Notice: Duo MFA is now required to authenticate AnyConnect VPN Sessions

Before using the AnyConnect Secure mobility client, enroll a phone or other device in Duo MFA. All AnyConnect VPN sessions must now be self authorized from your phone or other Duo enrolled device.

Instructions for enrolling in Duo are available under the blue Guides bubble, Guides, Videos and Instructions section, AnyConnect (VPN) Guides subsection at

Cisco AnyConnect Secure Mobility Client

UC Davis Health provides remote access VPN for employees and non-employees, who are authorized to connect to the UC Davis Health network from remote locations. VPN should solely be used for conducting UC Davis Health business.

 This Page contains instructions and supported Cisco AnyConnect Secure Mobility Clients. 

  • Administrative rights are required to install applications/programs. If you do not have administrative rights, contact your system administrator. For UCDH issued computers, submit a service request to obtain administrative rights.
  • You can download and install the client from inside or outside the UCDH network, but to connect to VPN you have to be outside the UCDH network or you can use the Guest Wireless. 

Windows AnyConnect Client

Supported Versions- Windows 7 SP1, 8, 8.1 & 10 x86(32-bit) and x64(64-bit)

Quick Install Steps:

  1. Click on "Windows Client Download"
  2. Click Run
  3. Click Next
  4. Select “I accept the terms in the License Agreement” and click Next
  5. Click Install
  6. Click Finish
  7. Click All Programs > Cisco > Cisco AnyConnect Secure Mobility Client> AnyConnect Secure Mobility Client
  8. Enter the URL “” and click connect
  9. Active Directory/HS credentials are required outside UCDH network.
  10. Click OK
  11. Approve the DUO push notification on your smart phone
  12. Accept the banner to continue
  13. Once you are connected, you will see the icon, located in the system tray, represented by the Cisco AnyConnect symbol and a gold lock 

Windows AnyConnect Client with Start Before Logon (SBL)

With Start Before Logon (SBL) enabled, customers see the AnyConnect GUI logon dialog before the Windows logon dialog box appears. This establishes the VPN connection first. SBL allows Health System Windows scripts to run; hence automatically mapping network drives. This feature is only available for Windows operating systems.

Macintosh AnyConnect Client

Supported Versions- macOS 10.11, 10.12, 10.13, and 10.14

 Quick Install Steps:

  1. Click on "Macintosh Client Download"
  2. Click Continue
  3. Click Continue and then click on Agree to continue the installation
  4. Uncheck everything except VPN and click continue
  5. Start the AnyConnect client from Launchpad
  6. Enter the URL “”
  7. UCD campus "Central Authentication Service (CAS)" credentials are required outside UCDH network.
  8. Click OK
  9. Approve the DUO push notification on your smart phone
  10. Accept the banner to continue
  11. When connected, you will see the AnyConnect icon with a gold lock in the status bar 

iphone and ipad 

  1. Download "Cisco AnyConnect" client from the App Store
  2. Open "Cisco AnyConnect"
  3. Click Add VPN Connection
  4. Description = UCDH VPN (or any other name you wish to give)  
  5. Server Address =
  6. Click Save
  7. Slide Anyconnect VPN button to ON
  8. Enter the UCDHS Active Directory/HS/Citrix username and password
  9. Approve the DUO push notification on your smart phone
  10. Accept the banner


Citrix Client Plig-In for remote non UC Davis Windows PC's.

2. You will be prompted to install the Citrix Client Plug-In, Click the Check Box to Download.
3. At the File Download window select Open.
4. Accept all the defaults during the installation process.
5. You are now ready to launch UCDHS Citrix Applications
Select the desired Citrix application from the Applications list.

Procedure for Mac