Connecting to the Company VPN

After you have setup your PC you will need to connect to the company
Network. The PC is configured with a VPN (Virtual Private Network) client
that will allow you to Start Before Log on.

What is Start Before Logon?

Start Before Logon (SBL) allows users to establish their VPN connection to the
CenturyLink intranet before logging onto Windows. This is very useful if you are outside
of a CenturyLink building and are logging on to a new PC for the first time. This is also
very helpful if you cannot log on to Windows.

What is required?
To use this feature, you will need to use a Multifactor Token and one of the VPN clients.

Multifactor Tokens are:

 MobilePass
 MobilePass+
 Microsoft Authenticator

If you currently do not have a token for VPN access, you or your sponsor will need to
submit a Request for Remote Access using My Support Desk. Go to
https://mysupportdesk.service-now.com/msd and search for MFA to find the correct
form for your region.

VPN clients are:

 Cisco AnyConnect
 CheckPoint
 Global Protect

CenturyLink imaged Laptops will have at least one of these clients installed.

NOTE: Global Protect client does not currently support SBL.

To use Start Before Logon, follow these steps:

1. Power on your PC.
2. Press the “CONTROL+ ALT+DEL” keys simultaneously.
3. Click OK to the Security Warning.
4. Ensure that you have an internet connection.
 NOTE: If necessary, click the network icon or to configure the connection.

5. Click the SBL icon located in the bottom right of the display. One of the VPN
clients will open.

6. Log on to the VPN with your Username and the appropriate token information.

NOTE: If using Microsoft Authenticator (default MFA Multi-Factor) enter your Domain
Username and Password, press Enter. You will be prompted by Microsoft
Authenticator app on your mobile device to Approve the request.

Cisco AnyConnect

Check
Point

NOTE: If a security certificate window appears click Trust and Continue.

7. Log on to Windows using your domain credentials when the Microsoft login window
appears.

NOTE: When you log on to Windows, your account is cached to your local profile. Going
forward, you can use this cached password to log on to your PC. If your password
changes while on the company network, the cached account will update. If the locally
cached password and your CTL Domain password are out of sync (different), then use
the above procedure to 1st connect to the VPN, then log on to Windows.