VPN - Setup and Connect using the Cisco AnyConnect for OSX

• This guide will assist with the installation of the Cisco AnyConnect VPN client for OS X.
• You need administrator-level account access to install this software.
• Note: Some screen shots may be slightly different from what you see depending on the version of your operating system and the VPN software.

Download and Install

1. In a browser window,
   • For Conviser Law Center, go to access.kentlaw.edu.
   • For Moffett (IFSH) Campus, go to ifsh-vpn.iit.edu.
   • For Rice and Mies Campuses, go to vpn.iit.edu.
2. Log in using your Access Illinois Tech username and password. Do not change the Group dropdown
3. After clicking the Login button, it will autodetect your operating system and provide a download button.
4. Click the Download for... button
5. The file will mount a disk image. Open this disk image and launch the file named "anyconnect-macosx- XXXXXX".
   
6. On the following screen titled Welcome to the AnyConnect Secure Mobility Client Installer, click Continue.
   
7. When presented with the software license agreement, click Continue then click Agree on the slide-down menu.
   
   
8. Select only VPN and de-select all other options.
   
9. During the upgrade process, you will get a System Extension Blocked pop-up message. Click on Open Security Preferences.
    
   
   This will open the Security & Privacy window. At the bottom, you will see the "System software from developer Cisco was blocked from loading" message. Click on "Allow."
   
   After you click Allow, this will permit the extension, and the software will continue to install.
10. The VPN client will begin to install itself.
    
11. When the installation is competed, click the Close button.
    

Setup and Connect Using the Cisco AnyConnect Software for OS X

1. Cisco AnyConnect can be found in the Cisco folder located in the Applications folder (/Applications/Cisco/).
2. Navigate to /Applications/Cisco/ and open "Cisco AnyConnect Secure Mobility Client."
3. If the dropdown next to the Connect button is blank:
    
   • For Rice and Mies Campuses, type in vpn.iit.edu
     
   • For Conviser Law Center, type in access.kentlaw.edu
     
   • For Moffett (IFSH) Campus, type ifsh-vpn.iit.edu
     

4. Enter the following information, and then click OK:
   For Mies and Rice Campuses:

   • Group: IIT-VPN-USERS
   • Username: your full university email
   • Password: your Access Illinois Tech password

   
   For Conviser Law Center:

   • Group: CK VPN
   • Username: your full university email 
   • Password: your Access Illinois Tech password

   
   For Moffett (IFSH) Campus:

   • Group: MOFFETT-VPN
   • Username: your full university email
   • Password: your Access Illinois Tech password

   

Multi-Factor Authentication Using Okta Verify

Okta Radius for VPN has its own default MFA option - the Okta Verify push notification.

• If you did not choose Okta Verify as one of your authentication methods when you set up your Access Illinois Tech account, please see the Multi Factor Authentication Using Options Other Than Okta Verify. below for step by step.
• If you did choose Okta Verify as one of your authentication methods when you set up your Access Illinois Tech account, once you have entered your password and clicked ok, you will receive a popup on your mobile device, asking if you just tried to sign into the "RADIUS" application.
  
  1. Hit "Yes, it's me"
  2. You're connected!
  3. Upon successful connection, Cisco AnyConnect will minimize itself, and you will see the AnyConnect logo with a small lock in your menu bar just to the left of the time.
     

What if I Have Chosen the Okta Verify as My MFA Option, but It Is Not Available?

If you encounter problems using the Okta Verify app, you can change your multifactor authentication from Okta Verify to SMS or Voice CALL Authentication. Please be aware you will need to have these options enabled in your Access Illinois Tech account in advance to use them.

If you would like to use SMS authentication as your MFA, at Step 4 above, you would enter your password followed by ",SMS". For example, if your password is Abcd1234, you would enter "Abcd1234,SMS". Then you press "OK" and an SMS will be sent to the cell phone number you entered in your Access Illinois Tech account. The following screen will pop up on your computer:

On this screen, enter the code that was sent via SMS. Click "continue," and you will be able to connect.

If you would like to use Voice CALL authentication as your MFA, at Step 4 above, you would enter your password followed by ",CALL". For example, if your password is Abcd1234, you would enter "Abcd1234,CALL". Then you press "OK," and you will receive a call on the number that you entered in your Access Illinois Tech account for this type of authentication. The following screen will pop up on your computer:

On this screen, enter the code that was communicated via the voice call. Click "continue," and you will be able to connect.

Multi-Factor Authentication Using Options Other Than Okta Verify

If you have not choosen Okta Verify as your MFA option, after you enter your password at Step 4 above and click "OK," you will be presented with the following window on your computer:

The window will contain those authentication methods that you did set up in your Access Illinois Tech account, i.e., "Call," 'Question," and/or "SMS" (text). Please choose one of the authentication options listed and follow the instructions to validate your identity/access.