AnyConnect VPN for Windows Vista/7
This article contains routine installation and connection instructions. Please contact Technology Help for additional assistance.
Follow the steps below to install the Cisco AnyConnect client to your computer.
Note: Installation requires local administrative access to your PC.
- Select the AnyConnect VPN client for Windows from the Downloads & Guides page.
- Enter your Internet ID and password.
- Click 'Save File' and click 'Ok' to install the file.
- Select the "local admin" option and enter your password.
- Download and run the AnyConnect Secure Mobility Client Installer.
Double-click and run the Setup executable file. Follow the installer prompts.Note: When running the executable file under Windows 8, Windows SmartScreen will prevent you from running an unsigned app. When you get the error message stating "Running this app might put your PC at risk", click 'more info" and then click the [Run anyway] button.
- Once you have successfully downloaded the client, verify that you can connect to the VPN (See the Connecting section).
- If you are upgrading from a 2.x to a 3.x client, you may need to uninstall the old client first and then reinstall the new one.
To do this, go to Start -> Control Panels -> Programs -> Uninstall a Program -> Cisco AnyConnect VPN Client -> Uninstall.
Go to Step 8 above and reattempt the install.
- If you are unable to connect to the VPN, verify that you have an active network connection.
- If you have an active network connection and are running Windows 7 or Vista, you may need to change your MTU (Maximum Transmission Unit) setting. To do this, navigate to the command prompt. Start -> All Programs -> Accessories.
- Right-click on the Command Prompt and select "Run as administrator". This should bring you back to the Command Prompt.
- To show the current settings, enter the following command in the command prompt:
netsh interface ipv4 show subinterfaces
- If the MTU setting is not set to 1500, you can change the setting by entering the following command:
netsh interface ipv4 set subinterface "Local Area Connection" mtu=1500 store=persistent
Note: The interface name may be different, but this is the most common configuration.
- For a wireless connection, enter the following command in the command prompt.
netsh interface ipv4 set subinterface "Wireless Network Connection" mtu=1500 store=persistent
- Try connecting to the VPN again. If 1500 does not work, change the MTU setting to 1402 (1374+28). Both values should work.
- From the Start menu, select "Cisco AnyConnect Secure Mobility Client."
You may need to open menu folders: Go to All Programs > Cisco > Cisco AnyConnect Security Mobility Client > Cisco AnyConnect Security Mobility Client.
- You should have an embedded profile that has a prepopulated 'Connect to' box that lists 3 options 'Split Tunnel', 'Full Tunnel', and 'Departmental Pools'. Select 'Split Tunnel' for most generalized UofM remote access needs. Select 'Full Tunnel' for special needs that require that a UofM IP address be presented to the outside such as firewall access controls or library journals access. Select 'Departmental Pools' only if your department requires it.
If you selected 'Departmental Pools' in the previous step, then you will see a dropdown list of all VPN workgroups. Select the group that corresponds to your department.
Note: If you connect by IP address, you will see a "certificate mismatch" warning. Select "Accept" to continue.
Note: The dialog box at the bottom of the user interface window should say "Establishing VPN – Activating VPN Adapter," and then disappear after about 3-5 seconds. An icon for the VPN should appear in the task bar at the bottom of your screen. Roll your mouse over the VPN icon to show the state of the VPN adapter.
- Select the "Statistics" tab to view basic connectivity information.
From the task bar at the bottom of your screen, click on the VPN icon to view the Cisco AnyConnect user interface. The VPN icon is a white globe with green/blue links and a lock superimposed.