Introduction

Secure Sockets Layer (SSL) virtual private network (VPN) provides secure remote access from one machine to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as “Remote Access VPN,” is a subscription-based service that allows a user to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption to other services that are being accessed over VPN but does encrypt the traffic between your machine and the VPN device. 

Top of page

Contents

• Related Links
• Eligibility Requirements
• Supported Platforms
• Network Requirements: Enable IPv6
• 2-Factor Authentication
• Connection Options
• Instructions
  • Downloading and Installing Ivanti Secure Access on Windows
  • Connecting to VPN in Windows

Top of page

Related Links

• Downloading, Installing, and Connecting to Remote Access VPN in Mac OS 12.6.6 or later
• Downloading, Installing, and Connecting to Remote Access VPN in Linux
• Connecting to Ivanti Secure Access Client App VPN in Android or iOS
• Remote Access VPN Frequently Asked Questions

Top of page

Eligibility Requirements

• All current Virginia Tech faculty, staff, and students are eligible to access Remote Access VPN.
• Remote Access VPN is a subscription-based, bundled service with the Virginia Tech wireless network service or the Virginia Tech wired Ethernet service. You can verify your subscription by following the instructions at Registering Online for Wireless LAN Service.
• You may use either Virginia Tech provided computers or personally owned computers to connect to Remote Access VPN, as long as they meet the minimum system and password requirements. 
• You must have access to an administrator account on the computer. If you have a computer owned by Virginia Tech and do not have that access, contact your Network Liaison or contact 4Help by clicking Get Help on the 4Help Portal.

Top of page

Supported Platforms

See Ivanti Secure Desktop Client Supported Platforms Guide for a list of supported operating systems and web browsers.

For security reasons, we ask users to upgrade their machines to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems that are no longer supported by the operating system manufacturer. 

Top of page

Network Requirements: Enable IPv6

To access Virginia Tech Remote Access VPN service, you must enable both IPv4 and IPv6 stacks on your network adapter. IPv6 requirement is not dependent on your ISP's ability to provide you with an IPv6 address, this is because the VPN allocates you an IPv6 address and does need the IPv6 stack to be enabled on your network adapter. To enable IPv6, follow the instructions in the Authentication successful but following error is displayed: "Connection Error Failed to setup virtual adapter. (Error:1205). (restart your system and try again)." section of Remote Access VPN Frequently Asked Questions.

Top of page

2-Factor Authentication

The Virginia Tech Remote Access VPN service requires 2-factor authentication. For more information, see Authenticating using 2-Factor Authentication.

Top of page

Connection Options

Generally, a) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the Which Connection Profile Do I Use? section of Remote Access VPN Frequently Asked Questions.

Top of page

Instructions

Downloading and Installing Ivanti Secure Access on Windows

1. Verify that you are registered to use the Remote Access VPN service. For instructions, see the To Verify Registration section of Registering Online for Wireless LAN Service.
2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling, Adding, Managing, or Removing a Duo 2FA Device.
3. If Ivanti is currently installed, uninstall Ivanti.
   
   1. Click Start.
   2. Your cursor will automatically be placed in a text box. Start typing: programs
      
   3. As you type, results will appear and change. Click Add or Remove Programs.
   4. Click Ivanti Secure Access. (You may have to scroll down to see Ivanti Secure Access.)
   5. Click Uninstall.
   6. If prompted for a username and password, enter the credentials of an administrative account.
   7. When prompted about are you sure, click Yes.
   8. When prompted to save configuration settings, click No.
   9. When the uninstall is complete, click OK.
4. To download the Ivanti installer, click the following link: 
   • vtVpnSetup.exe
5. If prompted, choose to save the installer file to your computer.
6. When the download is complete, to launch the installer, double-click the vtVpnSetup icon.
7. If prompted by a "Windows protected your PC" window:
   
   1. Click More info.

      

   2. Click Run anyway.

      

8. If prompted for a username and password, enter the credentials of an administrative account.
9. In the user account control window, click Yes.
10. Click Install.
11. When the installation is complete, click Finish. Ivanti will start and minimize to the notification area.
12. Follow the instructions below for Connecting to VPN in Windows.
13. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions.

Connecting to VPN in Windows

1. The instructions below are for connecting to a) - VT Traffic over SSL VPN, and the procedure is the same for connecting to the other connection profile.
2. If you have not yet installed Ivanti, follow the instructions above at Downloading and Installing Ivanti Secure Access on Windows.
3. If you do not know which connection profile to use, we recommend using a)- VT Traffic over SSL VPN. For more information, see the Which Connection Profile do I use? section of Remote Access VPN Frequently Asked Questions.
4. In the Windows notification area in the lower-right of the screen, click Ivanti Secure Access.
5. Click a) - VT Traffic over SSL VPN.
6. Click Connect.

   

7. In the browser window that opens type your credentials.
   
   1. In the Username text box, type your VT PID, which is the first part of your @vt.edu email address.
   2. In the Password: text box, type your PID password.
   3. Click Login.
      
      
      
      
8. Complete 2-factor authentication. 
   (If your second factor device is unavailable or broken, see Lost, Forgot, Broke, or Unavailable 2-Factor Device.)
   
   
   
   The screen will default to your preferred 2-factor method.  If you prefer to use another method click on the Other options link.  The following list is the options available for 2-factor authentication 
   
   
   • To use push notification:
     
     1. Select Duo Push from the Other options list.
        (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, select the last item from the Other options list, Manage devices.)
        
     2. When the push notification appears, accept the Duo push notification.
        1. If the push notification does not appear, see Duo Mobile App Errors, Problems, and Connection Issues / Duo Push Not Received.
     3. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use SMS text message:
     
     1. Select Text message passcode from the Other options list.
        (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, select the last item from the Other options list, Manage devices.)
        
     2. You will receive an SMS text message that starts with "VT DUO: SMS passcodes:" to your primary mobile phone. Open that text message which will contain a seven digit passcode.
     3. In the "Passcode" text box, type in the passcode from the SMS text message.
     4. Click Verify.
     5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a voice phone call:
     
     1. Select Phone call from the Other options list.
        (This will call the first voice-capable device that is enrolled in your Duo account. To send the phone call to a different device, select the last item from the Other options list, Manage devices.)
     2. The primary telephone number associated with your Duo account will ring. Answer the telephone.
     3. Press one of the number keys on the phone to confirm the authentication.
     4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a Yubikey:
     
     1. The Yubikey must be previously registered with Duo as AES. U2F tokens will not work. For instructions, see Enrolling a YubiKey as AES/OTP to Use in Any Browser.
     2. Select Security key from the Other options list.
     3. When prompted to "Touch your security key" tap your YubiKey. The passcode will be automatically generated and submitted by the YubiKey for you.
     4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a 6-digit numeric passcode from the Duo mobile app:
     
     1. Start the Duo mobile app.
     2. In the Duo mobile app, tap Show to the right of the hidden Passcode.
     3. On your computer select Duo Mobile passcode from the Other options list.
     4. In the Passcode text box, type the 6-digit numeric passcode from the Duo mobile app.
     5. Click Verify.
     6. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a 6-digit numeric passcode from a D-100 token or a software token:
     
     1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
     2. On your computer select Duo Mobile passcode from the Other options list.
     3. In the Passcode text box, type the 6-digit D-100 numeric passcode.
     4. Click Verify.
     5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
        
        
9. If this is the first time connecting on your machine you will receive the following prompt:
   
   
   
   If the computer is public or shared between multiple users select "No, other people use this device" so that your VPN login information is not saved.  If you are the only user of the computer select "Yes, this is my device".
   
   
10. If prompted about an upgrade to Ivanti:
    
    1. Click Upgrade.
    2. In the user account control window, click Yes. Ivanti will download and install the upgraded version, restart, and you will be reconnected to the remote access - VPN.
11. When you are finished using the remote access VPN, disconnect from it. To do this:
    
    1. In the Windows notification area in the lower-right of the screen, click Ivanti Secure Access.
    2. Click a) - VT Traffic over SSL VPN.
    3. Click Disconnect.

       

12. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions before contacting 4Help by clicking Get Help at the top of this page.

Top of page