Cisco VPN – Start Before Login

Contents

In updated versions of the Cisco Secure Client, Windows users are able to configure the app to connect to the UVM VPN prior to logging in to a domain-joined UVM computer via the Start-Before-Login (SBL) feature. This feature can be a convenience for remote users, and it is especially useful in cases where configurations for UVM computers are only applied as part of logging in.

Note about connecting from on-campus

On-campus users in the BASIC VPN groups do not need to connect to VPN as long as they are connected to Eduroam or the UVM wired or wireless networks.

If you installed Cisco Secure Client from software.uvm.edu (as shown in this article), it should have already come bundled with the Start Before Login module. If you did not, or if you’re not sure, you can follow these instructions to manually install the module through Company Portal.

Requires Cisco Secure Client

Before installing the Start Before Login module, you must already have the Cisco Secure Client application.

Click the Windows icon on your taskbar, search for “Company Portal”, and open it.
In the Apps tab, click the tile for the Cisco Secure Client Start Before Login Module.
Click Install.
You may get a prompt to close Cisco Secure Client. If you do, you can click Close All and Install.
When the module says Installed in Company Portal, you should be all set. You may need to restart your computer for the change to take effect.

While fully logged out of Windows, click the leftmost button in the bottom right corner with Network sign-in as the hovertext.

Not seeing this icon?

If you don’t see the Network Sign-in icon, please reboot your computer. You may also need to update your VPN client.
Change the URL to sslvpn2.uvm.edu/sbl (or sslvpn2.uvm.edu/nosaml) and click Connect.
Enter your UVM NetID in the Username field and your NetID password in the Password field, and click OK.
Optionally, specify the DUO method you’d like to use by adding a comma (“,“) and then the chosen method after your NetID password in the Password field:
1. none (preferred): This method sends a push notification to your cell phone or tablet where you must tap Approve, and is achieved by entering your NetID and password with nothing following it.
2. Passcode from app (ex. “<password>,123456“): For this method, open the Duo Mobile app on your cell phone or tablet, tap the Show button within the University of Vermont account box, and type the six digit code shown into the Password field after your password and a comma (“,“).
3. SMS (ex. “<password>,SMS“): This method will tell you that authentication failed, and then it will send a text message to your phone that includes ten passcodes. Enter your NetID again, and “<password>,<code>”, where <code> is any one of those six-digit codes. Each passcode can only be used once, and generating new codes renders all previous codes obsolete.
4. call (ex. “<password>,call“): This method prompts a phone call that you must answer and follow the instructions from the voice on the other end.
If required, proceed through the Duo MFA prompts.
Click Accept. If you do not see this screen, it’s possible you entered your username or password incorrectly, your Multi-Factor Authentication method failed, or you don’t have access to the VPN and must request it at go.uvm.edu/vpnrequest.
To verify you are successfully connected, you will see the option to Disconnect when you hover over this icon in the bottom right corner. Don’t click it.
Sign in to your computer as usual and you will find the VPN already connected.