Introduction

Secure Sockets Layer (SSL) virtual private network (VPN) provides secure remote access from one machine to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as "Remote Access VPN”, is a subscription-based service that allows a user to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption to other services that are being accessed over VPN but does encrypt the traffic between your machine and the VPN device. 

Top of page

Contents

• Related Links
• Eligibility Requirements
• Supported Platforms
• Network Requirements: Enable IPv6
• 2-Factor Authentication
• Connection Options
• Instructions
  • Downloading and Installing Ivanti Secure Access in Mac OS
  • Connecting to VPN in Mac OS

Top of page

Related Links

• Downloading, Installing, and Connecting to Remote Access VPN in Windows
• Connecting to Remote Access VPN in Android or iOS
• Downloading, Installing, and Connecting to Remote Access VPN in Linux
• Remote Access VPN Frequently Asked Questions

Top of page

Eligibility Requirements

• All current Virginia Tech faculty, staff, and students are eligible to access Remote Access VPN.
• Remote Access VPN is a subscription based, bundled service with the Virginia Tech wireless network service or the Virginia Tech wired Ethernet service. You can verify your subscription by following the instructions at Registering Online for Wireless LAN Service.
• You may use either Virginia Tech provided computers or personally owned computers to connect to Remote Access VPN, as long as they meet the minimum system and password requirements. 
• You must have access to an administrator account on the computer. If you have a device owned by Virginia Tech and do not have that access, contact your Network Liaison or contact 4Help at http://4help.vt.edu by clicking Get Help.

Top of page

Supported Platforms

We do not support Mac OS version 12.6.6 and below.

See Ivanti Secure Access Desktop Client Supported Platforms Guide for a list of supported operating systems and web browsers. 

For security reasons, we ask users to upgrade their machines to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems that are no longer supported by the operating system manufacturer. 

Top of page

Network Requirements: Enable IPv6

To access Virginia Tech Remote Access VPN service, you must enable both IPv4 and IPv6 stacks on your network adapter. IPv6 requirement is not dependent on your ISP's ability to provide you with an IPv6 address, this is because the VPN allocates you an IPv6 address and does need the IPv6 stack to be enabled on your network adapter. To enable IPv6, follow the instructions in the Authentication successful but following error is displayed: "Connection Error Failed to setup virtual adapter. (Error:1205). (restart your system and try again)." section of Remote Access VPN Frequently Asked Questions.

Top of page

2-Factor Authentication

The Virginia Tech Remote Access VPN service requires 2-factor authentication. For more information, see Using 2-Factor Authentication.

Top of page

Connection Options

Generally, a) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the Which Connection Profile Do I Use? section of Remote Access VPN Frequently Asked Questions.

Top of page

Instructions

Downloading and Installing Ivanti Secure Access in Mac OS

1. Verify that your computer is running Mac OS 12.6.6 Monterey or later. For instructions, see Find out which macOS your Mac is using.
2. Log on to your computer with an account that has administrator privileges.
3. Verify that you are registered to use the Remote Access VPN service. For instructions, see the To Verify Registration section of Registering Online for Wireless LAN Service.
4. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling, Adding, Managing, or Removing a Duo 2FA Device.
5. If Ivanti is currently installed, uninstall Ivanti.
   
   1. Exit Ivanti.
      
      1. If available, at the very top of the screen, in the Mac OS top menu bar, to the left of the time, click  Ivanti.
      2. Click Exit.
      3. If prompted that exiting may disable some connections, click OK.
   2. Start Finder.
   3. From the Go drop-down, click Applications.
   4. Right-click Ivanti Secure Access.
   5. Click Move to Trash.
   6. If you receive an error message that Ivanit is running, exit Ivanti by following these instructions from the beginning again.
   7. In the authentication window:
      
      1. In the Username: or Name: text box, type the name of a administrator computer account.
      2. In the Password: text box, type the password of that account.
      3. Click OK.
   8. When prompted to save configuration, click No.
   9. When prompted that Ivanti has been uninstalled, click OK.
6. To avoid confusion, delete all VPN connections.
   
   1. In the top-left corner of the screen, click the Apple.
   2. Click System Settings.
   3. Click Network.
   4. In the left pane, for each VPN connection listed:
      
      1. Click the VPN connection.
      2. At the bottom of the left pane, click minus (-).
   5. Click Apply.
7. Download the Ivanti Secure Access installer by clicking the following link: vtVpnSetup.dmg.
8. When prompted, save the installer file to your computer.
9. After the download is complete, in Finder, double-click vtVpnSetup.dmg to launch the installer.
10. If prompted about opening an app from an unidentified developer:
    
    
    
    
    1. From the Apple drop-down, click System Settings.
    2. Click Privacy & Security.
    3. Near the bottom of the window, click Open Anyway.
       
       
       
       
    4. If prompted about are you sure you want to open the app, click Open.
       
       
       
       
11. If prompted about an invalid certificate, click Continue.
12. A new Window should open, double-click on the file vtVpnSetup.pkg to begin the installation. 
13. Click Continue.
    
    
    
    
14. Click Install.
    
    
    
    
15. When prompted for authentication, either enter the username and password of an administrative computer account and click Install Software, or use Touch ID.
16. When the installation is complete, click Close. Ivanti will automatically start and minimize to the top menu bar.
17. If prompted about moving the installer to the trash, click Keep.
18. Follow the instructions below for Connecting to VPN in Mac OS
19. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions before contacting 4Help by clicking Get Help at the top of this page.

Top of page

Connecting to VPN in Mac OS

1. The instructions below are for connecting to a) - VT Traffic over SSL VPN, and the procedure is the same for connecting to the other connection profile.
2. If you have not yet installed Ivanti, follow the instructions above at Downloading and Installing Ivanti Secure Access on Mac OS. 
3. If you do not know which connection profile to use, we recommend using a)- VT Traffic over SSL VPN. For more information, see the Which Connection Profile do I use? section of Remote Access VPN Frequently Asked Questions.
4. In the Mac OS top menu bar, click Ivanti Secure Access.
5. Click a) - VT Traffic over SSL VPN.
6. Click Connect.
   
   
   
   
7. In the browser window that opens type your credentials.
   
   1. In the Username text box, type your VT PID, which is the first part of your @vt.edu email address.
   2. In the Password text box, type your PID password.
   3. Click Login.
      
      
      
      
8. Complete 2-factor authentication. 
   (If your second factor device is unavailable or broken, see Lost, Forgot, Broke, or Unavailable 2-Factor Device.)
   
   
   
   
9. The screen will default to your preferred 2-factor method.  If you prefer to use another method click on the Other options link.  The following list is the options available for 2-factor authentication 
   
   
   • To use push notification:
     
     1. Select Duo Push from the Other options list.
        (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, select the last item from the Other options list, Manage devices.)
        
     2. When the push notification appears, accept the Duo push notification.
        1. If the push notification does not appear, see Duo Mobile App Errors, Problems, and Connection Issues / Duo Push Not Received.
     3. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use SMS text message:
     
     1. Select Text message passcode from the Other options list.
        (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, select the last item from the Other options list, Manage devices.)
        
     2. You will receive an SMS text message that starts with "VT DUO: SMS passcodes:" to your primary mobile phone. Open that text message which will contain a seven digit passcode.
     3. In the "Passcode" text box, type in the passcode from the SMS text message.
     4. Click Verify.
     5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a voice phone call:
     
     1. Select Phone call from the Other options list.
        (This will call the first voice-capable device that is enrolled in your Duo account. To send the phone call to a different device, select the last item from the Other options list, Manage devices.)
     2. The primary telephone number associated with your Duo account will ring. Answer the telephone.
     3. Press one of the number keys on the phone to confirm the authentication.
     4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a Yubikey:
     
     1. The Yubikey must be previously registered with Duo as AES. U2F tokens will not work. For instructions, see Enrolling a YubiKey as AES/OTP to Use in Any Browser.
     2. Select Security key from the Other options list.
     3. When prompted to "Touch your security key" tap your YubiKey. The passcode will be automatically generated and submitted by the YubiKey for you.
     4. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a 6-digit numeric passcode from the Duo mobile app:
     
     1. Start the Duo mobile app.
     2. In the Duo mobile app, tap Show to the right of the hidden Passcode.
     3. On your computer select Duo Mobile passcode from the Other options list.
     4. In the Passcode text box, type the 6-digit numeric passcode from the Duo mobile app.
     5. Click Verify.
     6. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
   • To use a 6-digit numeric passcode from a D-100 token or a software token:
     
     1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
     2. On your computer select Duo Mobile passcode from the Other options list.
     3. In the Passcode text box, type the 6-digit D-100 numeric passcode.
     4. Click Verify.
     5. When the connection is complete, the window will automatically close, and the Ivanti icon will have a green arrow.
        
        
10. If this is the first time connecting on your machine you will receive the following prompt: 
    
    
    
    
11. If the computer is public or shared between multiple users select "No, other people use this device" so that your VPN login information is not saved.  If you are the only user of the computer select "Yes, this is my device".
    
    
12. If prompted about an upgrade to Ivanti:
    
    1. Click Upgrade.
    2. When prompted for authentication, either enter the username and password of an administrative computer account and click OK, or use Touch ID.
    3. Ivanti will download and install the upgraded version, restart, and you will be reconnected to the remote access VPN.
13. When you are finished using the remote access VPN, disconnect from it. To do this:
    
    1. In the Mac OS top menu bar, click Ivanti.
    2. Click a) - VT Traffic over SSL VPN.
    3. Click Disconnect.
       
       
       
       
14. If you are experiencing any problems please review the Remote Access VPN Frequently Asked Questions before contacting 4Help by clicking Get Help at the top of this page.

Top of page