Indiana University Indiana University Indiana University

Connect to IU's SSL VPN using Pulse Secure for Windows or macOS

Important:

When attempting to connect to the IU VPN during times of heavy use, you may receive the Error 1324 message: "Too many concurrent users. Try the operation again at a later time". If this happens, you can add an additional IU VPN connection, and connect to that instead.

To do so, follow the instructions for your device's operating system, naming the connection something like "IU VPN1" to distinguish it from your initial VPN connection. For the server name or address, enter https://vpn1.iu.edu.

You may receive a message about an untrusted server/security certificate. This is a known issue, and you can proceed with the connection.

On this page:

Overview

To connect to Indiana University's SSL VPN for individuals from your Windows or macOS workstation, use the Pulse Secure SSL VPN client available from IUware. Pulse Secure lets you connect directly to IU's SSL VPN without having to log in through a web browser. It replaces Junos Pulse and Network Connect, two VPN clients you may have used previously.

Notes:
Important:
  • Use the IU VPN only under one of these conditions:
    • If you are trying to access a service you can't get to another way.
    • If you do not trust the internet connection you are using.
    • If your IT Pro has told you that you need to use it.

    Generally, you won't need to use the VPN if you are a student. For example, you don't need a VPN connection to:

    • Use learning tools, such as Canvas, Zoom, or Kaltura.
    • Read your IU email over the web.
    • Work with your files in Box.
  • If you have difficulty with the VPN: Try using IUanyWare (doesn't require a VPN connection).

    For example, you can use IUanyWare's Remote Desktop Connection app to remote into a device on campus. Additionally, IUanyWare's Chrome browser allows you to access sites as if you were on campus.

    In IUanyWare, search the available apps to find what may be helpful.

  • On the IU network: You cannot connect to the VPN, as it is for off-campus use only.

    If you receive a 1329 error when attempting to connect to the VPN, try connecting using a non-eduroam or non-IU Secure connection.

  • To ensure accountability of network communication, the University Information Policy Office prohibits group accounts from connecting to IU's SSL VPN. To make a VPN connection, you must log in using your personal IU username and passphrase.
  • You can connect a maximum of two devices at a time to IU's SSL VPN. If you try to connect a third device while you already have a connection running on two other devices, you'll see a prompt asking whether you want to maintain the existing connections and cancel the new connection request, or break one of the existing connections and establish a new connection.

Install Pulse Secure

IU students, faculty, and staff can download Pulse Secure from IUware:

By default, macOS may let you install applications from verified sources only; consequently, when you try to install Pulse Secure, you may see an error similar to "ps-pulse-mac.dmg can't be opened because it is from an unidentified developer." To bypass this error (for this application only) and manually install Pulse Secure:

  1. While holding control, click the application's icon, and then, from the drop-down that appears, select Open.
  2. In the new window, click Open to manually launch Pulse Secure.
Note:
Pulse Secure does not support USB security keys for authentication using Two-Step Login (Duo). For alternative device options, see Two-Step Login (Duo) device recommendations.

Configure the connection

  1. Open Pulse Secure to configure it for your first use:
    • Windows: In your task bar, click the Pulse Secure icon (Icon for Pulse Secure SSL VPN client).
    • macOS: In the menu bar, click the Pulse Secure icon (Icon for Pulse Secure SSL VPN client). Alternatively, find and click the Pulse Secure icon in your Applications folder. (If you have trouble finding a Pulse Secure folder, check for one named Junos Pulse Secure.)
  2. To add a new connection, click + (the plus sign).
  3. In the "Add Connection" box:
    • Type: Make sure Policy Secure (UAC) or Connect Secure (VPN) is selected.
    • Name: Enter a name (for example, IU VPN) to distinguish this connection from other VPN connections you may configure (for example, to the Groups or HSN VPN; see the note below).
    • Server URL: Enter https://vpn.iu.edu.

      Dialog box to specify a Pulse Secure connection

  4. Click Add.
Note:

If you use the IU Groups VPN or Health Sciences Network (HSN) VPN, add an additional connection using the appropriate URL:

  • Groups VPN: https://vpn.iu.edu/groups
  • HSN VPN: https://vpn.iu.edu/hsn

For more about these VPNs, see:

Connect and disconnect

To connect to the IU SSL VPN:

  1. Open Pulse Secure:
    • Windows: From the task bar, right-click the Pulse Secure icon, and then choose Connect.
    • macOS: From the menu bar, click the Pulse Secure icon, choose the SSL VPN profile you created, and then click Connect.
  2. Enter your IU username and passphrase, and then click Connect.
  3. In the "Secondary Password" field, enter one of the following:
    • A passcode (for example, 123456): Generated by Duo Mobile, an SMS text, or a single-button hardware token
    • push: Sends a push login request to the Duo Mobile app on your primary smartphone or tablet
    • phone: Calls your primary phone number (whether mobile phone or landline)
    • sms: Sends a new SMS passcode to your primary device; once you receive the passcode via SMS, enter it into the "Secondary Password" field.
      Important:
      Entering sms will cause the initial login to fail with a "Credentials were invalid. Please try again." error message. However, you also will receive a text message with a passcode to enter in the "Secondary Password" field.
      Note:
      If you have more than one device of a certain type registered (such as a second smartphone or tablet), you can add a number to the end of your secondary password to direct login requests to a particular device (for example, push2 will send a login request to your second phone; phone3 will call your third phone).
  4. Click Connect.

When the VPN connection is established, you can exit Pulse Secure and access IU network resources that require a VPN connection. To disconnect from the VPN:

  • Windows: Right-click the Pulse Secure icon, and then select Disconnect.
  • macOS: Click the Pulse Secure icon, and then, from the SSN VPN profile menu, select Disconnect.

Qualified and compatible platforms

To ensure that you can connect to the IU VPN, verify that you are running the latest version of Pulse Secure available on IUware. For operating system requirements and recommendations, see the "Pulse Secure Desktop Client Supported Platforms Guide" available at Pulse Secure Techpubs.

Related documents

Connect to IU's SSL VPN with Pulse Secure on an iOS device Connect to IU's SSL VPN with Pulse Secure from an Android mobile device Connect to IU's SSL VPN using OpenConnect on a 64-bit Linux workstation

This is document aygt in the Knowledge Base.
Last modified on 2020-03-28 18:10:28.

Contact us

For help or to comment, email the UITS Support Center.