Remote Access VPN | UNSW IT

Overview

The Remote Access VPN service lets you establish a secure network connection over the Internet from your computer/mobile device to the UNSW network and through to the Internet. It allows you to work remotely as if you were on-site.

Many applications can be accessed via the Internet without a VPN connection. These include:

• Archibus • Turnitin • Identity Manager

• Concur (Finance) • Moodle • Lecture Recording +(Echo360)

• Zoom • CASD • Email (Outlook)

• The Box • LinkedIn Learning • Sharepoint

• Confluence

However, some applications and resources are only accessible from within UNSW's network and the Remote Access VPN service facilitates access to these applications and resources. These include:

• NS Finance • SiMs • PiMs

• Calumo • Astra • Restricted Library Resources

• Share Drive (FSAM) I & J Drives • Student and Staff home drives, H Drives

• Adobe Content Management System

There are also some UNSW resources that require a higher level of security and are not accessible via the Remote Access VPN service. Staff and Students requiring such access should use the Privileged Access VPN service instead.

The Remote Access VPN service is implemented using Global Protect technology from Palo Alto Networks. This replaces the Cisco AnyConnect technology used in the Legacy Remote Access VPN service, which has been deprecated and will be decommissioned in late 2024.

The Remote Access VPN service is available to all UNSW staff and students.

Warning

Some countries restrict or regulate use of encryption and VPN technologies. Be aware of, and respect local laws that apply at your location, prior to using the Remote Access VPN Service

How to Connect to the Remote Access VPN Service

UNSW staff and students wishing to connect to the Remote Access VPN service must first download and install the Global Protect app on their device. Once installed, Global Protect can then be configured to connect to the Remote Access VPN portal (ra.vpn.unsw.edu.au) using zID credentials and multi-factor authentication.

For Windows and MAC users, please download the GlobalProtect client software by accessing https://ra.vpn.unsw.edu.au/

For iPhone and iPad users, please download the GlobalProtect client software from Apple App Store.

For Android users, please download the GlobalProtect client software from Google Play Store.

For Linux users, please raise a ticket via UNSW IT Service Desk (https://servicedesk.unsw.edu.au/) to obtain the GlobalProtect client software.

See below for more detailed installation and configuration guides.

GlobalProtect App for Windows

Download and Install the GlobalProtect App for Windows

Step 1 - Log in to the GlobalProtect portal.

Launch a web browser and go to the following URL:
https://ra.vpn.unsw.edu.au/

On the portal login page, enter your Name (zID@ad.unsw.edu.au) and Password, and then click LOG IN. You will also need to complete multi-factor authentication using the Authenticator app on your mobile device

A screenshot of a sign in

Description automatically generated

Step 2 - Navigate to the app download page.

In most instances, the app download page appears immediately after you log in to the portal. Use this page to download the latest app software package.

A screenshot of a computer

Description automatically generated

Step 3: Download the app.

To begin the download, click the software link that corresponds to the operating system running on your computer. Most Windows users should download the 64-bit version.
Open the software installation file.
When prompted, Run the software.
When prompted again, Run the GlobalProtect Setup Wizard.

Step 4: Complete the GlobalProtect app setup.

In the GlobalProtect Setup Wizard, click Next
Click Next to accept the default installation folder (C:\Program Files\Palo Alto Networks\GlobalProtect) and then click Next twice.
After installation is complete, Close the wizard.

Use the GlobalProtect App for Windows

After you install the GlobalProtect app, you may need to run manually the first time. There are many ways to get to the GlobalProtect App; the easiest is to search 'GlobalProtect' in your Windows start button.

Step 1: Log in to GlobalProtect.

If you are logging in to the endpoint for the first time, the GlobalProtect app displays a friendly, welcome page upon successful login. Click Get Started.
Launch the GlobalProtect app by clicking the system tray icon. The status panel opens.
Enter ra.vpn.unsw.edu.au as the Portal, and then click Connect.
If prompted, enter your Username (zID@ad.unsw.edu.au) and Password, and then click Sign In. The process should be similar to other MFA logins where you enter your credentials into your default web browser

and then approve MFA using the Authenticator app on your mobile device
Click Open GlobalProtect when prompted.

After connecting successfully, the following should pop up

Step 2: Connect or reconnect to the GlobalProtect portal or gateway.

Launch the GlobalProtect app by clicking the system tray icon. The status panel opens.
If you are logging in to the GlobalProtect app for the first time, enter the ra.vpn.net.unsw.edu.auas the Portal, and then click Connect.
If multiple portals are saved on your app, select ra.vpn.unsw.edu.au from the Change Portal drop-down. By default, the most recently connected portal is pre-selected from the Change Portal drop-down.
Click Connect to initiate the connection.
If prompted, sign-in again using your zID credentials and approve the MFA in the Authenticator app on your mobile device.

Disconnect the GlobalProtect App for Windows

After you have finished using the Remote Access VPN service, you should disconnect from GlobalProtect.

Step 1: Disconnect the GlobalProtect app.

Launch the GlobalProtect app by clicking the GlobalProtect system tray icon. The status panel opens.
Click the hamburger menu to open the settings menu.
Select Disconnect.

Additional instructions on how to use the GlobalProtect App can be found on the Palo Alto Networks website. See; https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-user-guide/globalprotect-app-for-windows

GlobalProtect App for macOS

Download and Install the GlobalProtect App for macOS

When you install the GlobalProtect app for the first time on a macOS device running macOS Catalina 10.15.4, macOS Big Sur 11, or later or upgrade to GlobalProtect app 5.1.4, you must enable the system extensions that are used for specific GlobalProtect features. The System Extension Blocked notification message may be displays on the GlobalProtect app during the installation. The message prompts users to enable and allow the system extensions in macOS that are blocked from loading to use the split tunnel and Enforce GlobalProtect for Network Access features.