Connect to IU's SSL VPN for individuals and groups from a Windows or OS X workstation

On this page:


IU's SSL VPN is for off-campus use only; it will not allow you to establish a connection if your device is connected (via wireless or Ethernet) to an IU network.

To connect to Indiana University's SSL VPN for individuals and groups from your Windows or OS X workstation, download and install the Pulse Secure SSL VPN client from IUware. After installation, you can use the Pulse Secure client to connect directly to IU's SSL VPN without having to open and log in through a web browser. Pulse Secure is the preferred application for connecting to IU's SSL VPN; it replaces Junos Pulse and Network Connect, two VPN clients you may have used previously.

Download the software

IU students, faculty, and staff may download the Pulse Secure SSL VPN client from IUware:

By default, OS X may only allow you to install applications from verified sources. Therefore, when you attempt to install Pulse Secure, you may see an error similar to "ps-pulse-mac.dmg can't be opened because it is from an unidentified developer." To bypass this error (for this application only) and manually install Pulse Secure:

  1. While holding control, click the application's icon, and then select Open from the drop-down menu that appears.
  2. In the new window, click Open to manually launch Pulse Secure.

Configure the VPN connection

  1. Open the Pulse Secure client to configure it for your first use.
    • Windows: The Pulse Secure icon ( Icon for Pulse Secure SSL VPN client) will be available in your task bar.
    • Mac: Pulse Secure will be installed in your Applications folder. (If you have trouble finding a Pulse Secure folder, check for one named Junos Pulse Secure.)

      You also should have the option to launch the application from your menu bar by clicking the Pulse Secure icon ( Icon for Pulse Secure SSL VPN client).

  2. After launching Pulse Secure, create a new connection by clicking + (the plus sign).
  3. In the "Add Connection" box:
  4. Click Add.

Connect to IU's SSL VPN

As of February 2, 2017, connecting to IU's SSL VPN requires Two-Step Login (Duo) for everyone at IU, regardless of your university status.
The Pulse Secure SSL VPN client does not support U2F tokens for authentication using Two-Step Login (Duo). For recommended device options, see Two-Step Login (Duo) device recommendations.

Once you've created the connection, you can initiate it from the Pulse Secure icon in your task bar (Windows) or menu bar (Mac):

  1. To initiate the connection:
    • Windows: From the task bar, right-click the Pulse Secure icon, and then choose Connect.
    • Mac: Click the Pulse Secure icon, choose the SSL VPN profile you created, and then click Connect.
  2. Enter your IU username and passphrase; click Connect.
  3. In the "Secondary Password" field, enter one of the following:
    • A passcode (e.g., 123456): Generated by Duo Mobile, an SMS text, or a single-button hardware token
    • push: Sends a push login request to the Duo Mobile app on your primary smartphone or tablet
    • phone: Calls your primary phone number (e.g., smartphone, landline)
    • sms: Sends a new SMS passcode to your primary device; once you receive the passcode via SMS, enter it into the "Secondary Password" field.
      Entering sms will cause the initial login to fail with a "Credentials were invalid. Please try again." error message. However, you also will receive a text message with a passcode to enter in the "Secondary Password" field.
      If you have more than one device of a certain type registered (e.g., a second smartphone or tablet), you can add a number to the end of your secondary password to direct login requests to a particular device (e.g., push2 will send a login request to your second phone; phone3 will call your third phone).
  4. Click Connect.

To disconnect:

  • Windows: Right-click the icon, and then select Disconnect.
  • Mac: Click the Pulse Secure icon, and then, from the SSN VPN profile menu, select Disconnect.
You can connect a maximum of two devices at a time to IU's SSL VPN. If you try to connect a third device while you already have a connection running on two other devices, you'll see a prompt asking whether you want to maintain the existing connections and cancel the new connection request, or break one of the existing connections and establish a new connection. Exceptions are provided for group accounts in certain situations.

Qualified and compatible platforms

On January 12, 2016, Microsoft ended support for Internet Explorer versions prior to version 11. UITS strongly recommends that you upgrade to a new operating system if your current system does not support Internet Explorer 11.

Pulse Secure qualified platforms

Platform Operating system Browsers and Java environment
Windows Windows 10 Enterprise, 64-bit
Windows 8.1 Enterprise, 64-bit
Windows 8.1, 32-bit
Windows 8 Enterprise, 64-bit
Windows 7 SP1 Enterprise, 64-bit
Windows Embedded Standard 7, 32- and 64-bit
Internet Explorer 9, 10, 11
Firefox ESR
OS X Max OS X 10.11 , 10.10 and 10.9, 64-bit Safari 8.x and 7.x

Pulse Secure compatible platforms

Platform Operating system Browsers and Java environment
Windows* Windows 10 Enterprise, 32-bit
Windows 10 (non-Enterprise), 32- and 64-bit
Windows 8.1 Enterprise, 32-bit
Windows 8, 32- and 64-bit
Windows 8 Enterprise, 32-bit
Windows 8 Pro, 32- and 64-bit
Windows 7 Ultimate, 32-bit or 64-bit
Windows 7 Professional, 32-bit or 64-bit
Windows 7 Home Basic, 32-bit or 64-bit
Windows 7 Home Premium, 32-bit or 64-bit
Internet Explorer 8.0
Internet Explorer 7.0
Firefox 3.0 and later
Google Chrome**
OS X Mac OS X 10.8 (64-bit)
Safari 6.0 and 6.1, Oracle JRE 7 and 8

* Pulse Secure is not supported on Windows Server or Linux platforms.

** Google Chrome is compatible, rather than qualified, because Google supports a rapid release cycle rather than an Extended Support Release (ESR) model.

This is document aygt in the Knowledge Base.
Last modified on 2018-10-10 18:17:03.

Contact us

For help or to comment, email the UITS Support Center.