How do I remove the Cisco VPN from my MacBook Air if I never installed it?

Things don’t just download randomly by themselves. And no, this is not something built-in to macOS.

So is your MacBook Air managed by an IT department? Is it your work computer? If so please contact your IT department for assistance.

I kind of agree with @Rudegar assessment

To drill down on this issue and avoid a session of Q&A, Q&A  and Q&A  

Download the Application Etrecheck  ( External Link ) directly from the Developer.

This download, Will Require the User ( you ) to purposefully download and installl the application

This is a Diagnostic Tool that makes no changes to the computer.

It makes a coherent and readable inventory of both the Hardware and Software used on the computer 

The application is free or paid for added features. 

The Report will Not Reveal Any Personal Information. 

Post back the Full Report - Share Report >> Copy , then  paste  >>>> using the Additional Text Icon  <<<<

That looks like the macOS built-in Cisco IPSec protocol option. Check your Network settings to disable and hide it.

Jackie615 wrote:

Yes, this is the sub menu when I hold in Control and click the symbol.

That is not a Cisco icon. Start by removing all apps in my previous post first to see if the icon goes away. Make sure to use any uninstaller when possible as System Extensions can be difficult to remove without them. MalwareBytes does contain a VPN, so that would be expected if you chose that install option.

not sure how you searched for cisco but it's one of the biggest remote workplace tools around

AI Infrastructure, Secure Networking, and Software Solutions - Cisco

more

iphone free up storage - Google-

seems like

1. the mac was bought second hand and it was somehow installed before you got it
2. you installed it without being aware that the clicks you made would result in the app being installed (or someone else who used the computer did)

Your first step is to get rid of the problematic files on your computer. Junk files that should never be installed include:

• Cleaners
• AntiVirus
• VPN

Here is the list of apps that should be removed. Some of these are showing Application Not Found, which is an indication that the App was removed by not using their uninstaller, so some files remain in your Launch Folders and still run on startup. The rule of thumb is that if the app requires an installer to put on your computer, then you should use their uninstaller to remove it. Modern applications that you just need to drag to your Application folder contain all of its files in a bundle and are all removed when the app is dragged to the trash:

• Sophos
• Avira
• CCleaner
• MalwareBytes - This is a good tool for a one time scan, but the full install does include a VPN and although this program is useful for Malware removal, I do not recommend installing it to constantly run on your computer.

Here is a list of the files that need removed:

SYSTEM EXTENSIONS

• Avira Scan Service
• com.sophos.endpoint.scanextension
• com.google.one.NetworkExtension
• networkextension

LAUNCH DAEMONS

• com.malwarebytes.mbam.rtprotection.daemon.plist
• com.malwarebytes.mbam.settings.daemon.plist
• com.piriform.ccleaner.CCleanerAgent.plist

LAUNCH AGENTS

• com.malwarebytes.mbam.frontend.agent.plist

Mac Jim ID wrote:

• Your first step is to get rid of the problematic files on your computer. Junk files that should never be installed include:

Cleaners

• AntiVirus

• VPN

•

Here is the list of apps that should be removed. Some of these are showing Application Not Found, which is an indication that the App was removed by not using their uninstaller, so some files remain in your Launch Folders and still run on startup:

Sophos

• Avira

• CCleaner

• MalwareBytes - This is a good tool for a one time scan, but the full install does include a VPN and although this program is useful for Malware removal, I do not recommend installing it to constantly run on your computer.

•

Here is a list of the files that need removed:

SYSTEM EXTENSIONS

Avira Scan Service

• com.sophos.endpoint.scanextension

• com.google.one.NetworkExtension

• networkextension

•

LAUNCH DAEMONS

com.malwarebytes.mbam.rtprotection.daemon.plist

• com.malwarebytes.mbam.settings.daemon.plist

• com.piriform.ccleaner.CCleanerAgent.plist

•

LAUNCH AGENTS

com.malwarebytes.mbam.frontend.agent.plist

GREAT WORK their @ Mac Jim ID, as always 👍. 🦉

That icon may not be for a Cisco VPN. It could mean any VPN service, including Google's "Google One VPN" service, which they shut down last year. The files for that have already been identified above:

• com.google.one.NetworkExtension

and possibly

• networkextension

The latter can do more than just connect a VPN, so it might not be as dispensable.

Still see not evidence that Cisco AnyConnect in the report

Sometimes, Control and click the icon may bring up a Sub Menu with various option

If you can provide that image it may provide some additional insights

Below is meant only as an example and nothing more

Jackie615 wrote:

One of the pictures I posted is the Sub Menu. The other picture is when I'm in System Settings and click on VPN.

You mean this image ?

Did to Control ( keyboard key ) and then click the icon

I am fairly certain if you had Control Click the Malwarebytes icon

As Sub Menu would present

Jackie615 wrote:

One of the pictures I posted is the Sub Menu. The other picture is when I'm in System Settings and click on VPN.

Follow on.

Can you Confirm, all the steps provided by @Mac JIM ID earlier, have been Done or Not ?

If Yes Done , please run a New Report and post back those New Results

If and only If, after exhausting ALL the Good Advise from various contributors in your question

Still no resolve ?

" Nuke " the machine as an Absolutely Final option

For Apple Silicon computer >> Use Disk Utility to erase a Mac with Apple silicon.

For Apple Intel computers >>   Use Disk Utility to erase an Intel-based Mac followed by How to reinstall macOS

Always make a Time Machine Backup  before  proceeding 

Emphasis on User Account Only

Delete these files & restart…

com.sophos.endpoint.scanextension - version 1.0 (Sophos - installed 2021-03-21)

com.google.one.NetworkExtension - version 1.9.0.1 (Google LLC - installed 2024-03-19)

Avira Scan Service - version 9.4.5 (Avira Operations GmbH & Co. KG - installed 2023-11-09)