Topics Map > Networking > Virtual Private Networking (VPN)
VPN, CISCO SecureConnect, Installing Cisco AnyConnect VPN for Mac OS
University of Illinois students, faculty, and staff can use these directions to set up their Mac OS computers or devices to connect to the Virtual Private Network (VPN).
If you have a guest account, Technology Services recommends IllinoisNet Wireless for on-campus use. Contact your host for help downloading and installing the VPN if you need guest access for off-campus use.
Cisco rebranded AnyConnect to "Cisco Secure Connect" but didn't change the underlying setup steps. Depending on the version you are running your software could say either "AnyConnect" or "Cisco Secure Connect" on dialog boxes, application files, etc. The instructions don't change.
Quick Start
- Download the Mac VPN installation package from WebStore.
- Install the software with administrator privileges.
- Do NOT accept the system extension "socket filter". It is not needed for basic VPN, and will conflict with other socket filters (Mac OS 11, Mac OS 12, or Mac OS 13). After installation is complete, go to Cisco folder inside Applications, and delete the application "Cisco Secure Client - Socket Filter" as a work around for a known MacOS Socket Filter related issue.
- VPN server: vpn.illinois.edu
- Username: Your NetID
(or, if you're a guest, your guest ID) - Password: Your Active Directory password
(or, if you're a guest, your guest password) - Group: 1_SplitTunnel_Default
(Note: This is the most common choice. See About VPN Profiles for information about the alternatives, such as Tunnel All for access to Library and WebStore resources.)
Detailed instructions are provided below.
Mac OS (Pre-Big Sur) Instructions
Downloading the VPN software
- Download the Mac VPN installation package from the WebStore.
- Save the file at an easy-to-find location, such as your desktop.
Installing the VPN software
- Go to the location where you saved the VPN installation package.
- Double-click on the .dmg file.
- The AnyConnect Installer will launch. Click Continue.
- Accept the End User License Agreement (EULA) when prompted: First click Continue, then Agree.
- If given a choice of which packages to install, select only the VPN item and click Continue. Depending on the installer you might not be given a choice.
- The installer will estimate how much space is needed. Click Install.
- You'll be prompted that Installer is trying to install new software.
NOTE: This prompt is not asking for your NetID; it asks for your local user name and password on that specific computer. - Enter your local user name.
- Enter your local computer password.
- Click Install Software.
- After the software is installed, you'll receive the message "The installation was successful". Click Close.
- After installation is complete, your Applications folder will have a new Cisco subfolder containing the AnyConnect VPN.
Mac OS Big Sur and new MacOS Instructions
This section applies to Big Sur (Mac OS 11), Monterey (Mac OS 12), Ventura (Mac OS 13), and Sonoma (Mac OS 14)
Downloading the VPN software
- Download the Mac VPN installation package from the WebStore.
- Save the file at an easily findable location, such as your desktop.
Installing the VPN software
- Go to the location where you saved the VPN installation package.
- Double-click on the .dmg file.
- The Cisco Secure Client Installer will launch. Click Continue.
- Accept the End User License Agreement (EULA) when prompted: First click Continue, then Agree.
- The installer will inform you of how much space it requires on your computer. Click Install.
- You will now be prompted for administrator credentials to install the software. Enter your credentials (this is an admin account on the computer, not necessarily your NetID and password) and click Install Software.
- The installer will continue, and a several popups will open. For the notification that displays AnyConnect System Extension Blocked, click OK. Do not approve the System Extension.
- For more information on this, see VPN, Cisco AnyConnect (or Cisco Secure Client) Socket Filter for Mac OS Big Sur and newer Mac OS.
- If you get a popup with a purple circular icon will now ask if you want to allow the Cisco AnyConnect Socket Filter to filter network content. Click Don't Allow. If you get two of these popups, click Don't Allow for both.
- The VPN has now been successfully installed.
Starting the software
After you've completed downloading and installing, the Cisco AnyConnect VPN software will be installed in the Application folder's Cisco folder.
Security Warnings
Mac OS 10.14, 10.15, and 11 (Big Sur) will warn you that the Cisco software is trying to load an extension (it might be a kernel extension or a system extension, depending on your OS and the Cisco version). Only for MacOS 10.14 and 10.15 do you you need to approve this in order for the VPN software to work correctly.
Do NOT allow the System extention in Big Sur or Monterey (there is a bug that causes a conflict in these OSs at least through Mac OS 12.3).
To do this go to System Preferences > Security and Privacy and on the General tab you will see a notice that Cisco AnyConnect has requested to install a kernel extension and a button marked "allow". If the icon in the lower left is "locked" you'll need to click on that to unlock for changes and provide an administrator password to make the button clickable. Verify that it says Cisco AnyConnect is requesting the change, and then click "allow". Follow any other on screen directions, or dismiss any dialog boxes that say it has been allowed.
Starting the software
After you've completed downloading and installing, the Cisco AnyConnect VPN software will be installed in the Application folder's Cisco folder. On Mac OS Big Sur and later this is also an application named "Cisco AnyConnect Socket Filter.app" in this folder. Delete this application as a workaround for a known issue where Mac OS can not support more than one socket filter at a time. The Socket Filter is not required to use the campus VPN.
Logging in
When you launch the Cisco AnyConnect client, you'll be prompted to enter the VPN server you wish to connect to.
- Enter vpn.illinois.edu.
- Click Connect.
When the connection process begins, you'll be asked for three pieces of information.
- Group: 1_SplitTunnel_Default
(Note: This is the most common choice. See About VPN Profiles for information about the alternatives, such as Tunnel All for access to library resources.) - Username: Your NetID
(or, if you're a guest, your guest ID) - Password: Your Active Directory password
(or, if you're a guest, your guest password)
Note: If you want to access Library resources without logging in to the Library Gateway, you should change to the Tunnel All profile.
When the VPN connects, a new icon will be added to your dock. The icon will show a lock image while the VPN is connected.
Show the dock with the VPN connected.
Disconnecting
When you're done using the VPN connection, disconnect it.
- Click on the AnyConnect VPN icon in your task bar.
- In the window that appears, click Disconnect.
Troubleshooting and the Statistics window
The Cisco AnyConnect VPN client gathers information that can help you with troubleshooting speed or connectivity issues. It may be helpful to open the Statistics window while troubleshooting with the Help Desk.
To open the Statistics window:
- Click the graph icon toward the lower left corner of the VPN window.
- Choose among the tabs as directed to help your Help Desk consultant with troubleshooting.
More help
For more help, contact the Help Desk during the Help Desk's hours of operation.