Cisco AnyConnect VPN Client 3.1 with Start-Before-Logon Module Summary IT Division has added a module, called Start-Before-Logon, to the Cisco AnyConnect VPN Client. The module allows the computer to act as if it is on the OSU local area network even before logging into the computer . The major advantage is increased security but a beneficial side effect is a dramatically shorter time to complete a logon to the computer when off-campus. The VPN connection allows you to use network drives and resources as you would on campus. Overview of steps to use the client Preliminary Steps: 1. Configure wireless network profile (See Appendix A) 2. Ensure that you have the AnyConnect client (See Appendix B) 3. Configure the Start-Before-Logon module (See Appendix C) AnyConnect Start-Before-Logon Module Usage 1. Do a CTRL+ALT+DELETE, switch user, and run the Start-Before-Logon user interface 2. Logon to your user account Detailed AnyConnect Start-Before-Logon Module Steps: Prerequisite: The computer must have connected to the wireless network you are trying to use prior to using the Start-Before-Logon module. If it has not, logon without the VPN and configure the wireless access point first. This must be done with every new wireless access point because Windows does not have a wireless configuration utility available before logon. Follow the instructions in Appendix A as an example of how to configure a wireless network connection. If you have previously used the access point and saved its configuration, Start-Before-Logon should work. 1. Press CTRL+ALT+DELETE 2. Click the Switch User button, . 3. Click the Cisco AnyConnect button, , in the lower right corner. 4. Enter your OKey username and password into the Cisco AnyConnect dialogue box. 5. Select your username (“SSBHD441M1\ssbsupport” in this example). 6. Logon as you usually do. Appendix A Configure Wireless Network Profile: In the following example, we will connect to the OSUSTAFF network access point. 1. Choose the wireless network icon, , from the System Tray in the lower right corner. 2. Select OSUSTAFF and click on the Connect button. 3. Authenticate to the wireless network using your OKey username and password. 4. On the Windows Security Alert box, click the 5. When connected the wireless network bars will look like the following Appendix B Installing the Cisco AnyConnect Start-Before-Logon Module If you already have the Cisco AnyConnect VPN Client installed, logon to the VPN. The AnyConnect client will check to ensure it is the latest version. If it is not, you will see a dialogue box similar to the following figure: If you do not have the AnyConnect client, open a browser and go to http://osuvpn.okstate.edu and logon with your OKey username and password. If you receive the Security Warning dialogue box below, please click the Yes button. If you have an updated version of Java, the following dialogue box will alert you that it is about to run a Java applet that installs the Cisco AnyConnect client. The following dialogue box appears as the installer is running. When the installer completes, you will get the following dialogue box inside the browser. You may close the browser. Appendix C Configuring the Cisco AnyConnect client to use the Start-Before-Logon module 1. Click the Cisco VPN client icon, , from the system tray in the lower right corner of the screen, or go to Start-All Programs-Cisco-Cisco AnyConnect Secure Mobility Client. 2. Click the settings icon, , in the Ciso AnyConnect Secure Mobility Client dialogue box. 3. Click the Preferences tab, check mark all of the available boxes. Note: If Start-Before-Logon will not work because it says there are no trusted networks, try unchecking the Block connections to untrusted servers checkbox.