Cisco Anyconnect Mobility Client Windows



This article refers to the Cisco AnyConnect VPN. If you're looking for information on the Prisma Access VPN Beta that uses the GobalConnect app, see: Prisma Access VPN Landing Page.
If you're not sure which service you're using, see: How do I know if I'm using the Cisco AnyConnect VPN or the Prisma Access VPN?

On this page:

Mobility

Find and double click the downloaded file named 'anyconnect-win-4.5.XXXXXX.exe', where XXXXXX is the sub-version number of the installer. On the following screen titled 'Welcome to the Cisco AnyConnect Secure Mobility Client Setup Wizard', click Next.

Primer

AnyConnect Secure Mobility Client is a modular endpoint software product. It not only provides Virtual Private Network (VPN) access through Secure Sockets Layer (SSL) and Internet Protocol Security (IPsec) Internet Key Exchange version2 (IKEv2) but also offers enhanced security through various built-in modules. AnyConnect establishes secure endpoint access and makes your organization secure and protected. It’s a Virtual Private Network available for a variety of configuration and OS. In fact, the new Cisco AnyConnect Secure Mobility Client v4.x works in Windows, Mac OS X, and even Linux. It new AnyConnect is way better than the previous Cisco VPN. When autocomplete results are available use up and down arrows to review and enter to select.

This guide will assist with the installation of the Cisco AnyConnect VPN client for Windows (Vista, 7, 8.1 and 10).

Cisco Anyconnect Mobility Client Windows

Installation

Windows

You need administrator level account access to install this software. When prompted with Windows UAC (User Access Control) you need to allow to install this software.

  1. Download the VPN installer from MIT's download page, Cisco AnyConnect VPN Client for Windows. Note:MIT certificates required.
  2. Find and double click the downloaded file named 'anyconnect-win-4.5.XXXXXX.exe', where XXXXXX is the sub-version number of the installer.
  3. On the following screen titled 'Welcome to the Cisco AnyConnect Secure Mobility Client Setup Wizard', click Next.
  4. When presented with the software license agreement, click I accept on the slide-down menu and click Next.
  5. Click Install when prompted (Note: the user must be an administrator of the machine to install).
    Note: You may be warned the program comes from an unknown publisher and asked to confirm that you want to allow it to make changes to your computer. Click Yes to continue.
  6. When installer begins installation you will see
  7. Click Finish when prompted to complete installation.

    Connect

  8. Launch Cisco AnyConnect.
  9. Enter the address of the MIT Cisco VPN:
    • Duo (two-factor authentication) required users must use: vpn.mit.edu/duo.
    • Non-Duo (single-factor authentication): vpn.mit.edu
  10. Click Connect.
  11. When prompted, enter your MIT username and password.
  12. For Duo users, in the field labeled 'Second Password' you can enter one of the following options:
    1. push - Duo will send a push notification to your registered cell phone with the Duo Security mobile app installed
    2. push2 - Duo will send a push notification to your _second registered device with the Duo Security mobile app installed_
    3. sms - Duo will send anSMSto your registered cell phone; then enter that as your second password (you will fill out the login info twice with this method, first to get the sms code, then to enter it)
    4. phone - Duo will call your registered cell phone
    5. phone2 - Duo will call your second registered cell phone
    6. The one time code generated by your hardware token or the Duo Security mobile app (the code changes ever 60 seconds)
      In this example, we've entered 'push' in the 'Second Password' field.
      Sometimes methods with lag time, like Call, will time out before allowing you to complete Duo Authentication. SMS and one time codes generated by your hardware token (yubikey) or the Duo Security mobile app are the fastest methods and can help you avoid time-out issues.
      'How to call different devices'
      If you have multiple devices that can use the same method, for instance two mobile phones or two phones that can receive phone calls, you can reference them by different numbers. For instance, to call the top device on your managed devices page (http://duo.mit.edu), you can use 'phone' (for the default) or 'phone1' to call the second phone, you can use 'phone2'.


  13. In this example, you will receive a push notification on your cell phone. Click Approve.
  14. Cisco AnyConnect should now present you with the MIT VPN banner and the VPN connection will complete.

Download Cisco Anyconnect Windows 10 64 Bit

See Also

Overview

Cisco Anyconnect Vpn Client Windows 10 Setup

Stanford's VPN allows you to connect to Stanford's network as if you were on campus, making access to restricted services possible. To connect to the VPN from your Windows computer you need to install the Cisco AnyConnect VPN client.

Two types of VPN are available:

  • Default Stanford (split-tunnel). When using Stanford's VPN from home, we generally recommend using the Default Stanford split-tunnel VPN. This routes and encrypts all traffic going to Stanford sites and systems through the Stanford network as if you were on campus. All non-Stanford traffic proceeds to its destination directly.
  • Full Traffic (non-split-tunnel). This encrypts all internet traffic from your computer but may inadvertently block you from using resources on your local network, such as a networked printer at home. If you are traveling or using wi-fi in an untrusted location like a coffee shop or hotel, you may wish to encrypt all of your internet traffic through the Full Traffic non-split-tunnel VPN to provide an additional layer of security.

You can select the type of VPN you want to use each time you connect to the Stanford Public VPN.

Install the VPN client

  1. Download the Cisco AnyConnect VPN for Windows installer.
  2. Double-click the InstallAnyConnect.exe file.
  3. When a message saying the Cisco AnyConnect client has been installed, click OK.

Connect to the Stanford VPN

  1. Launch the Cisco AnyConnect Secure Mobility Client client.
    If you don't see Cisco AnyConnect Secure Mobility Client in the list of programs, navigate to Cisco > Cisco AnyConnect Secure Mobility Client.
  2. When prompted for a VPN, enter su-vpn.stanford.edu and then click Connect.
  3. Enter the following information and then click OK:
    • Group: select Default Stanford split- tunnel (non-Stanford traffic flows normally on an unencrypted internet connection) or Full Traffic non-split-tunnel (all internet traffic flows through the VPN connection)
    • Username: your SUNet ID
    • Password: your SUNet ID password

  4. Next, the prompt for two-step authentication displays. Enter a passcode or enter the number that corresponds to another option(in this example, enter 1 to authenticate using Duo Push to an iPad). Then click Continue.
    • You may have to scroll down the list to see all of your options.
    • If your only registered authentication method is printed list, hardware token, or Google Authenticator, the menu does not display. Enter a passcode in the Answer field and click Continue.
  5. Click Accept to connect to the Stanford Public VPN service.
  6. Once the VPN connection is established, a message displays in the lower-right corner of your screen, informing you that you are now connected to the VPN.

Disconnect from the Stanford VPN

  1. In the notification area, click the Cisco AnyConnect icon if it is displayed. Otherwise, go to your list of programs and click Cisco AnyConnect Secure Mobility Client.
  2. At the prompt, click Disconnect.