Office 365 Borderless FAQs

1. What is this Access Denied error?

This error is being shown because access to Email, Sharepoint and OneDrive is currently only allowed from Cisco corporate network.

We are planning to eliminate this requirement in the coming months by introducing Borderless Access to Office 365 and Email. This capability is currently in a limited pilot. To learn more about this capability, read on.

If you believe you are already in the pilot and this capability stopped working for you, please see FAQ #6


2. What does borderless access mean?

Borderless access allows your computer to connect to Office 365 Email, OneDrive, and Sharepoint even when you are not on the corporate network (Blizzard / CVO) - without needing to use VPN. To provide this capability, we use other measures to ensure that your computer is secure.

Please note that this capability and the rest of these FAQs are only applicable to Windows and MacOS laptops / desktops.


3. How do I get borderless access to O365?

As long as you are using a Cisco-managed device, you will get borderless access to O365 automatically. There is no action required on your part. We are rolling this capability out in batches and you will receive an email notification once you have been fully set up

If you do not use your device for over 30 consecutive days, your borderless access will be temporarily disabled. This can be enabled again by using your computer for a few hours. Please wait an additional 1 to 2 days for your access to be restored.

Please note that even if your borderless access to Office 365 gets temporarily disabled, you can still always use VPN


4. How can I check if my device is Cisco-managed?

Go to OnTrack . You should see the laptop/desktop you are trying to use listed here.

Note: You must be on the corporate network (Blizzard / CVO / VPN) to access OnTrack.



5. How can I check if my device has been enabled for borderless access to O365?

If you are still having to use VPN to connect to Email, Sharepoint or OneDrive, then your device has not likely been enabled yet.

As of August 2019, this service is still in early pilot trials and will be rolled out enterprise wide in the coming months

We will notifiy you once we have enabled this capability for your device.


6. Why did my borderless access stop working?

This could be caused by your device not checking-in regularly with our device management systems.

The easiest way to verify this is by going to OnTrack, clicking on the Health Score for the device in question, and looking for the Last Device Check-in date. If thisLast Device Check-in date is older than 30 days, then your borderless access would have been disabled.

Note: You must be on the corporate network (Blizzard / CVO / VPN) to access OnTrack.

Your device must be connected to the internet and in-use for at least a few hours every day for it to check-in with the device management systems. If the device goes completely offline for over 30 days, you will temporarily lose borderless access on it till it checks-in again. Also, your device must connect to the corporate network at least once a year for it to be managed correctly


7. It looks like my device has been checking-in regularly, and yet I am being told that my borderless access has been disabled. Why?

If OnTrack shows your laptop/desktop has been checking-in regularly, and yet you have seen an Access Denied error telling you to use VPN when trying to log in to Office 365 Email, OneDrive, or Sharepoint, please contact barcode-pilot@cisco.com.

Note: You must be on the corporate network (Blizzard / CVO / VPN) to access OnTrack.


8. Looks like my device is not checking-in. Can I do something to fix it?

You must be on the corporate network (Blizzard / CVO / VPN) before performing the steps listed below


Windows
  1. Go to estore.cisco.com
  2. Search for SCCM
  3. Download and Install the SCCM client. Please note that you need be connected to VPN or Blizzard to be able to do this
MacOS
  1. Go to https://casper.cisco.com
  2. Follow the instructions to enrol

Please wait at least a day after following the above instructions and then verify if your device has started checking in by going to OnTrack and looking at the Last Device Check-in date for the laptop.

Note: You must be on the corporate network (Blizzard / CVO / VPN) to access OnTrack.

If your device has successfully started checking-in now, please wait an addition 1 to 2 days for your Borderless access to be restored.


9. I tried everything but my Cisco laptop is still not checking in

If you have a Cisco-managed laptop but it is not checking in (please confirm this by going to OnTrack and looking at the Last Device Check-in date for your laptop), please contact IT support

Note: You must be on the corporate network (Blizzard / CVO / VPN) to access OnTrack.


10. What about Linux devices?

If you are using Cisco IT Linux builds, please continue to use VPN for off premise access. Linux devices are not in the current scope of this program.


11. A note on Virtual machines

Even if the host machine is enabled for borderless access, this capability is not automatically transferred to Guest VMs. These guest VMs will themselves have to become Cisco managed for them to get borderless access.