Because of persistent threats leveraged against higher ed academic institutions, CNF and Cornell require a VPN connection to access many on-campus services. Cornell uses two differing VPN clients... Cisco Anyconnect for those with a Cornell NetID; FortiClient for those with a Cornell GuestID.
Beginning May 14, 2021, Cornell will require Two Step Login for NetID VPN.
Follow the instructions on the Cornell VPN webpage to install the Cisco AnyConnect VPN client.