Reaching Others University at Buffalo - The State University of New York
Skip to Content
Phishing attempt targets UB accounts

Email through UB VPN configuration change

Published June 19, 2014

Effective June 12, 2013, email client programs that remotely connect through UB’s AnyConnect VPN will be required to authenticate to the UB Central Email server.  You may need to make changes to your email client program's settings.

This change does NOT affect remote use of UB Central Exchange email, UBmail Powered by Google (used by most students), or any Web email access to UB’s servers (,, etc.)

What does this mean?

The UB Central Email server ( will not ordinarily send out your emails unless you have identified yourself (authenticated) using your UBITName and password. For people using the AnyConnect VPN to connect remotely to UB Central Email, this authentication was not required. As of June 12, 2013, will require authentication.

Why is this change being made?

For a number of years, email programs that connected to UB through an Internet Service Provider such as Time Warner needed to have username and password authentication enabled to be able to send emails.  People connecting to UB through the AnyConnect VPN, however, did not need to authenticate to UB’s Central Email server since it was assumed these connections were trusted. Unfortunately, hackers have exploited the UB’s AnyConnect VPN trust assumption to send out phishing emails through UB’s Central Email server.  

What do you need to do?

To enable authenticated access to the UB Central Email server, please follow the setup instructions for your email client at the following UBIT website address:

Specifically, be sure your outgoing server settings are configured to Use Authentication.

If you have been using your email client from off campus without going through the AnyConnect VPN, most likely your email client is already configured properly.

Need Help?

Please direct any questions to the CIT Help Desk (, 716-645-3542)

Is There Something We Should Know?

Help us keep the UB community informed of information technology-related events (UBITName and password required).

Tell us>