In your Applications folder, go to the Cisco folder and double-click the Cisco AnyConnect Secure Mobility Client. Enter vpn.vtc.vt.edu in the Ready to Connect to field, then press the Connect button. Enter your FBRI username and password, then click OK. A banner window will appear. Cisco AnyConnect Secure Mobility Client provides this through a mobility centric cross-platform application. It provides a VPN and encrypted web connection for any device. All of this is sent into a single observable private network.

• Cisco Anyconnect 4 Client Download
• Cisco Anyconnect Secure Mobility Client Catalina

Installing the VPN Client

1. Download the AnyConnect VPN client for macOS 11.0 (Big Sur), macOS 10.15 (Catalina), or macOS 10.14 (Mojave).
2. In your Downloads folder, double-click the file you just downloaded to open it. An icon will appear on the desktop called AnyConnect, and a separate window will open.
3. Double-click on AnyConnect.mpkg to run the installer, then follow the steps to complete the installation. NOTE: We recommend you un-check everything (Web Security, Umbrella, etc) except for the VPN and the Diagnostic and Reporting Tool (DART). This will give you a minimal install. The other features are not supported so there's no need to install them.
   
   • NOTE TO macOS users: During the installation, you will be prompted to enable the AnyConnect software extension in the System Preferences -> Security & Privacy pane. The requirement to manually enable the software extension is an operating system requirement.

Starting the VPN Client

1. In your Applications folder, go to the Cisco folder and double-click the Cisco AnyConnect Secure Mobility Client.
   
2. Enter vpn.uci.edu in the Ready toConnect to field, then press the Connect button.
3. Select your desired connection profile from the Group drop-down menu:
   
   • UCIFULL – Route all traffic through the UCI VPN.
     
     • IMPORTANT: Use UCIFULL when accessing Library resources.
   • UCI – Route only campus traffic through the UCI VPN. All other traffic goes through your normal Internet provider.
4. Enter your UCInetID and password, then click OK.
5. A banner window will appear. Click Accept to close that window. You are now connected!

Disconnecting the VPN Client

When you are finished using the VPN, remember to disconnect.

1. Click the AnyConnect client icon located in the menu bar near the top right corner of your screen.
2. Select Quit.

Notice

THIS FIELD NOTICE IS PROVIDED ON AN 'AS IS' BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Products Affected

Defect Information

Problem Description

When used with macOS Catalina 10.15.x, VPN connections will not be established with some versions of Cisco AnyConnect Secure Mobility Client and some versions of the HostScan package.

Background

HostScan provides the AnyConnect Client the ability to identify the operating system, anti-virus, anti-spyware, and firewall software installed on the host.

In macOS Catalina 10.15.x and later, the operating system will no longer support execution of 32-bit binaries, which are included in HostScan packages 4.3.x and earlier. As a result, AnyConnect Client end-users who attempt to connect from macOS Catalina to a Cisco Adaptive Security Appliance (ASA) head-end that runs HostScan package 4.3.x and earlier will not be able to successfully establish VPN connections. Cisco AnyConnect 4.8.00175 is the first version that officially supports operation on macOS Catalina and contains no 32-bit code.

Problem Symptom

If a device that runs the macOS Catalina release attempts to connect with an ASA head-end that runs HostScan package 4.3.x and earlier, this “Posture Assessment Failed: Hostscan CSD prelogin verification failed” pop-up warning message appears:

Additionally, during the first launch of AnyConnect HostScan, SystemScan, and DART modules on macOS Catalina 10.15.x, one-time-only file access request pop-up messages might appear. For further information, refer to the AnyConnect Client 4.8 Release Notes.

Workaround/Solution

Solution

For macOS Catalina 10.15.x users to successfully establish VPN connections using AnyConnect Client with HostScan, these three steps must be performed:

1. HostScan package on the ASA head-end must be migrated to HostScan 4.8.00175 or later.
2. If you migrate from HostScan 4.3.x to 4.8.00175 or later, the Dynamic Access Policy (DAP) policies must be updated to the new DAP policy definitions introduced in 4.6.x. For additional information, refer to the AnyConnect HostScan Migration 4.3.x to 4.6.x and Later document.
3. AnyConnect Client must be upgraded to 4.8.x or later.

Workaround

If an upgrade to HostScan package 4.8.00175 or later is not an option, administrators of systems with HostScan package 4.3.x and earlier can disable HostScan on their ASA head-end in order to restore VPN connectivity. If disabled, all HostScan posture functionality and dynamic access policies (DAPs) that depend on endpoint information will be unavailable.

Cisco Anyconnect 4 Client Download

For More Information

Cisco Anyconnect Secure Mobility Client Catalina

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.