Speculation about Whether an Apple ARM Mac will run Cisco AnyConnect for Mac?

[jaybar]

My job requires Cisco AnyConnect Mac, to allow my iMac to remotely access my work computer (Windows PC). Any speculation as to whether an Apple ARM iMac, whenever that might be released. be able to run Cisco AnyConnect for the Mac?

Thanks.

 

[Waragainstsleep]

I would expect Cisco to update their software for the new Macs for sure. Anything current anyway.

 

[ipponrg]

My job requires Cisco AnyConnect Mac, to allow my iMac to remotely access my work computer (Windows PC). Any speculation as to whether an Apple ARM iMac, whenever that might be released. be able to run Cisco AnyConnect for the Mac?

Thanks.

I would expect them to update it for ARM Macs. My work also uses AnyConnect and if Cisco didn’t update it, they would lose a decent sized customer

 

[Boil]

Until Apple releases ASi Macs for purchase on the open market, everything is speculation...

 

[joema2]

My job requires Cisco AnyConnect Mac, to allow my iMac to remotely access my work computer (Windows PC). Any speculation as to whether an Apple ARM iMac, whenever that might be released. be able to run Cisco AnyConnect for the Mac?

I see some old references implying there was a POWERPC version of Cisco AnyConnect which ran on x86 Macs using the original Rosetta emulation. If true, it's plausible the much more sophisticated Rosetta2 emulator on upcoming Apple Silicon Macs might run the current x86 version of AnyConnect with good performance.

Obviously an Apple Silicon native version of AnyConnect would be preferred, and the XCode porting techniques shown at WWDC imply this will often be a rapid process. Until that is available, most x86 MacOS apps should run fairly well with Rosetta2.

This instructional video by a C++ programmer describes why Rosetta2 will be so efficient:

 

[Waragainstsleep]

Until Apple releases ASi Macs for purchase on the open market, everything is speculation...

Cisco is a lot ore predictable than Apple. If someone asked them if they plan to move AnyConnect to AS Macs, I imagine they'd tell you. And tell you yes.

 

[Yebubbleman]

My job requires Cisco AnyConnect Mac, to allow my iMac to remotely access my work computer (Windows PC). Any speculation as to whether an Apple ARM iMac, whenever that might be released. be able to run Cisco AnyConnect for the Mac?

Thanks.

Put it to you this way, the only reason why they wouldn't want to update it is if they were pulling out of the platform altogether. That being said, that's highly unlikely, so I'd expect a native Apple Silicon version at some point. That being said, I can't imagine that the Intel version won't run just fine under Rosetta 2. It's not like AnyConnect is a terribly resource intensive application.

 

[aednichols]

Starting this fall, millions of ARM Macs will begin shipping to customers. Many of those will be going to business users. If there is no support on day 1, corporate IT departments will turn the flames up to 11 on Cisco.

 

[vigilant]

Until Apple releases ASi Macs for purchase on the open market, everything is speculation...

For Cisco, it‘s going to be a requirement.

But I’d say VPN should run fine under Rosetta

 

[Waragainstsleep]

Seriously, there is no way in hell Cisco won't have a working solution ready to go by then.

 

[deconstruct60]

I see some old references implying there was a POWERPC version of Cisco AnyConnect which ran on x86 Macs using the original Rosetta emulation. If true, it's plausible the much more sophisticated Rosetta2 emulator on upcoming Apple Silicon Macs might run the current x86 version of AnyConnect with good performance.

Emulation probably isn't the core issue. Cico VPN software has hiccuped before on major OS updates in terms of support. With respect mac OS 11 this is even bigger. Apple is doing a major overall of the kernel extension API with macOS 11. ( in fact most stuff is pragmatically being kicked out of kernel into a "in between" zone. Prviledge but no "free reign" down in the kernel. )

Rosetta2 isn't going to magically get any app with that task out of the that "hole". Apple didn't change the kernel structure at the same tine they shifted from PPC to x86. There are different issues this time. Apps which much around with the lower levels of the networking stack is probably have substantive work to do.

Eventually Cisco will probably get something out, but it may not arrive when the first Apple Silicon Mac start to ship to the public. This isn't one of the "fall out of bed in the morning" easy apps to port. ( to Intel macOS 11 either.)

 

[MRrainer]

AnyConnect uses a kernel-extension (without it, it does not work correctly at all). I doubt Rosetta2 can translate a kext.

But as Cisco themselves have reportedly a couple of thousand Macs (mostly laptops) deployed, they will get it done at some point.
Just not on day 1.

AnyConnect already exists as iOS app, so they don't have to start at zero.

 

[deconstruct60]

AnyConnect uses a kernel-extension (without it, it does not work correctly at all). I doubt Rosetta2 can translate a kext.

.

Not much room for doubt. Apple says it does not.

"..If you have any existing Intel only apps, or if for some reason you can't start building your app natively right away, Apple Silicon computers have Rosetta, a translation environment that can seamlessly run these. In Rosetta, the entire process is always translated. You cannot load native code into a translated process or vice versa. You also cannot use Rosetta for kernel extensions, AVX vector instructions, or virtualization. "

Port your Mac app to Apple silicon - WWDC20 - Videos - Apple Developer

Your porting questions, answered: Learn how to recompile your macOS app for Apple silicon Macs and build universal apps that launch...

developer.apple.com

 

[joema2]

AnyConnect uses a kernel-extension (without it, it does not work correctly at all). I doubt Rosetta2 can translate a kext.

But as Cisco themselves have reportedly a couple of thousand Macs (mostly laptops) deployed, they will get it done at some point. Just not on day 1...

Apple deprecated certain kernel extensions in 2019 at WWDC. Since some of those will stop working on x86 Big Sur, if AnyConnect uses those and Cisco doesn't have those re-written by then it may cause problems -- totally aside from Apple Silicon Macs. That means everyone running AnyConnect and using a new x86 Mac (which will ship with Big Sur) may encounter that problem, maybe around October.

Apparently there will be a manual procedure to enable those kexts on x86 Big Sur, but that would be a lot of support calls for Cisco. Possibly after Big Sur the kexts would stop working totally. It is much easier to develop a system extension than a kernel extension.

Once Cisco fixes the kernel extension issue (which will affect all Macs, not just x86) if AnyConnect is built as a universal binary it will probably work on Apple Silicon Macs also. Or it's possible the fixed x86 binary will then run under Rosetta2.

Deprecated Kernel Extensions and System Extension Alternatives - Support - Apple Developer

developer.apple.com

2019 WWDC: https://developer.apple.com/videos/play/wwdc2019/702

2019 WWDC "Network Extensions for the Modern Mac": https://developer.apple.com/videos/play/wwdc2019/714

 

[psingh01]

It probably will eventually, but seeing as you need it for your job, just don’t upgrade to an AS mac until what you need is fully supported on it.

 

[Mikael H]

My job requires Cisco AnyConnect Mac, to allow my iMac to remotely access my work computer (Windows PC). Any speculation as to whether an Apple ARM iMac, whenever that might be released. be able to run Cisco AnyConnect for the Mac?

Thanks.

I’m in the same boat, but with another security provider. It remains to be seen when they manage to switch to user space networking drivers, but I don’t see it as likely at all that these huge companies would decide they don’t want Apple users’ money anymore.

 

[MrGunnyPT]

With the amount of people carrying MacBooks in the business world I'm damm sure they will don't worry.

 

[Joe The Dragon]

With the amount of people carrying MacBooks in the business world I'm damm sure they will don't worry.

as long as cisco pays 30% and you better hope that apple does not also want 30% of the sever licensing costs

 

[Shivetya]

considering how long it took for Catalina support...

 

[goMac]

Cisco has already quietly announced that they’ll be supporting the new driver kext-less driver architecture in Big Sur. Probably by the time it launches.

I would guess they’re doing an ARM version at the same time, but even if they aren’t, a kext less VPN driver under Big Sur should work fine in Rosetta.

 

[theorist9]

Related?: [I infer from this that Cisco is actively working to get the software running on Apple Silicon]

Umbrella Compatibility with macOS Big Sur

Compatibility Alert: Alert: Umbrella Roaming Client and MacOS Big Sur Compatibility If you are using macOS Big Sur, you may experience some compatibility issues with Umbrella: The standalone Umbre...

support.umbrella.com

 

[Waragainstsleep]

Cisco has already quietly announced that they’ll be supporting the new driver kext-less driver architecture in Big Sur. Probably by the time it launches.

I would guess they’re doing an ARM version at the same time, but even if they aren’t, a kext less VPN driver under Big Sur should work fine in Rosetta.

They'd be mad to re-write it without the kext dependency and not include a native Apple Silicon version while they were at it.

 

[TynH]

Any news on this? I’ll absolutely *need* AnyConnect support by the end of next month or borrow a WinTel machine.

 

[Wehrwolf]

We use it for our system at work. It works fine on my M1 MBA under Rosetta 2.

Edited to add: Running version 4.9.04043

 

[4sallypat]

For my work place to work remotely, we use a Mac VPN client (Fortinet) to gain access to our desktops as well as the servers.

For making VOIP phone transfers to our Macs we use the Cisco Jabber client and it works well on the M1 Mini.