Connecting to IU's SSL VPN for individuals and groups from a Windows or OS X workstation

Note:
IU's SSL VPN will not allow you to connect from on campus; it is for off-campus use.

To connect to Indiana University's SSL VPN for individuals and groups from your Windows or OS X workstation, download and install the Pulse Secure SSL VPN client from IUware. After installation, you can use the Pulse Secure client to connect directly to IU's SSL VPN without having to open and log in through a web browser. Pulse Secure is the preferred application for connecting to IU's SSL VPN; it replaces Junos Pulse and Network Connect, two VPN clients you may have used previously.

On this page:


Downloading the software

IU students, faculty, and staff may download the Pulse Secure SSL VPN client from IUware:

By default, OS X may only allow you to install applications from verified sources. Therefore, when you attempt to install Pulse Secure, you may see an error similar to "ps-pulse-mac.dmg can't be opened because it is from an unidentified developer." To bypass this error (for this application only) and manually install Pulse Secure:

  1. While holding control, click the application's icon, and then select Open from the drop-down menu that appears.
  2. In the new window, click Open to manually launch Pulse Secure.

Configuring the VPN connection

  1. Open the Pulse Secure client to configure it for your first use.
    • Windows: The Pulse Secure icon (Icon for Pulse Secure SSL VPN client) will be available in your task bar.
    • Mac: Pulse Secure will be installed in your Applications folder. (If you have trouble finding a Pulse Secure folder, check for one named Junos Pulse Secure.)
    • You also should have the option to launch the application from your menu bar by clicking the Pulse Secure icon (Icon for Pulse Secure SSL VPN client).

  2. After launching Pulse Secure, create a new connection by clicking + (the plus sign).
  3. In the dialog box that appears, leave the type as Policy Secure (UAC) or Connect Secure (VPN), and name the connection (e.g., IU SSL VPN). Enter the URL for IU's SSL VPN (https://vpn.iu.edu), and then click Add.
    Dialog box to specify a Pulse Secure connection

    For groups (and other contexts):

    • If you connect to different VPN contexts (e.g., HSN at https://vpn.iu.edu/hsn or Groups at https://vpn.iu.edu/groups), create additional Pulse Secure profiles for them by entering the appropriate URLs.
    • If you need a new group SSL VPN, email a request including your ADS group and the number of IPs needed.

Connecting to IU's SSL VPN

Important:
As of February 2, 2017, connecting to IU's SSL VPN requires Two-Step Login (Duo) for everyone at IU, regardless of your university status.
Note:
The Pulse Secure SSL VPN client does not support U2F tokens for authentication using Two-Step Login (Duo). For recommended device options, see Two-Step Login (Duo) device recommendations.

Once you've created the connection, you can initiate it from the Pulse Secure icon in your task bar (Windows) or menu bar (Mac):

  1. To initiate the connection:
    • Windows: From the task bar, right-click the Pulse Secure icon, and then choose Connect.
    • Mac: Click the Pulse Secure icon, choose the SSL VPN profile you created, and then click Connect.
  2. Enter your IU username and passphrase; click Connect.
  3. In the "Secondary Password" field, enter one of the following:
    • A passcode (e.g., 123456): Generated by Duo Mobile, an SMS text, or a single-button hardware token
    • push: Sends a push login request to the Duo Mobile app on your primary smartphone or tablet
    • phone: Calls your primary phone number (e.g., smartphone, landline)
    • sms: Sends a new SMS passcode to your primary device; once you receive the passcode via SMS, enter it into the "Secondary Password" field.
      Important:
      Entering sms will cause the initial login to fail. You'll see "Credentials were invalid. Please try again." However, you should have a text message with a passcode; enter it in the "Secondary Password:" field.
    Note:
    You can add a number at the end of each type if you have more than one device of that type registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.
  4. Click Connect.

To disconnect:

  • Windows: Right-click the icon, and then select Disconnect.
  • Mac: Click the Pulse Secure icon, and then, from the SSN VPN profile menu, select Disconnect.
Note:
You can connect only a maximum of two devices at a time to IU's SSL VPN. If you try to connect a third device while you already have a connection running on two other devices, you'll see a prompt asking whether you want to maintain the existing connections and cancel the new connection request, or break one of the existing connections and establish a new connection. Exceptions are provided for group accounts in certain situations.

Qualified and compatible platforms

Note:
On January 12, 2016, Microsoft ended support for Internet Explorer versions prior to version 11. UITS strongly recommends that you upgrade to a new operating system if your current system does not support Internet Explorer 11.

Pulse Secure qualified platforms

Platform Operating system Browsers and Java environment
Windows Windows 10 Enterprise, 64-bit
Windows 8.1 Enterprise, 64-bit
Windows 8.1, 32-bit
Windows 8 Enterprise, 64-bit
Windows 7 SP1 Enterprise, 64-bit
Windows Embedded Standard 7, 32- and 64-bit
Internet Explorer 9, 10, 11
Firefox ESR
OS X Max OS X 10.11 , 10.10 and 10.9, 64-bit Safari 8.x and 7.x

Pulse Secure compatible platforms

Platform Operating system Browsers and Java environment
Windows* Windows 10 Enterprise, 32-bit
Windows 10 (non-Enterprise), 32- and 64-bit
Windows 8.1 Enterprise, 32-bit
Windows 8, 32- and 64-bit
Windows 8 Enterprise, 32-bit
Windows 8 Pro, 32- and 64-bit
Windows 7 Ultimate, 32-bit or 64-bit
Windows 7 Professional, 32-bit or 64-bit
Windows 7 Home Basic, 32-bit or 64-bit
Windows 7 Home Premium, 32-bit or 64-bit
Internet Explorer 8.0
Internet Explorer 7.0
Firefox 3.0 and later
Google Chrome**
OS X Mac OS X 10.8 (64-bit)
Safari 6.0 and 6.1, Oracle JRE 7 and 8

* Pulse Secure is not supported on Windows Server or Linux platforms.

** Google Chrome is compatible, rather than qualified, because Google supports a rapid release cycle rather than an Extended Support Release (ESR) model.

This is document aygt in the Knowledge Base.
Last modified on 2017-03-01 15:00:16.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.