Symptom
++ ASA: While attempting to change Anyconnect image, the below error is seen:
asa16(config-webvpn)# anyconnect image cisco-secure-client-macos-5.0.00000-webdeploy-k9.pkg 1
asa16(config-webvpn)# tall imageWARNING: Unable to remove image
++ FTD: while reordering existing the AnyConnect image, deployment may fail with the below error:
FMC >> anyconnect image disk0:/csm/cisco-secure-client-win-arm64-5.0.03072-webdeploy-k9.pkg 1 regex "Windows"
ftdvpn >> error : WARNING: Unable to install imageWARNING: Unable to remove imageConfig Error -- anyconnect image disk0:/csm/cisco-secure-client-win-arm64-5.0.03072-webdeploy-k
Conditions
++ FTD/ASA configured with WebVPN and Anyconnect image, The issue may be observed while trying to change/reorder the AnyConnect image.
++ Not seen during first-time configuration of "anyconnect image".
Workaround
ASA: Delete all the images and then add them newly.
FTD:
1) Delete all the images from FMC->Device->Remote Access->Edit The Selected VPN Policy->Advanced->AnyConnect Client Images
2) Deploy
3) Readd the images in the needed order
4) Deploy
Further Problem Description
During the workaround implementation, if the configuration lines for "anyconnect image" are removed, only the connection of the client who wants to download the anyconnect image will be unsuccessful. However, once the configuration is complete, the connection should return to its normal state.