Cisco AnyConnect SSL Internet VPN client

Table of Contents

Introduction
The standard VPN client for use with Telstra Networking Tasmania’s Internet VPN service is the Cisco AnyConnect SSL VPN client.

This document provides a brief overview of the Cisco AnyConnect SSL VPN client only. Please see the IPSec Client Full Guide if you are still using the old End of Life Cisco IPSEC client but be aware that this client is no longer supported by Networking Tasmania or our vendor.

How To Obtain Software
The Desktop versions of the Cisco AnyConnect SSL client software are automatically downloaded the first time an end user connects through a supported browser. It is not necessary to download and install the client software prior to your first connection. Stand alone software is available to IT helpdesks for pre installation if required and should be requested from the Telstra Networking Tasmania Helpdesk. Mobile versions for tablets, phones etc are available via the appropriate App Store. The SSL AnyConnect VPN client software available for download from software section of this website. Updates to the desktop client software will be automatically downloaded and installed as end users connect.

iTunes Android
iTunes Android

Install the Cisco AnyConnect SSL VPN client software
As of Cisco AnyConnect version 3.1 the following operating systems are supported:

  • Microsoft Windows 10,8, 8.1 & 8.1 Update 1 x86 (32 bit) and x64 (64 bit)
  • Microsoft Windows 7 x86 (32 bit) and x64 (64 bit)
  • Red Hat Enterprise Linux 6.x  (32 bit) and 6.4 (64 bit)
  • Ubuntu 9.x, 10.x and 11.x (32 bit) and Ubuntu 12.04 & 12.10 (64 bit)
  • Mac OS X 10.8, 10.9 & 10.10 x86 & x64 (32 bit &  64 bit)
  • Android  (Available from the Google Play Store – see store notes for requirements/limitations/exceptions)
  • iOS (Available from Apple iTunes Store – see store notes for requirements/limitations/exceptions)

If you are installing the VPN client on a mobile device then the Cisco AnyConnect Mobility Client App can be downloaded and installed from the appropriate App Store. See the QR codes above or just search for the App in the appropriate Store.

If you are installing the VPN client on a Windows desktop then open a  browser and browse to https://vpn.nettas.com/your_group_name. Note that you must use https and you must supply your normal Internet VPN groupname. When prompted, enter your Internet VPN Username. If you have a hardware or SMS token then enter your PIN in the Password field immediately followed by the response. If you have a software token then just enter your response in the Password field. Click on the Login button.

If you are prompted to allow the ActiveX control in the information bar at the top of your browser then click to accept it. If you are prompted to accept the digital certificate then check that the details appear correct (call your IT helpdesk if unsure) and click to accept it. If you are prompted to allow the Java app to run click to accept it.

If you are presented with an error message stating that Administrator privileges are required to install the VPN client then ensure that the account you are logged onto the PC with has Administrator rights. Admin rights are required for the initial installation, but are not required for any future upgrades or to initiate a connection.

The VPN client will attempt to use ActiveX or Java to automate the installation. If this fails then you will be prompted to manually download and run the installer. When the client software download and installation has completed the connection will be made and the AnyConnect icon will appear in your task bar. You may now close your browser or navigate away from the VPN page. Right click on the AnyConnect icon in the task bar to disconnect or perform other VPN client operations. If the VPN client installation fails and requires manual download/installation there is a chance that your user may become locked. If you suspect this has occurred then wait 30 minutes and try again. If you are still unable to authenticate then contact your IT helpdesk for further assistance.

Connect to Internet VPN with Cisco AnyConnect SSL VPN client

There are two different ways to connect. You can find the AnyConnect application via (on Windows) Start | All Programs | Cisco | Cisco AnyConnect Secure Mobilty Client.  If this is your first time connecting using this method the url https://vpn.nettas.com will probably be in the connection field without your groupname. Ensure that your usual Internet VPN groupname (ask your IT helpdesk if you don’t know what this is) is appended to the end of the url (e.g. https://vpn.nettas.com/your_group_name). When prompted enter your Internet VPN Username. If you have a hardware or SMS token enter your PIN in the Password field immediately followed by the response. If you have a software token then just enter your response in the Password field. Click on the Connect button. If your connection attempt is successful then the full url will be retained for next time.

Alternatively you can open a browser and browse to https://vpn.nettas.com/your_group_name. Note that you must use https and you must supply your normal Internet VPN groupname. When prompted enter your Internet VPN Username. If you have a hardware or SMS  token enter your PIN in the Password field immediately followed by the response. If you have a software token then just enter your response in the Password field. Click on the Login button. This is not the preferred method, you should normally connect directly from the AnyConnect client as per the method described above.

Common problems and their solutions

  • If you are doing an initial installation on Internet Explorer then you may have to allow the ActiveX control as mentioned above.
  • If you are using Internet Explorer then you may need to add https://vpn.nettas.com to your list of trusted sites. Note that you will then be re directed to either vpn01.nt.tas.gov.au or vpn02.nt.tas.gov.au, these may also need to be added to your list of trusted sites.
  • If you are using a non Internet Explorer browser (e.g. Firefox, Chrome etc) then the installation will be Java-based. Ensure you have a working installation of Java prior to installing the client. If Java installation fails then you will be provided with a link to manually download and install the client.
  • You must be logged into a Windows computer as an Administrator or have Admin privileges for the initial installation. Automated upgrades and future connections are able to be completed by an unprivileged user.
  • If you are trying to do a manual resync of a hardware or software token you must enter your username and then any single character into the password field, it must not be blank.
  • If you are trying to obtain a new SMS token response you must enter your username and then any single character into the password field, it must not be blank.

Version History

Ver 1.6 21/03/2018 – Minor update
Ver 1.5 02/06/2015 – New connection URL and other minor updates
Ver 1.4 04/11/2014 – Update system requirements and minor changes to instructions
Ver 1.3 12/06/2014 – Remove Win XP and old IPSEC client support
Ver 1.2 07/02/2014 – Update system requirments and add SMS tokens
Ver 1.1 15/09/2011 – Added problems section
Ver 1.0 03/08/2011 – Initial build