VPN, CISCO AnyConnect, Installing Cisco AnyConnect VPN for Mac OS

University of Illinois students, faculty, and staff can use these directions to set up their Mac OS computers or devices to connect to the Virtual Private Network (VPN).

If you have a guest account, Technology Services recommends IllinoisNet Wireless for on-campus use. Contact your host for help downloading and installing the VPN if you need guest access for off-campus use.

Quick Start

• Download the Mac VPN installation package from WebStore.
• Install the software with administrator privileges.
• Do NOT accept the system extension "socket filter". It is not needed for basic VPN, and will conflict with other socket filters (Mac OS 11, Mac OS 12). After installation is complete, go to Cisco folder inside Applications, and delete the application "Cisco AnyConnect Socket Filter.app" as a work around for a known MacOS Socket Filter related issue.
• VPN server: vpn.illinois.edu
• Username: Your NetID
  (or, if you're a guest, your guest ID)
• Password: Your Active Directory password
  (or, if you're a guest, your guest password)
• Group: 1_SplitTunnel_Default
  (Note: This is the most common choice. See About VPN Profiles for information about the alternatives, such as Tunnel All for access to Library and WebStore resources.)

Detailed instructions are provided below.

Mac OS (Pre-Big Sur) Instructions

Mac OS Big Sur Instructions

Security Warnings

Mac OS 10.14, 10.15, and 11 (Big Sur) will warn you that the Cisco software is trying to load an extension (it might be a kernel extension or a system extension, depending on your OS and the Cisco version). Only for MacOS 10.14 and 10.15 do you you need to approve this in order for the VPN software to work correctly.

Do NOT allow the System extention in Big Sur or Monterey (there is a bug that causes a conflict in these OSs at least through Mac OS 12.3).

To do this go to System Preferences > Security and Privacy and on the General tab you will see a notice that Cisco AnyConnect has requested to install a kernel extension and a button marked "allow".  If the icon in the lower left is "locked" you'll need to click on that to unlock for changes and provide an administrator password to make the button clickable. Verify that it says Cisco AnyConnect is requesting the change, and then click "allow".  Follow any other on screen directions, or dismiss any dialog boxes that say it has been allowed.

Starting the software

After you've completed downloading and installing, the Cisco AnyConnect VPN software will be installed in the Application folder's Cisco folder. On Mac OS Big Sur and later this is also an application named "Cisco AnyConnect Socket Filter.app" in this folder. Delete this application as a workaround for a known issue where Mac OS can not support more than one socket filter at a time. The Socket Filter is not required to use the campus VPN.

Logging in

When you launch the Cisco AnyConnect client, you'll be prompted to enter the VPN server you wish to connect to.

• Enter vpn.illinois.edu.
• Click Connect.

When the connection process begins, you'll be asked for three pieces of information.

• Group: 1_SplitTunnel_Default
  (Note: This is the most common choice. See About VPN Profiles for information about the alternatives, such as Tunnel All for access to library resources.)
• Username: Your NetID
  (or, if you're a guest, your guest ID)
• Password: Your Active Directory password
  (or, if you're a guest, your guest password)

When the VPN connects, a new icon will be added to your dock. The icon will show a lock image while the VPN is connected.

Show the dock with the VPN connected.

Disconnecting

When you're done using the VPN connection, disconnect it.

1. Click on the AnyConnect VPN icon in your task bar.
2. In the window that appears, click Disconnect.
   
   

Troubleshooting and the Statistics window

More help

For more help, contact the Help Desk during the Help Desk's hours of operation.