Duo with VPN (Cisco AnyConnect Client) Connection. You will connect to the VPN using the Cisco AnyConnect client the way as before. When authenticating to the Cisco AnyConnect VPN Client, Duo automatically determines the best approach to request the second factor for authentication based on your enrolled devices.
- From the Cisco ASDM select Network (Client) Access AnyConnect Customization GUI Text and Messages. Click Add and select the desired language that you would like to modify. Under msgid “Second Password” add the desired text to the msgstr “here” field Any field labelled 'msgid' can be altered as desired.
- Logging In With the Cisco AnyConnect Client. Depending on how your company configured Duo authentication, you may or may not see a “Passcode” field when using the Cisco AnyConnect client. Single Password with Automatic Push. If AnyConnect only prompts for a password, like so.
| This article refers to the Cisco AnyConnect VPN. If you're looking for information on the Prisma Access VPN Beta that uses the GobalConnect app, see: Prisma Access VPN Landing Page. If you're not sure which service you're using, see: How do I know if I'm using the Cisco AnyConnect VPN or the Prisma Access VPN? |
On this page:
Primer
This guide will assist with the installation of the Cisco AnyConnect VPN client for Windows (Vista, 7, 8.1 and 10).
Installation
You need administrator level account access to install this software. When prompted with Windows UAC (User Access Control) you need to allow to install this software.
- Download the VPN installer from MIT's download page, Cisco AnyConnect VPN Client for Windows. Note:MIT certificates required.
- Find and double click the downloaded file named 'anyconnect-win-4.5.XXXXXX.exe', where XXXXXX is the sub-version number of the installer.
- On the following screen titled 'Welcome to the Cisco AnyConnect Secure Mobility Client Setup Wizard', click Next.
- When presented with the software license agreement, click I accept on the slide-down menu and click Next.
- Click Install when prompted (Note: the user must be an administrator of the machine to install).
Note: You may be warned the program comes from an unknown publisher and asked to confirm that you want to allow it to make changes to your computer. Click Yes to continue. - When installer begins installation you will see
- Click Finish when prompted to complete installation.
Connect
- Launch Cisco AnyConnect.
- Enter the address of the MIT Cisco VPN:
- Duo (two-factor authentication) required users must use: vpn.mit.edu/duo.
- Non-Duo (single-factor authentication): vpn.mit.edu
- Click Connect.
- When prompted, enter your MIT username and password.
- For Duo users, in the field labeled 'Second Password' you can enter one of the following options:
- push - Duo will send a push notification to your registered cell phone with the Duo Security mobile app installed
- push2 - Duo will send a push notification to your _second registered device with the Duo Security mobile app installed_
- sms - Duo will send anSMSto your registered cell phone; then enter that as your second password (you will fill out the login info twice with this method, first to get the sms code, then to enter it)
- phone - Duo will call your registered cell phone
- phone2 - Duo will call your second registered cell phone
- The one time code generated by your hardware token or the Duo Security mobile app (the code changes ever 60 seconds)
In this example, we've entered 'push' in the 'Second Password' field.
Sometimes methods with lag time, like Call, will time out before allowing you to complete Duo Authentication. SMS and one time codes generated by your hardware token (yubikey) or the Duo Security mobile app are the fastest methods and can help you avoid time-out issues.'How to call different devices'
If you have multiple devices that can use the same method, for instance two mobile phones or two phones that can receive phone calls, you can reference them by different numbers. For instance, to call the top device on your managed devices page (http://duo.mit.edu), you can use 'phone' (for the default) or 'phone1' to call the second phone, you can use 'phone2'.
- In this example, you will receive a push notification on your cell phone. Click Approve.
- Cisco AnyConnect should now present you with the MIT VPN banner and the VPN connection will complete.
See Also
Working From Off-Campus Locations as an Individual
DUO:
DUO is a multifactor authentication application. All employees must set up DUO authentication in order to access the ERP system remotely. The purpose of DUO is to ensure users are authorized for remote connections to the Howard University network. This authenticator helps to safeguard against cyber vulnerabilities. DUO authentication represents the first step in gaining remote access.
To enroll in DUO, contact the ETS Helpdesk at helpdesk@howard.edu.
Duo Multifactor Authentication For Vpn
VPN:
Virtual Private Networks (VPN) provide a secure connection to the Howard University network. The Cisco AnyConnect Secure Mobility Client is the VPN product used by Howard University. This product will allow you to access share/mapped drives, intranet websites, etc.
When trying to access the video tutorials, please make sure you have “cookies” enabled on your web browser.
How To Install VPN on Windows - PDF | Video
How To Install VPN on MAC - PDF | Video
Install on Non-Howard Issued PC - Video
Being Productive and Accessing Data & Files Remotely
Microsoft OneDrive:
OneDrive is a cloud-based file system. All members of the Howard University community have access to OneDrive through Microsoft Outlook. This is a secure, online location for all your University documents/files. Similar to “Dropbox,” Google drive, etc., your OneDrive account can be accessed from any web browser. We recommend moving all files located on your desktop or laptop to your OneDrive prior to leaving campus. This way, you will be able to access files remotely.
The following videos will familiarize you with OneDrive.
This Is OneDrive - Video
How To Use OneDrive - Video
OneDrive Tips and Tricks - Video
Share/Mapped Drives:
Share/mapped drives are departmental files that you access while at work. To access these files off-campus, you must set up a share/mapped drive on your laptop. Remember, you must log into DUO and Cisco AnyConnect Secure Mobility before accessing or setting up a share/mapped drive.
Instructions for Setting Up Mapped/Shared Drives - PDF
Other Work-At-Home Tools
Access to PeopleSoft - Website
Access to Founders Library Databases - Databases
Cisco Vpn Anyconnect
Access to Health Sciences Library Databases - Databases