UMIACS - User contributions [en]

January 2025

2025-01-30T00:42:09Z

Jishjesu:

If you are viewing this page, then you are connected to the UMD GlobalProtect VPN or locally connected to a UMIACS network.

Access to publicly-routed UMIACS resources such as our [[GitLab]], [[OBJ | Object Store]], and [[Intranet]] page, as well as [[Main Page | this wiki]] and other UMIACS-hosted wikis, is now available for UMIACS users who have reset their UMIACS password in the last 48 hours.

Submission nodes for [[Nexus]] are now available for [[SSH]] connections. If you are connected via the UMD GlobalProtect VPN, you will need to multi-factor authenticate with UMIACS' [[Duo]] instance to be able to connect via SSH.

Outbound traffic from UMIACS networks is still limited. Updates will be provided when this is resolved.

If you have any questions or concerns, please [[HelpDesk | contact staff]].

Network/VPN/macOS

2024-12-12T01:49:52Z

Jishjesu: /* Connecting through the Ivanti Connect Secure client */

The UMIACS VPN is accessible through the Ivanti Connect Secure Client. Alternatively, you can establish a connection through a [https://vpn.umiacs.umd.edu/ web browser], but this may fail if you have an outdated version of Ivanti Connect Secure already installed.

==Prerequisites==
* macOS 13.x or higher as of the current version of the Ivanti Connect Secure Client
* A [[Accounts#UMIACS_Account | full UMIACS account]]
* Device enrolled with [[Duo | UMIACS Duo]] for multi-factor authentication
* An established network connection (wired or wireless)

== Connecting through the Ivanti Connect Secure client ==
#'''Download the client:'''
#:[https://obj.umiacs.umd.edu/ivanti-connectsecure/macOS/PulseSecure-macOS-22.7R4.dmg macOS Ivanti Connect Secure Client]
#:''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.''
#'''Open the client and click 'Add' (+) under the connection section.'''
#:[[Image:Ivanti client1.png|thumb|left|510px|[macOS] Click the 'Add' (+) button to create a new connection]] 
#'''In the 'Name' field, enter a descriptive name for this vpn Connection.'''
#'''In the 'Server URL' enter 'vpn.umiacs.umd.edu''''
#:[[Image:Ivanticonnection.png|thumb|left|510px|[macOS] Enter the name of the vpn server]] 
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:Ivanticlientmac5.png|thumb|left|510px|[macOS] Enter UMIACS Credentials]] 
#'''Complete the [[Network/VPN/MFA | MFA]] Verification Step. For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.
#:[[Image:SecondaryloginmacOS.png|thumb|left|510px|[macOS] Enter a secondary password.]] 
::The Ivanti VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the [[Network/VPN/MFA | MFA]] requirement. As a result, you will be prompted for credentials twice.

::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}

::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

If you encounter an error, please refer to the "Setup Security Requirement" section bellow.

==Checking VPN Status==
# In the top right hand corner, on your status bar, you should see an S icon in a black circle. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
#: [[Image:CheckingVPNstatus1.png|thumb|left|610px|[macOS] The top image is connected, the bottom image is not.]] 
# You can click this icon, as well, and it will show you the status of your connection.
#:[[Image:CheckingVPN2.png|thumb|left|610px|[macOS] The Pulse drop down menu.]] 
# If the icon is not in the status bar, you can find Pulse Secure in your Applications folder. There you will see a list of connections.

==Setup Security Requirement (Follow these steps if you encounter an error while connecting through the Ivanti Secure client) ==

# Click the Apple logo at the top left of your desktop
# Click '''System Settings'''
# Click '''Privacy & Security'''
# Scroll to the '''Security''' section and select '''App Store and identified developers'''
#* You will have to enter your credentials
# Click '''Next''' to the message "System Software From Developers "Pulse Secure LLC" was blocked from loading" if prompted.
# Click '''Allow''' to enable the extension.
# Close the '''System Settings''' window.

Network/VPN/Linux

2024-12-12T01:46:39Z

2024-09-07T13:24:08Z

Jishjesu: /* Connecting through the Pulse Secure client */

'''Please note that this tutorial assumes you already have a network connection established.'''
'''If you have a UMIACS account, you already have access.'''

The UMIACS VPN is accessible through the Pulse Secure Client.

== Connecting through the Pulse Secure client ==
#'''Download the client:'''
#:[[Media:Pulsesecure_22.7.R3_amd64.deb|64 bit Pulse Secure Client <tt>.deb</tt> for Debian-based Linux (e.g. Ubuntu)]]
#:[[Media:Pulsesecure-22.7-R3.x86_64.rpm|64 bit Pulse Secure Client <tt>.rpm</tt> for Fedora-based Linux (e.g. Red Hat)]]
#:''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.''
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
#'''Install the package with dependencies, providing your password for sudo when requested.'''
#:*For a Debian-based OS, run: <code>sudo dpkg -i <insert_filename_here>.deb</code>
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
#:*For a Fedora-based OS, run: <code>sudo rpm -i <insert_filename_here>.rpm</code>
#:[[Image:FedoraPulseInstall.png|thumb|center|500px|]]
# You will need to manually install the packages shown below before proceeding with the install:
#:*For a Debian-based OS, run: <code>sudo apt-get install libnss3-tools net-tools</code>
#:*For a Fedora-based OS, run: <code>sudo dnf install libbsd webkit2gtk3</code>
#'''Start the client.'''
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
#'''and click 'Add' (+) under the connection section.'''
#:[[Image:UbuntuPulseInterface3.png|thumb|center|500px|Click the 'Add' (+) button to create a new connection.]]
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu'.'''
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS credentials.]]
#'''When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>). For example, if you wish to push a notification to your device, type the word "push" into the secondary password box. '''
::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

==Checking VPN Status==
# Launch the Pulse Client GUI.
#:[[Image:UbuntuPulseDesktop.png|thumb|center|280px|]]
# Select the down arrow to show connection status.
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]

Network/VPN/Linux

2024-09-07T13:23:36Z

Jishjesu: /* Connecting through the Pulse Secure client */

'''Please note that this tutorial assumes you already have a network connection established.'''
'''If you have a UMIACS account, you already have access.'''

The UMIACS VPN is accessible through the Pulse Secure Client.

== Connecting through the Pulse Secure client ==
#'''Download the client:'''
#:[[Media:Pulsesecure_22.7.R3_amd64.deb|64 bit Pulse Secure Client <tt>.deb</tt> for Debian-based Linux (e.g. Ubuntu)]]
#:[[Media:Pulsesecure-22.7-R2.x86 64.rpm|64 bit Pulse Secure Client <tt>.rpm</tt> for Fedora-based Linux (e.g. Red Hat)]]
#:''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.''
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
#'''Install the package with dependencies, providing your password for sudo when requested.'''
#:*For a Debian-based OS, run: <code>sudo dpkg -i <insert_filename_here>.deb</code>
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
#:*For a Fedora-based OS, run: <code>sudo rpm -i <insert_filename_here>.rpm</code>
#:[[Image:FedoraPulseInstall.png|thumb|center|500px|]]
# You will need to manually install the packages shown below before proceeding with the install:
#:*For a Debian-based OS, run: <code>sudo apt-get install libnss3-tools net-tools</code>
#:*For a Fedora-based OS, run: <code>sudo dnf install libbsd webkit2gtk3</code>
#'''Start the client.'''
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
#'''and click 'Add' (+) under the connection section.'''
#:[[Image:UbuntuPulseInterface3.png|thumb|center|500px|Click the 'Add' (+) button to create a new connection.]]
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu'.'''
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS credentials.]]
#'''When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>). For example, if you wish to push a notification to your device, type the word "push" into the secondary password box. '''
::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

==Checking VPN Status==
# Launch the Pulse Client GUI.
#:[[Image:UbuntuPulseDesktop.png|thumb|center|280px|]]
# Select the down arrow to show connection status.
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]

Network/VPN/Linux

2024-05-23T09:28:51Z

Jishjesu: /* Connecting through the Pulse Secure client */

'''Please note that this tutorial assumes you already have a network connection established.'''
'''If you have a UMIACS account, you already have access.'''

The UMIACS VPN is accessible through the Pulse Secure Client.

== Connecting through the Pulse Secure client ==
#'''Download the client:'''
#:[[Media:Pulsesecure_22.7.R2_amd64.deb|Ubuntu 64 bit Pulse Secure Client]] 
#:[[Media:PulseSecure9.1R8.2i386.deb|Ubuntu 32 bit Pulse Secure Client]] 
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
#'''Install the package with dependencies, providing your password for sudo when requested.'''
#:<code>sudo dpkg -i <insert_filename_here>.deb</code>
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
# You will need to manually install the packages as shown here: <code>sudo apt-get install libnss3-tools net-tools</code> and then proceed with the Install.
#'''Start the client.'''
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
#'''and click 'Add' (+) under the connection section.'''
#:[[Image:UbuntuPulseInterface3.png|thumb|center|500px|Click the 'Add' (+) button to create a new connection.]]
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS credentials.]]
#'''When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>). For example, if you wish to push a notification to your device, type the word "push" into the secondary password box. '''
::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

==Checking VPN Status==
# Launch the Pulse Client GUI
#:[[Image:UbuntuPulseDesktop.png|thumb|center|280px|]]
# Select the down arrow to show connection status.
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]

Network/VPN/Windows

2024-05-23T09:26:03Z

Jishjesu: /* Connecting through the Ivanti Secure client */

The UMIACS VPN is accessible through the Ivanti Connect Secure Client. Alternatively, you can establish a connection through a [https://vpn.umiacs.umd.edu/ web browser], but this may fail if you have an outdated version of Ivanti Secure already installed.

'''As of May 10th 2019, MFA Authentication is mandatory.'''

'''NOTE: If your computer has an ARM-based processor, you will need to proceed differently from the standard Windows instructions. Please refer to the [[#Connecting through the Pulse Secure client (for computers WITH ARM processors)|instructions here]].'''

==Prerequisites==
* A [[Accounts#UMIACS_Account | full UMIACS account]]
* Device enrolled with [[Duo | UMIACS Duo]]
* An established network connection (wired or wireless)

==Connecting through the Ivanti Secure client==
# '''Download the client:'''
#: [[Media:PulseSecure22.7.2.x64-8.msi|Windows 64 bit Pulse Secure Client]] (preferred) 
#: ''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up to date version of the client with the most recent configuration.''
# '''Start the client if it is not already running - it usually starts by default on bootup.'''
#: [[Image:Network VPN Windows Snip1.png|thumb|center|280px|[Windows] Start the client from the Start Menu.]]
# '''If the client is already running, double click its icon from the status bar.'''
#: [[Image:Network VPN Windows Snip2.png|thumb|center|280px|[Windows] Double click its status icon to open.]]
# '''and click 'Add' (+) under the connection section.'''
#: [[Image:Network VPN Windows Snip3.png|thumb|center|280px|[Windows] Click the 'Add' (+) button to create a new connection.]]
# '''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''
#: [[Image:Network VPN Windows Snip4.png|thumb|center|280px|[Windows] Enter the name of the VPN server.]]
# '''Enter your UMIACS credentials and hit connect.'''
#: [[Image:Network VPN Windows Snip5.png|thumb|center|280px|[Windows] Enter UMIACS credentials.]]
# '''Enter Secondary Password for [[Network/VPN/MFA | MFA]]. For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.'''

:::[[Image:Network VPN Windows Snip6.png|thumb|center|280px|[Windows] Enter Secondary Password.]]

::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the MFA requirement. As a result, you will be prompted for credentials twice.

::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}

:: Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.

{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN.

'''Please note, Windows 32 bit clients are no longer supported by Ivanti!'''

==Connecting through the Ivanti Secure client (ARM processors)==
ARM processors cannot natively run x64 or x86 programs without special emulation. However, not all x86 programs run smoothly even with emulation. As such, the best course of action for these sorts of machines is using the version of Pulse Secure that is specifically made for ARM processors, which is offered on the Microsoft Store.

'''Installation Instructions:'''

# [https://www.microsoft.com/en-us/p/pulse-secure/9nblggh3b0bp Go to the Pulse Secure page on the Microsoft Store.]
# Click the "Get" button and wait for it to finish downloading. Once it's finished downloading, the Get button should now say "Install". Click "Install".
# Once Pulse Secure is installed, continue to the Configuration Instructions.

'''Configuration Instructions:'''
# Open Pulse Secure. It should have a green- and black-colored icon in the shape of an S.
# You should now see a gray window. Click on the "VPN Settings..." button in that window.
# You should now see the VPN page in Windows Settings. Click "Add a VPN connection".
# The VPN provider should be Pulse Secure. You will now need to enter the following information:
## Connection name: UMIACS
## Server name or address: vpn.umiacs.umd.edu
## Username: You can put in your UMIACS username if you'd like, or you can leave it blank.
## password: Leave it blank for security reasons.
## Choose to remember sign-in info ONLY if the password field is blank, for security reasons.
## You should now be finished with adding the VPN connection.
# Now under "VPN" and "Add a VPN connection" at the top, you should see a button that says "UMIACS". Click on that button.
# You will now be prompted for your username (if you did not fill it out when adding the connection) and password. Enter your UMIACS credentials, then click the "OK" button.
# You will now be prompted for a "secondary password". This refers to the method of multi-factor authentication you would like to use. Typing in "push" into this field will send a notification to the Duo app on your smart device, whereas "phone" will send a call to your registered phone number. Enter your choice of authentication, then click the "Next" button.
# After completing the multi-factor authentication via push notification or call, you should now be connected to the UMIACS VPN!

In case you would like to manually disconnect from the VPN, go to the same "VPN Settings..."/VPN page in Windows settings, click on the UMIACS connection, and click the "Disconnect" button.

==Checking VPN Status==
# In the bottom right hand corner, in your status bar, you should see an S icon. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
#: [[Image:Network_VPN_Windows_Snip7.png|thumb|center|500px|]]
# You can hover over this icon and it will show you the status of your connection.
#: [[Image:Network_VPN_Windows_Snip8.png|thumb|center|500px|]]

Network/VPN/macOS

2024-03-06T16:51:08Z

Jishjesu:

2024-02-11T14:37:13Z

Jishjesu:

Network/VPN/Linux

2024-02-03T04:07:07Z

Jishjesu: /* Connecting through the Pulse Secure client */

'''Please note that this tutorial assumes you already have a network connection established.'''
'''If you have a UMIACS account, you already have access.'''

The UMIACS VPN is accessible through the Pulse Secure Client.

== Connecting through the Pulse Secure client ==
#'''Download the client:'''
#:[[Media:Pulsesecure_22.6.R1_amd64.deb|Ubuntu 64 bit Pulse Secure Client]] 
#:[[Media:PulseSecure9.1R8.2i386.deb|Ubuntu 32 bit Pulse Secure Client]] 
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
#'''Install the package with dependencies, providing your password for sudo when requested.'''
#:<code>sudo dpkg -i <insert_filename_here>.deb</code>
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
# You will need to manually install the packages as shown here: <code>sudo apt-get install libnss3-tools net-tools</code> and then proceed with the Install.
#'''Start the client.'''
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
#'''and click 'Add' (+) under the connection section.'''
#:[[Image:UbuntuPulseInterface3.png|thumb|center|500px|Click the 'Add' (+) button to create a new connection.]]
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS credentials.]]
#'''When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>). For example, if you wish to push a notification to your device, type the word "push" into the secondary password box. '''
::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

==Checking VPN Status==
# Launch the Pulse Client GUI
#:[[Image:UbuntuPulseDesktop.png|thumb|center|280px|]]
# Select the down arrow to show connection status.
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]

Network/VPN/Windows

2024-02-03T04:05:33Z

Jishjesu: /* Connecting through the Pulse Secure client (for computers WITHOUT ARM processors) */

The UMIACS VPN is accessible through the Pulse Secure Client. Alternatively, you can establish a connection through a [https://vpn.umiacs.umd.edu/ web browser], but this may fail if you have an outdated version of Pulse Secure already installed.

'''As of May 10th 2019, MFA Authentication is mandatory.'''

'''NOTE: If your computer has an ARM-based processor, you will need to proceed differently from the standard Windows instructions. Please refer to the [[#Connecting through the Pulse Secure client (for computers WITH ARM processors)|instructions here]].'''

==Prerequisites==
* A [[Accounts#UMIACS_Account | full UMIACS account]]
* Device enrolled with [[Duo | UMIACS Duo]]
* An established network connection (wired or wireless)

==Connecting through the Pulse Secure client (for computers WITHOUT ARM processors)==
# '''Download the client:'''
#: [[Media:PulseSecure9.1R18.3.x64.msi|Windows 64 bit Pulse Secure Client]] (preferred) 
#: [[Media:PulseSecure9.1R18.3.x86.msi|Windows 32 bit Pulse Secure Client]] 
#: ''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up to date version of the client with the most recent configuration.''
# '''Start the client if it is not already running - it usually starts by default on bootup.'''
#: [[Image:Network VPN Windows Snip1.png|thumb|center|280px|[Windows] Start the client from the Start Menu.]]
# '''If the client is already running, double click its icon from the status bar.'''
#: [[Image:Network VPN Windows Snip2.png|thumb|center|280px|[Windows] Double click its status icon to open.]]
# '''and click 'Add' (+) under the connection section.'''
#: [[Image:Network VPN Windows Snip3.png|thumb|center|280px|[Windows] Click the 'Add' (+) button to create a new connection.]]
# '''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''
#: [[Image:Network VPN Windows Snip4.png|thumb|center|280px|[Windows] Enter the name of the VPN server.]]
# '''Enter your UMIACS credentials and hit connect.'''
#: [[Image:Network VPN Windows Snip5.png|thumb|center|280px|[Windows] Enter UMIACS credentials.]]
# '''Enter Secondary Password for [[Network/VPN/MFA | MFA]]. For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.'''

:::[[Image:Network VPN Windows Snip6.png|thumb|center|280px|[Windows] Enter Secondary Password.]]

::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the MFA requirement. As a result, you will be prompted for credentials twice.

::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}

:: Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.

{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN.

==Connecting through the Pulse Secure client (for computers WITH ARM processors)==
ARM processors cannot natively run x64 or x86 programs without special emulation. However, not all x86 programs run smoothly even with emulation. As such, the best course of action for these sorts of machines is using the version of Pulse Secure that is specifically made for ARM processors, which is offered on the Microsoft Store.

'''Installation Instructions:'''

# [https://www.microsoft.com/en-us/p/pulse-secure/9nblggh3b0bp Go to the Pulse Secure page on the Microsoft Store.]
# Click the "Get" button and wait for it to finish downloading. Once it's finished downloading, the Get button should now say "Install". Click "Install".
# Once Pulse Secure is installed, continue to the Configuration Instructions.

'''Configuration Instructions:'''
# Open Pulse Secure. It should have a green- and black-colored icon in the shape of an S.
# You should now see a gray window. Click on the "VPN Settings..." button in that window.
# You should now see the VPN page in Windows Settings. Click "Add a VPN connection".
# The VPN provider should be Pulse Secure. You will now need to enter the following information:
## Connection name: UMIACS
## Server name or address: vpn.umiacs.umd.edu
## Username: You can put in your UMIACS username if you'd like, or you can leave it blank.
## password: Leave it blank for security reasons.
## Choose to remember sign-in info ONLY if the password field is blank, for security reasons.
## You should now be finished with adding the VPN connection.
# Now under "VPN" and "Add a VPN connection" at the top, you should see a button that says "UMIACS". Click on that button.
# You will now be prompted for your username (if you did not fill it out when adding the connection) and password. Enter your UMIACS credentials, then click the "OK" button.
# You will now be prompted for a "secondary password". This refers to the method of multi-factor authentication you would like to use. Typing in "push" into this field will send a notification to the Duo app on your smart device, whereas "phone" will send a call to your registered phone number. Enter your choice of authentication, then click the "Next" button.
# After completing the multi-factor authentication via push notification or call, you should now be connected to the UMIACS VPN!

In case you would like to manually disconnect from the VPN, go to the same "VPN Settings..."/VPN page in Windows settings, click on the UMIACS connection, and click the "Disconnect" button.

==Checking VPN Status==
# In the bottom right hand corner, in your status bar, you should see an S icon. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
#: [[Image:Network_VPN_Windows_Snip7.png|thumb|center|500px|]]
# You can hover over this icon and it will show you the status of your connection.
#: [[Image:Network_VPN_Windows_Snip8.png|thumb|center|500px|]]

Network/VPN/Windows

2024-02-03T04:02:19Z

Jishjesu: /* Connecting through the Pulse Secure client (for computers WITHOUT ARM processors) */

The UMIACS VPN is accessible through the Pulse Secure Client. Alternatively, you can establish a connection through a [https://vpn.umiacs.umd.edu/ web browser], but this may fail if you have an outdated version of Pulse Secure already installed.

'''As of May 10th 2019, MFA Authentication is mandatory.'''

'''NOTE: If your computer has an ARM-based processor, you will need to proceed differently from the standard Windows instructions. Please refer to the [[#Connecting through the Pulse Secure client (for computers WITH ARM processors)|instructions here]].'''

==Prerequisites==
* A [[Accounts#UMIACS_Account | full UMIACS account]]
* Device enrolled with [[Duo | UMIACS Duo]]
* An established network connection (wired or wireless)

==Connecting through the Pulse Secure client (for computers WITHOUT ARM processors)==
# '''Download the client:'''
#: [[Media:PulseSecure9.1R18.3.x64.msi|Windows 64 bit Pulse Secure Client]] (preferred) 
#: [[Media:PulseSecure22.3.R1.x86.msi |Windows 32 bit Pulse Secure Client]] 
#: ''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up to date version of the client with the most recent configuration.''
# '''Start the client if it is not already running - it usually starts by default on bootup.'''
#: [[Image:Network VPN Windows Snip1.png|thumb|center|280px|[Windows] Start the client from the Start Menu.]]
# '''If the client is already running, double click its icon from the status bar.'''
#: [[Image:Network VPN Windows Snip2.png|thumb|center|280px|[Windows] Double click its status icon to open.]]
# '''and click 'Add' (+) under the connection section.'''
#: [[Image:Network VPN Windows Snip3.png|thumb|center|280px|[Windows] Click the 'Add' (+) button to create a new connection.]]
# '''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''
#: [[Image:Network VPN Windows Snip4.png|thumb|center|280px|[Windows] Enter the name of the VPN server.]]
# '''Enter your UMIACS credentials and hit connect.'''
#: [[Image:Network VPN Windows Snip5.png|thumb|center|280px|[Windows] Enter UMIACS credentials.]]
# '''Enter Secondary Password for [[Network/VPN/MFA | MFA]]. For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.'''

:::[[Image:Network VPN Windows Snip6.png|thumb|center|280px|[Windows] Enter Secondary Password.]]

::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the MFA requirement. As a result, you will be prompted for credentials twice.

::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}

:: Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.

{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN.

==Connecting through the Pulse Secure client (for computers WITH ARM processors)==
ARM processors cannot natively run x64 or x86 programs without special emulation. However, not all x86 programs run smoothly even with emulation. As such, the best course of action for these sorts of machines is using the version of Pulse Secure that is specifically made for ARM processors, which is offered on the Microsoft Store.

'''Installation Instructions:'''

# [https://www.microsoft.com/en-us/p/pulse-secure/9nblggh3b0bp Go to the Pulse Secure page on the Microsoft Store.]
# Click the "Get" button and wait for it to finish downloading. Once it's finished downloading, the Get button should now say "Install". Click "Install".
# Once Pulse Secure is installed, continue to the Configuration Instructions.

'''Configuration Instructions:'''
# Open Pulse Secure. It should have a green- and black-colored icon in the shape of an S.
# You should now see a gray window. Click on the "VPN Settings..." button in that window.
# You should now see the VPN page in Windows Settings. Click "Add a VPN connection".
# The VPN provider should be Pulse Secure. You will now need to enter the following information:
## Connection name: UMIACS
## Server name or address: vpn.umiacs.umd.edu
## Username: You can put in your UMIACS username if you'd like, or you can leave it blank.
## password: Leave it blank for security reasons.
## Choose to remember sign-in info ONLY if the password field is blank, for security reasons.
## You should now be finished with adding the VPN connection.
# Now under "VPN" and "Add a VPN connection" at the top, you should see a button that says "UMIACS". Click on that button.
# You will now be prompted for your username (if you did not fill it out when adding the connection) and password. Enter your UMIACS credentials, then click the "OK" button.
# You will now be prompted for a "secondary password". This refers to the method of multi-factor authentication you would like to use. Typing in "push" into this field will send a notification to the Duo app on your smart device, whereas "phone" will send a call to your registered phone number. Enter your choice of authentication, then click the "Next" button.
# After completing the multi-factor authentication via push notification or call, you should now be connected to the UMIACS VPN!

In case you would like to manually disconnect from the VPN, go to the same "VPN Settings..."/VPN page in Windows settings, click on the UMIACS connection, and click the "Disconnect" button.

==Checking VPN Status==
# In the bottom right hand corner, in your status bar, you should see an S icon. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
#: [[Image:Network_VPN_Windows_Snip7.png|thumb|center|500px|]]
# You can hover over this icon and it will show you the status of your connection.
#: [[Image:Network_VPN_Windows_Snip8.png|thumb|center|500px|]]

2021-06-29T17:55:29Z

Jishjesu: /* Connecting through the Pulse Secure client */

'''Please note that this tutorial assumes you already have a network connection established.'''
'''If you have a UMIACS account, you already have access.'''

The UMIACS VPN is accessible through the Pulse Secure Client. Alternatively, you can establish a connection through a [https://vpn.umiacs.umd.edu/ web browser], but this may fail if you have an outdated version of Pulse Secure already installed.

'''As of May 10th 2019, MFA Authentication is mandatory.'''
==Prerequisites==
* Device enrolled with [[Duo | UMIACS Duo]]
* macOS 10.11 or higher as of the current version of the Pulse Secure Client

== Connecting through the Pulse Secure client ==
#'''Download the client:'''
#:[[Media:PulseSecure9.1R11.5.dmg|macOS Pulse Secure Client]] 
#:''Upon starting the client for the first time it may ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.''
#'''Open the client and click 'Add' (+) under the connection section.'''
#:[[Image:JunosOSX.png|thumb|left|510px|[macOS] Click the 'Add' (+) button to create a new connection]] 
#'''In the 'Name' field, enter a descriptive name for this vpn Connection.'''
#'''In the 'Server URL' enter 'vpn.umiacs.umd.edu''''
#:[[Image:JunosOSXSettings.png|thumb|left|510px|[macOS] Enter the name of the vpn server]] 
#'''Enter your UMIACS credentials and hit connect.'''
#:[[Image:JunosOSXLogin.png|thumb|left|510px|[macOS] Enter UMIACS Credentials]] 
#'''Complete the [[Network/VPN/MFA | MFA]] Verification Step. For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.
#:[[Image:mac_mfa_step.png|thumb|left|510px|[macOS] Enter a secondary password.]] 
::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the [[Network/VPN/MFA | MFA]] requirement. As a result, you will be prompted for credentials twice.

::{|class="wikitable"
!Second Credential Password Value:
! Result
|-
| push
| Send a push verification to your Duo connected device
|-
| phone
| Send a call verification to your Duo connected device.
|-
| <press YubiKey>
| If you have a physical token then you would press the YubiKey for the one time password.
|}

::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
{{Note|Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

If you encounter an error, please refer to the "Setup Security Requirement" section bellow.

==Checking VPN Status==
# In the top right hand corner, on your status bar, you should see an S icon in a black circle. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
#: [[Image:Check the Status of your ConnectionOSX1.png|thumb|left|610px|[macOS] The top image is connected, the bottom image is not.]] 
# You can click this icon, as well, and it will show you the status of your connection.
#:[[Image:AreYouConnected2.png|thumb|left|610px|[macOS] The Pulse drop down menu.]] 
# If the icon is not in the status bar, you can find Pulse Secure in your Applications folder. There you will see a list of connections.

==Setup Security Requirement (Follow these steps if you encounter an error while connecting through the Pulse Secure client) ==

# '''Click the Apple logo at the top left of your desktop'''
#:[[Image:ClickApple.png|thumb|left|510px|[macOS] Click the apple logo to show menu]] 
# '''Click "System Preferences"'''
#:[[Image:SystemPreferences.png|thumb|left|510px|[macOS] Enter the system preferences]] 
# '''Click "Security & Privacy"'''
#:[[Image:SecurityPrivacy.png|thumb|left|510px|[macOS] Enter the security and privacy settings]] 
# '''Click the "lock" icon at the bottom left and Enter your credentials to enable changes.'''
#:[[Image:EnterCredentials.png|thumb|left|510px|[macOS] Enter credentials to allow changes]] 
# '''In the "General" tab, under "Allow Apps Downloaded From", select "Mac Apps Store and Identified developers"'''
#:[[Image:AppStoreIdentifier.png|thumb|left|510px|[macOS] Select Mac Apps Store and Identified developers]] 
# '''Click "Next" to the message "System Software From Developers "Pulse Secure LLC" was blocked from loading" if prompted.'''
# '''Click "Allow" to enable the extension.'''
#:[[Image:Allow.png|thumb|left|510px|[macOS] Click Allow]] 
# '''Close the "Security & Privacy" window.'''