Windows Vista/7/8/8.1/10 (32 or 64 bit) Anyconnect Client Installation
Anyconnect VPN offers full network access. The remote user will use the anyconnect client to connect to the ASA and will receive an IP address from a VPN pool, allowing full access to the network. In this lesson we will use clientless WebVPN only for the installation of the anyconnect VPN client. Other AnyConnect modules that do not require additional server support can be used as well. This module must be deployed and configured separately as the MX does not support web launch, client software deployment, or update at this time. See AnyConnect on ASA vs. MX for more details. About Press Copyright Contact us Creators Advertise Developers Terms Privacy Policy & Safety How YouTube works Test new features Press Copyright Contact us Creators.
Browse to NS VPN Client Download Page
Start the 'anyconnect-win' installer downloaded in step 2.
At each prompt, click 'Next.' You may see a 'User Account Control' dialog box asking if you would like to install the program. Click 'Yes.'
Once the install is complete, click 'Finish.'
Start the 'anyconnect-win-gina' installer downloaded in step 2.
At each prompt, click 'Next.' You may see a 'User Account Control' dialog box asking if you would like to install the program. Click 'Yes.'
Once the install is complete, click 'Finish.'
The machine will now ask to reboot. Click yes to reboot.
Launch the client by going to Start->All Programs->Cisco->Cisco Anyconnect Secure Mobility Client
In the field to the left of the 'Connect' button, click on the text area and type 'vpn.ufl.edu'. Click connect.
Authenticate with your gatorlink ID (in the form of [email protected]) and your gatorlink password. Click OK.
The most recent version of the client and vpn configuration files will be automatically downloaded. This may require another reboot to complete the update.
Your client is now ready for use.
Notes:
Once the Anyconnect is installed on your machine, it will always be automatically upgraded to the latest version as they are published by Network Services. You shouldn't need to go through the manual installation process unless you reinstall your operating system, or your client becomes corrupted and needs to be uninstalled and reinstalled.
After connecting for the first time, the VPN policy will be pushed to your client. The pulldown will say 'Gatorlink VPN' rather than vpn.ufl.edu after this policy is downloaded.
Introduction
This document provides some guidelines for the operation of the Anyconnect VPN client. The desktop client screenshots are from the Windows client, however the information should apply to all desktop operating systems.
Desktop: Starting a VPN session
Launch the Anyconnect application. On Windows it will be located under Start/All Programs/Cisco/Cisco Anyconnect Secure Mobility Client. Under MacOSX it is located in the Applications Folder. Under Ubuntu Linux, it will be located in the Internet folder.It may also be launched under windows by clicking on the globe icon in the lower right hand notification area.
If the client was manually installed, the 'Ready to connect' area will be blank. The first time you start the client after manually installing it, you should type 'vpn.ufl.edu' just to the rigt of the 'Ready to connect' prompt and click 'Connect.'
The window will appear on the screen with the 'Ready to connect' set to 'Gatorlink VPN'. Click the 'Connect' button.
A username and password fields will appear. Use your gatorlink account in the form of '[email protected]' and your gatorlink password. This will give you a Gatorlink full tunnel. For other tunnel types, please see the Tunnel Types section of this document. Note: If you are enrolled in 2FA (Duo), you will receive a duo prompt on your default device to complete login. Information on how to use other Duo methods is on our FAQ page.
Once the connection is made, the window will minimize into the icon notification area. For Windows 7 and Vista this is typically hidden and can be displayed by clicking the up arrow in the icon notification area (bottom right of screen).
Anyconnect Download
Desktop: Monitoring a VPN session
To check on the status of the VPN connection, click on the icon in the notification area. A small window will appear. Click on the gear icon in the lower left corner.
A window will appear which initially shows the status of the VPN tunnel. From this window, you may also click on 'Route Details' to understand what networks will take the Anyconnect VPN and what networks will not. Non secured routes are routes which will not take the VPN client. Secured routes will take the VPN client. A 0.0.0.0/0 entry means that all traffic not the in 'Non secured routes' section will take the tunnel.
Desktop: Shutting down a VPN session
Follow the instructions under Monitoring a VPN session to bring up the VPN status window.
Click on the 'Disconnect' button.
Available VPN Tunnel Types
Different VPN tunnel configurations can be used to control what traffic will take the VPN tunnel. You can specify what kind of VPN tunnel you would like by simply changing the user ID that you use to log into the UF VPN service. Currently there are three tunnel configurations that are available:
Anyconnect Vpn Only Download
Full VPN Tunnel. Using a full tunnel, all network traffic to and from the VPN client will be encrypted (including all private IP networks), with the exception of traffic to and from the 'local network'. The local network is based on the local IP address and subnet mask assigned to your computer's network interface. This is the default tunnel type, and is recommended in most instances. You will receive a full tunnel if you log into the UF VPN service with the [email protected] style gatorlink ID.
Campus Only VPN Tunnel. Using a campus-only tunnel, only traffic sent to and from the UF network will be encrypted (including a select group of private IP networks). All other traffic will not take the tunnel. This is the recommended tunnel type for users working from home or traveling. Note that this tunnel type does not support access to library journals and other such off campus subscription services that require a UF IP address to access. The full tunnel does support this type of access. You will receive a campus-only tunnel configuration if you log into the UF VPN service with the [email protected]/campus style gatorlink ID.
Departmental Tunnels. At the request of a campus department or college of reasonable size, a specific tunnel will be created for use by the members of that department or college. Members of that vpn tunnel will be placed in a known private IP subnet that is dedicated to that tunnel and will receive a custom tunnel policy. Authorization to a departmental VPN tunnel is accomplished using Active Directory objects (preferred) or a list of Gatorlink accounts. Those using AD object may manage the tunnel membership without interaction with ICT Network Infrastructure. Access to this tunnel is accomplished by using the username [email protected]/[dept] where [dept] is the assigned name of the individual tunnel. This will result in a full tunnel as described above with a known private IP subnet assigned to the client. You may also use [email protected]/[dept]-campus to get a Departmental Campus-Only tunnel. To request a departmental VPN tunnel, please go to my.it.ufl.edu/CherwellPortal/UFITServicePortal and fill out a request.