Cisco AnyConnect (VPN) – Start Before Logon (SBL)


Start Before Logon (SBL) is a feature of Cisco AnyConnect VPN. Start Before Logon allows users to log into Digital Services-managed computers, where they have not logged in before, when the computer is off campus (i.e. new computers and computers that have recently been re-imaged).

This article relates to Digital Services-managed Windows 10 workstations. Digital Services-managed Windows 11 workstations can authenticate without a direct connection to Deakin.

Logging into Windows with Start Before Logon (SBL)

  1. Turn on the computer and wait until the login prompt appears, as shown below.

  2. Make sure your computer has internet access. If you connect via ethernet, make sure the cable is connect.
    If you connect via Wi-Fi or a hotspot, click the second icon from the left to establish your internet connection.



  3. Once internet access is available, click the leftmost icon to start the Cisco AnyConnect Mobility Client.

    windows-logon-sbl-icon.jpg

  4. Cisco AnyConnect Mobility Client opens.

    You are prompted with a drop-down menu listing available VPN connection options. Click into this box and delete the text that appears here.



  5. Type the following server address: vpn.deakin.edu.au/connect



  6. Click Connect.

  7. A pop-up window appears. Enter your Deakin username, and your Deakin Password.

    Complete Duo authentication. In the Second Password box, enter either:

    • a PIN code supplied by the Duo app, or
    • the word PUSH to receive an Duo push notification.



  8. Once Cisco AnyConnect has connected, you are returned to the Windows Logon screen. Sign into the Windows login screen as normal.

    windows-logon-sbl-ready.jpg