How to Access VPN

VPN and 2FA

When you connect to the VPN, Duo will automatically use your default 2FA method to complete the authentication process. For most VPN users, this will be a push sent to the Duo application on your smartphone; just click "Approve" and you will be logged in to the VPN immediately. This is the recommended method for 2FA for VPN.

For people who do not use the Duo push method, the VPN 2FA process requires an extra step to first get a passcode; then, you will enter the passcode along with your password when you log in to the VPN. Each passcode can be used once, so you will need a new passcode every time you use Duo.

To get a passcode:

• Use the Bypass Passcode Generator
• You can get a passcode from a Duo keyfob, if you have one registered to your SCU Duo account
• If you need a code and have problems with these methods, the Technology Help Desk can create a passcode for you.

To enter the passcode:

When you log in to the VPN, type your SCU Username in the Username box; then in the Password box, type your password, then a comma, then your passcode. No spaces!

For example, if your password is pass123word and your passcode is 123456, then you would type pass123word,123456

Please note, the VPN cannot use a hardware token or TouchID as a 2FA method.

Download and install the Cisco Secure Client VPN software

To download and install the Cisco Secure Client VPN software, start here:
https://vpn.scu.edu

• Enter your SCU username and password, then click “Login.” Approve the Duo notification on your mobile device to continue.
• For detailed, step-by-step instructions, click on the “Instructions” button on the bottom right.
• To install the software, click on the “Download” button and follow the prompts.

Important note: You will need administrative access to complete the installation on your computer. If you do not have administrative access, please contact the Technology Help Desk at (408) 554-5700. Please provide your computer name or asset tag number when you call.

Launch the Cisco Secure Client VPN software

• Type vpn.scu.edu into the “Connect” box.
• Use your SCU username and password.
• Complete the 2FA step as shown below:

Each time you connect to the VPN, the client software will automatically receive any needed software updates. It may take a moment or two for these updates to be processed.

Once you’re connected, you’ll see the message “Connected to vpn.scu.edu.” as shown below:

Click on the “Disconnect” button when you are done using the VPN. For security reasons, the VPN has a 12-hour session limit; you will automatically be disconnected after 12 hours.

macOS

You can find the uninstaller by going to the magnifying glass search tool and search for "Uninstall Cisco Secure Client" OR look in the following folder: Applications > Cisco > Uninstall Cisco Secure Client.

Note: If you drag & drop the Cisco Secure Client from the Applications folder to the Trash bin, you may have issues when trying to re-install it. For this scenario, please try the following:

1) Go to the magnifying search tool. Search for "Terminal" and launch that application.

2) In the terminal window, enter the following commands and enter your macOS local password when prompted:

cd /opt/cisco/cisco_secure_client/bin
sudo sh cisco_secure_client_uninstall.sh

3) You'll get this confirmation message in the Terminal:

Successfully removed Cisco Secure Client from the system.

4) If the file is not found or another error appears, please try running the following command and enter your macOS local password when prompted:

sudo pkgutil --forget com.cisco.pkg.anyconnect.vpn

Windows 10/11

1) Click the Search bar and type "Add or remove programs."

2) Search for "Cisco" in your apps and find the following apps:

Cisco Secure Client - AnyConnect VPN

Cisco Secure Client - Diagnostics and Reporting Tool

3) For each of the above apps, click the 3 dots next to the app and select Uninstall.

4) After uninstalling both apps, reboot your computer.