knowIT

How do I connect to VPN with Enhanced CWL

 

For the most updated version of this informaion please refer to the main page from Privacy Matters:

https://mfadevices.id.ubc.ca/vpn

 

Follow these instructions to connect to specialized UBCO VPN pools that require an Enhanced CWL.

Requirements:

To use a specialized VPN pool with Enhanced CWL, ensure that:

  • The VPN pool you are connecting to is configured to use Enhanced CWL.
  • You have previously enrolled at least one device using Enhanced CWL. 

Note: The general VPN Pool will bypass Enhanced CWL and these instructions do not apply.

Instructions:

Once a connection for a particular VPN session has been established, you will not be challenged with an authentication request for any other application or service while securely connected (unless you are attempting to access an application that contains confidential or highly secure information).

To connect to a specialized VPN pool with an Enhanced CWL, follow the steps below or watch the video.

  1. Open the Cisco AnyConnect Security Mobility Client. 

    Cisco AnyConnect Security Mobility Client

    Note: myvpn.ok.ubc.ca may also be used.

  2. Enter your username and the VPN pool you wish to connect to along with your password
    • The new additional step is to type “@” after your username along with how you want to authenticate.

      AnyConnect Username

      Duo App Enter username.vpnpool@app (or username@app, depending on which specialized VPN you are using) if you wish to authenticate using your smartphone
      Phone Call Enter username.vpnpool@phone (or username@phone, depending on which specialized VPN you are using) if you wish to authenticate by a phone call either to a landline (deskphone) or mobile phone
      Passcode Enter username.vpnpool@****** (or username@******, depending on which specialized VPN you are using) if you wish to authenticate using a passcode generated by a hardware token or a soft token using the Duo app.
      Please note: The * indicates the unique code generated for a particular authentication instance. Enter the numbers as they appear on your token after @, not the actual asterisks).
    • If any information is entered incorrectly or forgotten you will see an error message reminding you of the extra information required to authenticate

      AnyConnect Username Login Error

  3. Once entered correctly, an authentication request will be sent to your method of choice

    AnyConnect Authentication Request

    • You will not see a separate message on the AnyConnect client specifying that a response is waiting
    • You will know that the authentication has been approved when the AnyConnect dialogue box changes to “Establishing VPN Session”

      AnyConnect Establishing Session

  4. Once a connection is established you will be able to proceed as usual

The AnyConnect client will recall the information entered from your previous session.

If you authenticate with Enhanced CWL using the same method for each request, you will simply:

  1. Open the Cisco AnyConnect Security Mobility Client
  2. The username and method of authentication will already be populated
  3. Enter your password and click ‘Okay’
  4. An authentication request will be sent to the method specified
  5. You will know that the authentication has been approved when the AnyConnect dialogue box changes to “Establishing VPN Session”
 
For more information or assistance, please contact the ITServices Helpdesk - 250.807.9000 or 855.807.9001.
Attached Files
There are no attachments for this article.
Related Articles RSS Feed
CWL and UBC Connect Instructions for New TA’s
Viewed 13809 times since Thu, Jan 29, 2015
How do I sponsor a Guest CWL account in Access UBC?
Viewed 8985 times since Fri, Feb 26, 2016
TA Hiring Best Practices for Administrators
Viewed 3294 times since Tue, Mar 17, 2015
Outlook keeps prompting me to login
Viewed 8493 times since Tue, Nov 17, 2015
Generic error message when logging into CWL
Viewed 3027 times since Mon, Jan 9, 2017
What do I do if I receive an Access UBC notification for an employee that is not in my department?
Viewed 2678 times since Mon, Jan 9, 2017
How do I find out what my CWL ID is, or an employee’s CWL?
Viewed 5226 times since Mon, Jan 9, 2017
What do I do if my new employee does not receive the AccessUBC sign up information?
Viewed 2551 times since Mon, Jan 9, 2017