Secure Sockets Layer (SSL) Virtual Private Network (VPN) provides secure remote access from a device to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as Remote Access VPN is a subscription service that allows you to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption, but does encrypt the traffic between your device and the VPN device.
It is common when you are connected to All Traffic over SSL VPN, since all your traffic is routed through campus which introduces latency.
If this happens on a Windows computer on both profiles, follow these instructions: Disable Juniper Networks Service Adapter.
All current Virginia Tech faculty, staff, and students are eligible to access Remote Access VPN. Remote Access VPN is provided as a bundled service with Virginia Tech wireless network access or Virginia Tech wired Ethernet service.
You can check your subscription status on the VT Accounts page. A check mark next to Wireless LAN Service and Remote Access VPN indicates your subscription status.
For more detailed instructions, see Registering Online for eduroam Wireless LAN Service.
A link to the installer file or application can be found within the following knowledgebase articles that contains instructions for your operating system or device:
We recommend Pulse Secure client versions above 9.1.15. We do not support clients versions below 9.1.12 and you will not be able to connect to the VPN. You can download the recommended client version from the links in the Where Can I Find the Packages and Instructions for VPN? section of this page.
Please refer to the links below to check if your operating system (OS) is currently supported:
For security reasons, we ask you to upgrade your device to the latest version to receive any patches for vulnerabilities. Network Infrastructure & Services (NI&S) is unable to support OS’s that are no longer supported by the OS manufacturer.
If you are using a Virginia Tech owned device, you must have an administrator account to install these packages. If you don't have an administrator account, contact your Network Liaison or contact 4Help by clicking Get Help on the 4Help Portal.
Download and run the troubleshooter from Fix problems that block programs from being installed or removed. Select Uninstalling and select Pulse Secure from the list of applications. (You must be an administrator to run this tool.)
Your user name is your VT Username (PID) (before @vt.edu, example username: iamvpngod(iamvpngod@vt.edu)) and use your Network Password and 2-factor authentication.
On your Pulse Secure client, at the bottom-left corner, click the plus sign ("+") and enter the information below:
Virginia Tech offers two connections profiles:
For most people, b) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and avoids latency for regular internet traffic.
You can read more about those profiles at What is the difference between two Pulse Secure VPN Connection profiles? What profile do I use?
Once your network password is submitted and accepted, you will be prompted with a secondary authentication screen. Your username will be populated automatically; in the other box, type the method of 2-factor authentication you would like to use. If you have multiple devices setup for Duo authentication, you can append the number (for example, push1 for device 1 and push2 for device 2) of the device along with the method of your choice. Below are the available methods:
For more detailed and step-by-step instructions, see the appropriate knowledgebase article below:
Your VPN connection is set to be timed out every 1440 minutes (24 hours). You will be prompted for session extension 30 minutes before your current session expires. If you miss the extension prompt, you can manually extend your session any time from the session options on the client (You have to authenticate again). Your session will also be terminated if there is no activity over VPN for more than 60 minutes.
Most times the computer firewall settings block the Virtual Adapter from establishing a tunnel to the VPN device. In your OS firewall settings, allow the Pulse Secure Client to make connections to public. If you need assistance with this contact your Network Liaison or contact 4Help by clicking Get Help on the 4Help Portal.
In a few cases some other VPN applications might already be using the Virtual Adapter and not allow sharing. If that is the case please uninstall those software packages and restart your device, before attempting to connect again.
You must enable the IPv6 stack on your network adapter (only for Windows and Mac computers) by following the instructions below:
>The IPv6 requirement is not dependent on your ISP's ability to provide you with an IPv6 address; this is because the VPN allocates you an IPv6 address and does need the IPv6 stack to be enabled on your network adapter.
We currently route the following subnets over VPN when you connect to b) - VT Traffic over SSL VPN:
You can search for your department's liaison on the following web page: Network Liaisons.
We route most of Blacksburg Virginia Tech subnets over the VT Traffic over SSL VPN connection profile. But you can connect to All Traffic over SSL VPN and try accessing it. Once you verify connectivity, please report this to 4Help by clicking Get Help on the 4Help Portal so we can make changes.