VPN: University VPN Install and Connection Guide for Windows
Installing and Connecting to the Duke University VPN on Windows
Follow these steps to install Cisco Secure Client and connect to the Duke University VPN on a Windows computer. Members of the University community with a NetID can download the client. These instructions apply to the Duke University VPN, not the Duke Health VPN.
Before you begin: You must have administrator permissions to install software on your computer. If prompted, approve the installation or enter administrator credentials. Contact your local IT support if you do not have these permissions.
Install Cisco Secure Client | Connect to the VPN
Install Cisco Secure Client
-
Go to software.duke.edu, sign in with your NetID, and search for VPN.
-
Select the Windows version of Cisco Secure Client and complete the order process. Open My Orders at the top of the page, then select Download for download instructions.
-
Download the installer and locate it in your Downloads folder. The download may be a compressed (ZIP) file. The version number in the filename may differ from the screenshots.
-
If you downloaded a ZIP file, right-click it and select Extract All. Keep the default destination and leave Show extracted files when complete selected. Click Extract.
-
In the extracted folder, double-click Setup with the file type Application. There may be several items named Setup; choose the application shown below.
-
In the Cisco Secure Client Install Selector, select Core & AnyConnect VPN and Diagnostic And Reporting Tool. Leave the other options unchecked unless your IT support has instructed you otherwise. Click Install Selected.
-
Confirm the selected modules and click OK.
-
Review the license agreement and click Accept to proceed.
-
If Windows asks whether to allow the installer to make changes to your computer, click Yes and enter administrator credentials if prompted. Follow any remaining installation prompts. Click Finish if a completion window appears.
Connect to the VPN
-
Open the Start menu and select Cisco Secure Client from the Cisco folder, or search for Cisco Secure Client.
-
The client should display Ready to connect. If the server field is blank, enter vpn.duke.edu (or portal.duke.edu). If it is already filled in, leave it unchanged. Click Connect.
-
In the sign-in window, leave Group set to -Default- unless you have been instructed to use a different group. Enter your NetID in the Username field and your NetID password in the Password field. Click OK.
-
Complete multi-factor authentication (MFA) in the Answer field using one of the following options:
- Duo Push: Enter 1, click Continue, and approve the notification in Duo Mobile.
- Duo passcode: Enter the passcode from Duo Mobile and click Continue.
- YubiKey: Click in the Answer field and activate your registered YubiKey to enter its passcode. Click Continue if needed.
The available options may vary based on your registered MFA devices.
-
Wait for the VPN to connect. The client may update during this process. A notification displaying Connected: vpn.duke.edu confirms the connection.
You can also check the Cisco Secure Client icon in the notification area near the clock. Click the Show hidden icons arrow if needed, then hover over the Cisco icon or open the client to check your connection status.
Need Assistance?
Contact your local IT support group or the appropriate Service Desk:
- University users: OIT Service Desk, 919-684-2200
- Duke Health users: DHTS Service Desk, 919-684-2243
Article number: KB0016403
Valid to: October 8, 2027