Downloading, Installing and Connecting to Ivanti Remote Access VPN in Windows


 

Introduction

Secure Sockets Layer (SSL) virtual private network (VPN) provides secure remote access from one machine to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as Remote Access VPN is a subscription based service that allows you to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption to other services that are being accessed over VPN but does encrypt the traffic between your machine and the VPN device.

Top of page

Contents

Top of page

Top of page

Eligibility Requirements

Top of page

Supported Platforms

See: Ivanti Secure Desktop Client Supported Platforms Guide.

4Help does not support Linux installations. Due to the wide variety of Linux distributions, 4Help cannot provide any support beyond these basic instructions. We do not guarantee that they will work with your particular device or client.

For security reasons, we ask users to upgrade their machines to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems that are no longer supported by the operating system manufacturer. 

Top of page

Network Requirements: Enable IPv6

To access Virginia Tech Remote Access VPN service, you must enable both IPv4 and IPv6 stacks on your network adapter. IPv6 requirement is not dependent on your ISP's ability to provide you with an IPv6 address, this is because the VPN allocates you an IPv6 address and does need the IPv6 stack to be enabled on your network adapter. To enable IPv6, follow the instructions in the Authentication successful but following error is displayed: "Connection Error Failed to setup virtual adapter. (Error:1205). (restart your system and try again)." section of Remote Access VPN Frequently Asked Questions.

Top of page

Network Password and 2-Factor Authentication

Your Network Password is different from your regular VT Username (PID) passphrase. For instructions to get or reset it, see the View, Change, or Reset Network Password section of Changing or Resetting My Password.

The Virginia Tech Remote Access VPN service requires using 2-factor authentication. For more information, see Authenticating using 2-Factor Authentication.

Top of page

Connection Options

Generally, b) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the What is the difference between two Ivanti Secure Access VPN Connection profiles? section of Remote Access VPN Frequently Asked Questions.

Top of page

Instructions

Video of Instructions

Downloading and Installing Ivanti Secure Access on Windows

  1. Verify that you are registered to use the Remote Access VPN service. For instructions, see the To Verify Registration section of Registering Online for Wireless LAN Service.
  2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling or Adding a Second Factor Device to Duo 2-Factor Authentication.
  3. If Ivanti is currently installed, uninstall Ivanti.
    1. Click Start.
    2. Your cursor will automatically be placed in a text box. Start typing: programs
    3. As you type, results will appear and change. Click Add or Remove Programs.
    4. Click Ivanti Secure Access. (You may have to scroll down to see Ivanti Secure Access.)
    5. Click Uninstall.
    6. If prompted for a username and password, enter the credentials of an administrative account.
    7. When prompted about are you sure, click Yes.
    8. When prompted to save configuration settings, click No.
    9. When the uninstall is complete, click OK.
  4. To download the Ivanti installer, click the following link: vtVpnSetup.exe.
  5. If prompted, choose to save the installer file to your computer.
  6. When the download is complete, to launch the installer, double-click the vtVpnSetup icon.
  7. If prompted by a "Windows protected your PC" window:
    1. Click More info.

      Image demonstrating the above instruction(s).

    2. Click Run anyway.

      Image of the Run anyway button highlighted

  8. If prompted for a username and password, enter the credentials of an administrative account.
  9. In the user account control window, click Yes.
  10. Click Install.
  11. When the installation is complete, click Finish. Ivanti will start and minimize to the notification area.
  12. Follow the instructions below for Connecting to VPN in Windows.
  13. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions.

Connecting to VPN in Windows

  1. The instructions below are for connecting to b) - VT Traffic over SSL VPN, and the procedure is the same for connecting to the other connection profile.
  2. If you have not yet installed Ivanti, follow the instructions above at Downloading and Installing Ivanti Secure Access on Windows.
  3. If you do not know which connection profile to use, we recommend using b)- VT Traffic over SSL VPN. For more information, see the Which Connection Profile do I use? section of Remote Access VPN Frequently Asked Questions.
  4. In the Windows notification area in the lower-right of the screen, click Ivanti Secure Access.
  5. Click b) - VT Traffic over SSL VPN.
  6. Click Connect.

    Image demonstrating the above instruction(s).

  7. Click Proceed.
  8. Type your credentials.
    1. In the PID text box, type your VT Username, which is the first part of your @vt.edu email address.
    2. In the Network Password: text box, type your network password.
    3. Click Connect.
  9. Complete 2-factor authentication. 
    (If your second factor device is unavailable or broken, see Lost, Forgot, Broke, or Unavailable 2-Factor Device.)
    • To use push notification:
      1. In the text box, type: push
        (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
      2. Click Connect.
      3. When the push notification appears, accept the Duo push notification. 
        (If the push notification does not appear, see Duo Mobile App Errors, Problems, and Connection Issues / Duo Push Not Received.)
      4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
    • To use SMS text message:
      1. In the text box, type: sms1
        (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
      2. Click Connect.
      3. You will see an error message saying: "Credentials were invalid. Please try again." This is normal.
      4. You will receive an SMS text message that starts with "SMS passcodes:" to your primary mobile phone. Open that text message. The text message will contain 10 different passcodes that are each 6-digits long.
      5. In the text box, type one of the passcodes from the SMS text message.
      6. Click Connect.
      7. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
    • To use a voice phone call:
      1. In the text box, type: phone
        (This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
      2. Click Connect.
      3. The primary telephone number associated with your Duo account will ring. Answer the telephone.
      4. Press one of the number keys on the phone to confirm the authentication.
      5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
    • To use a Yubikey:
      1. The Yubikey must be previously registered with Duo as AES. U2F tokens will not work. For instructions, see Enrolling a YubiKey as AES/OTP to Use in Any Browser.
      2. Click in the text box to place your cursor there.
      3. Tap your YubiKey. The passcode will be generated and submitted by the YubiKey for you.
      4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
    • To use a 6-digit numeric passcode from the Duo mobile app:
      1. Start the Duo mobile app.
      2. In the Duo mobile app, tap the key.
      3. In the text box, type the 6-digit numeric passcode.
      4. Click Connect.
      5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
    • To use a 6-digit numeric passcode from a D-100 token or a software token:
      1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
      2. In the text box, type the 6-digit numeric passcode.
      3. Click Connect.
      4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
  10. If prompted about an upgrade to Ivanti:
    1. Click Upgrade.
    2. In the user account control window, click Yes. Ivanti will download and install the upgraded version, restart, and you will be reconnected to the remote access - VPN.
  11. When you are finished using the remote access VPN, disconnect from it. To do this:
    1. In the Windows notification area in the lower-right of the screen, click Ivanti Secure Access.
    2. Click b) - VT Traffic over SSL VPN.
    3. Click Disconnect.

      Image demonstrating the above instruction(s).

  12. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions before contacting 4Help by clicking Get Help at the top of this page.

Top of page