Introduction

Top of page

Contents

• Related Links
• Eligibility Requirements
• Supported Platforms
• 2-Factor Authentication
• Connection Options
• Instructions
  
  • Android
  • iOS (iPhone, iPad)

Top of page

Related Links

• Downloading, Installing, and Connecting to Pulse Secure Remote Access VPN in Windows
• Downloading, Installing, and Connecting to Pulse Secure Remote Access VPN in Mac OS 12.6.6 or later
• Downloading, Installing, and Connecting to Pulse Secure Remote Access VPN in Linux
• Remote Access VPN Frequently Asked Questions

Top of page

Eligibility Requirements

• All current Virginia Tech faculty, staff, and students are eligible to access Remote Access VPN.
• Remote Access VPN is a subscription-based, bundled service with the Virginia Tech wireless network service or the Virginia Tech wired ethernet service. You can verify your subscription by following the instructions at Registering Online for Wireless LAN Service.
• You may use either Virginia Tech provided devices or personally owned devices to connect to Remote Access VPN, as long as the devices meet the minimum system and password requirements. 
• You must have access to an administrator account on the device. If you have a device owned by Virginia Tech and do not have that access, contact your Network Liaison or contact 4Help on the 4Help portal by clicking Get Help.

Top of page

Supported Platforms

For security reasons, we ask users to upgrade their devices to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems and devices that are no longer supported by the manufacturer. 

Top of page

2-Factor Authentication

The Virginia Tech Remote Access VPN service requires 2-factor authentication. For more information, see Enrolling, Adding, Managing, or Removing a Duo 2FA Device.

Top of page

Connection Options

Generally, a) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the Which Connection Profile Do I Use? section of Remote Access VPN Frequently Asked Questions.

Top of page

Instructions

Download Ivanti Secure Access Client

• Android:
  
  
  1. Download and install the Ivanti Secure Access Client app.
     
     
     
     
     1. On your device, in the Google Play, search for Ivanti Secure Access Client.
     2. Tap the icon corresponding to the Ivanti Secure Access Client app that is appropriate for your device.
     3. Tap Install.
     4. If prompted to give permissions to the app, after reading the permissions, tap Accept.
     5. If prompted to update apps automatically, tap the button that corresponds to your choice.
  2. When the installation is complete, start the Ivanti Secure Access Client app.
     
     
• Apple iOS:
  
  
  1. Download and install the Ivanti Secure Access Client app.
     1. In the Apple App Store, search for Ivanti Secure Access Client.
     2. In the search results, tap Ivanti Secure Access Client.
     3. If available, tap Get.
     4. Tap Install.
     5. If prompted, type your Apple password and tap OK.
  2. To start client, when the installation is complete, tap Open.

Top of page

Setup SSL VPN for Android and iOS

1. Verify that you are registered to use the Remote Access VPN service by following the instructions at see Registering Online for eduroam Wireless LAN Service.
2. If you have not already done so, enroll in 2-factor authentication by following the instructions at Enrolling, Adding, Managing, or Removing a Duo 2FA Device.
3. Add the connection:
   
   • a) - VT Traffic over SSL VPN (preferred):
     1. If this is the first connection you are adding to the VPN client:
        
        1. In the URL text box, type: https://vpn.nis.vt.edu/vttraffic
           
        2. Tap Connect.
        3. In the Connection Name text box, type: a) - VT Traffic over SSL VPN
        4. Verify that Authentication Type is set to Password.
        5. Tap Add.
     2. If you have an existing connections in the VPN client:
        
        1. On the Connections screen, in the center-right corner, tap the plus sign (+).
        2. In the URL text box, type: https://vpn.nis.vt.edu/vttraffic and click Submit.
        3. In the Connection Name text box, type: a) - VT Traffic over SSL VPN
        4. Verify that Authentication Type is set to Password.
        5. Tap Add.
   • b) - VT Traffic over SSL VPN:
     1. If this is the first connection you are adding to the VPN client:
        
        1. In the URL text box, type: https://vpn.nis.vt.edu/alltraffic
           
        2. Tap Connect.
        3. In the Connection Name text box, type: b) - All Traffic over SSL VPN
        4. Verify that Authentication Type is set to Password.
        5. Tap Add.
     2. If you have an existing connections in the VPN client:
        
        1. On the Connections screen, in the center-right corner, tap the plus sign (+).
        2. In the URL text box, type: https://vpn.nis.vt.edu/alltraffic and click Submit.
        3. In the Connection Name text box, type: b) - All Traffic over SSL VPN
        4. Verify that Authentication Type is set to Password.
        5. Tap Add.
           
            
   •  
4. Connect and enter your credentials.
   
   1. 1. One the VPN client's main screen click on a) - All Traffic over SSL VPN (preferred) or b) - All Traffic over SSL VPN, then tap Connect.
      2. In the Username text box, type your VT PID, which is the first part of your @vt.edu email address.
      3. In the password text box, type your PID password.
      4. Tap Login.
         
         
         
         
      5. Complete authentication with your 2-factor device. 
         
         • If your second factor device is unavailable or broken, see the How Do I Login without My Phone or Any 2-Factor Device if It Is Lost, Forgotten, Broken or Unavailable? section of Frequently Asked Questions about Duo 2-Factor Authentication.
         • If you have never enrolled in 2-factor authentication, you must do so before connecting to the VPN. For instructions, see Enrolling, Adding, Managing, or Removing a Duo 2FA Device.
           
           
           
           
         • If you wish to change the default 2-Factor method, click on the Other options link.  The following list is the options available for 2-Factor Authentication:
           
           
         • To use push notification:
           
           1. Select Duo Push from the Other options list.
              (This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, select the last item from the Other options list, Manage devices.)
              
           2. When the push notification appears, accept the Duo push notification.
              1. If the push notification does not appear, see Duo Mobile App Errors, Problems, and Connection Issues / Duo Push Not Received.
           3. When the connection is complete, the authentication window will automatically close, and the Ivanti app will update to show as connected.
         • To use SMS text message:
           
           1. Select Text message passcode from the Other options list.
              (This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, select the last item from the Other options list, Manage devices.)
              
           2. You will receive an SMS text message that starts with "VT DUO: SMS passcodes:" to your primary mobile phone. Open that text message which will contain a seven digit passcode.
           3. In the "Passcode" text box, type in the passcode from the SMS text message.
           4. Click Verify.
           5. When the connection is complete, the authentication window will automatically close, and the Ivanti app will update to show as connected.
         • To use a voice phone call:
           
           1. Select Phone call from the Other options list.
              (This will call the first voice-capable device that is enrolled in your Duo account. To send the phone call to a different device, select the last item from the Other options list, Manage devices.)
           2. The primary telephone number associated with your Duo account will ring. Answer the telephone.
           3. Press one of the number keys on the phone to confirm the authentication.
           4. When the connection is complete, the authentication window will automatically close, and the Ivanti app will update to show as connected.
         • To use a 6-digit numeric passcode from the Duo mobile app:
           
           1. Start the Duo mobile app.
           2. In the Duo mobile app, tap Show to the right of the hidden Passcode.
           3. On your computer select Duo Mobile passcode from the Other options list.
           4. In the Passcode text box, type the 6-digit numeric passcode from the Duo mobile app.
           5. Click Verify.
           6. When the connection is complete, the authentication window will automatically close, and the Ivanti app will update to show as connected.
         • To use a 6-digit numeric passcode from a D-100 token or a software token:
           
           1. Use the D-100 token or the smartphone application to generate a 6-digit numeric code.
           2. On your computer select Duo Mobile passcode from the Other options list.
           3. In the Passcode text box, type the 6-digit D-100 numeric passcode.
           4. Click Verify.
           5. When the connection is complete, the authentication window will automatically close, and the Ivanti app will update to show as connected.
              
              
5. If this is the first time connecting on your device you will receive the following prompt:
   
   
   
   Click Yes, this is my device.
6. When you are finished using the remote access - VPN, disconnect from it. To do this:
   
   1. Open the Ivanti Secure Access Client app.
   2. Tap on the active VPN connection name.
   3. On the Connection Details screen, click the Disconnect button at the bottom to end the VPN session.
      
      

Top of page