Virtual Private Network

‌The Cisco AnyConnect VPN client is a web-based VPN client that does not require user configuration. Using the VPN client, sometimes referred to as IP tunneling, is a secure method of accessing UMB computer resources. Below are the workstation/user requirements needed to utilize this resource.

Multi-Factor Authentication / DUO and VPN

Effective March 5, all users of the VPN client will need to use DUO in addition to their UMID and password.

The client will prompt users for Group, Username, Password, and Second Password (or Enter DUO Key or the word push to use DUO app.)

Options for Second Password include:

  1. push
    • this sends a DUO confirmation request to the DUO Mobile app on your phone or tablet
  2. passcode
    • enter the passcode generated on the DUO Mobile app or hardware token
  3. visit www.umaryland.edu/cits/services/duo/faq/no-duo-mobile-and-VPN/ for alternatives to the DUO Mobile app

A screenshot of the login screen for VPN Duo. 

 or

VPN Duo log in image

To change the device settings for your DUO account, or to set up your DUO account for the first time, log in to https://directory.umaryland.edu and click on Multi-Factor Authentication.

For additional information on Multi-Factor Authentication and DUO, visit http://www.umaryland.edu/cits/services/duo.

What you need before connecting

  1. Check the system requirements below.
  2. Know your UMID and password and DUO credentials.
  3. Get your VPN group name from your network or VPN administrator.

The Cisco AnyConnect VPN Client is downloaded and installed via WebLaunch; you must use the 32-bit versions or Internet Explorer or Firefox for the install.

Microsoft Windows

Windows support notes
  • After April 8, 2014, Microsoft will no longer provide new security updates, non-security hotfixes, free or paid assisted support options, or online technical content updates for Windows XP. On the same date, Cisco will stop providing customer support for AnyConnect releases running on Windows XP, and we will not offer Windows XP as a supported operation system for future AnyConnect releases.
  • Upgrading from Windows XP to Windows Vista or Windows 7 or later requires a clean install since the Cisco AnyConnect Virtual Adapter is not preserved during the upgrade. Manually uninstall AnyConnect, upgrade Windows, then reinstall AnyConnect manually or via WebLaunch.
AnyConnect compatibility with Microsoft Windows 10
  • AnyConnect 3.1MR10 (3.1.10010) and later are compatible with Windows 10 official release.

    • For best results, we recommend a clean install of AnyConnect on Windows 10 system and not an upgrade from Windows 7/8/8.1. If you are planning to perform an upgrade from Windows 7/8/8.1 with AnyConnect preinstalled, make sure that you first upgrade AnyConnect prior to upgrading the Operating System. The Network Access Manager module must be uninstalled prior to upgrading to Windows 10. After the first upgrade is complete, it can be reinstalled on the system. You may also choose to fully uninstall AnyConnect and re-install one of the supported versions after upgrading to Windows 10.
AnyConnect support for Windows 8.x

Limitations to AnyConnect Support for Windows 8.x

  • Upgrading to Windows 8.1 requires you to uninstall AnyConnect, and reinstall it after your Windows upgrade is complete.
  • AnyConnect is not supported on Windows RT. There are no APIs provided in the operating system to provide this functionality. Cisco has an open request with Microsoft on this topic. Customers who want this functionality should contact Microsoft to express their interest.
  • Other third-party product’s incompatibility with Windows 8 prevent AnyConnect from establishing a VPN connection over wireless networks. For example:
    • Outdated wireless cards or wireless card drivers that do not support Windows 8 prevent AnyConnect from establishing a VPN connection. To work around this problem, make sure you have the latest wireless network cards or drivers that support Windows 8 installed on your Windows 8 computer.
  • AnyConnect is not integrated with the new UI framework, known as the Metro design language, that is deployed on Windows 8; however, AnyConnect does run on Windows 8 in desktop mode.
  • Verify that the driver on the client system is supported by Windows 8. Drivers that are not supported by Window 8 may have intermittent connection problems.
  • The Export Stats button on the Preferences > VPN > Statistics tab saves the file on the desktop. In other revisions of Windows, the user is asked where to save the file.
  • HP Protect tools do not work with AnyConnect on Windows 8.x.
 Web-based installation may fail on 64-bit Windows

This issue applies to Internet Explorer versions 10 and 11, on Windows versions 7 and 8.

The solution to is to:

  • Run a 32-bit version of Internet Explorer.
  • Edit the registry entry to a non-zero value, or remove that value from the registry.

Note: On Windows 8, starting Internet Explorer from the Windows start screen runs the 64-bit version. Starting from the desktop runs the 32-bit version

Windows requirements
  • Pentium class processor or greater.
  • 100 MB hard-disk space.
  • Microsoft Installer, version 3.1.

Mac OS

Mac versions
  • Mac OS X 10.5 is no longer supported. AnyConnect 3.1 will not install on this platform.
  • Mac OS X 10.6, and 10.7 are no longer supported.
Mac OS X requirements

AnyConnect requires 50 MB of hard-disk space.

To operate correctly with Mac OS X, AnyConnect requires a minimum display resolution of 1024 by 640 pixels.

Internet Explorer Users:

  • How to add the VPN security appliance to the list of Trusted Sites in Internet Explorer.
    • From the IE browser
      • Tools - Internet Options - Trusted Sites
      • Click the Security tab.
      • Click the Trusted Sites icon.
      • Click Sites.
      • The Trusted Sites window opens.
      • Type https://vpn.umaryland.edu.
      • Click Add, then Click OK several times

Netscape, Mozilla, Firefox users:

  • If you get a "Certified by an Unknown Authority" display, install a self-signed certificate
    • How to install a self-signed certificate
      • Click the Examine Certificate button in the "Web Site Certified by an Unknown Authority" window. 
      • Click the "Accept this certificate permanently" option.
      • Click OK.
      • The security appliance window opens, signifying the certificate is trusted.   
Other requirements:
  • An active internet connection.
  • Ability to install the software on the workstation – Local Admin rights required for installation.
  • A valid myUM account name and password for authentication.
    • If you need assistance with your myUM account, email the IT Help Desk or 6-HELP.
  • Authorization to use the VPN service
    • Contact your local network administrator. If you don’t know who your admin is, email or call IT Help Desk 6-HELP.