The New School operates a virtual private network (VPN), vpn.newschool.edu, to enable faculty, staff, and other authorized individuals to access internal computer systems from off campus.
Note: This page
describes the desktop VPN client. For the mobile device client, see
Allowing remote access to sensitive information resources entails increased risk. Therefore, any such access must be approved by an Information Trustee as defined in
The New School Information Security Policy (PDF). From a practical standpoint, this means that an individual’s request for remote access must be approved by the executive officer (Senior Vice President, Vice President, Dean, or equivalent) of that individual’s main office or department. Each executive officer may designate one or more directly-reporting subordinates (Assistant Vice President, Associate or Assistant Dean, etc.) who may grant approvals on his or her behalf. In addition, the individual must complete the Information Security Awareness for New School Faculty and Staff training course.
To request remote access, complete the
Remote Access VPN Request Form (PDF), have it signed by the appropriate approver as described above, and return the scanned document to the address shown on the form. You will be notified by email when your access is ready; you will also receive a separate email with your
Swivel PINsafe PIN (required to access the VPN) if you don’t already have one.
Once you have installed the Pulse client (see “Getting Started,” below), using the VPN is easy:
- Enter the URL of the VPN into your browser's address bar:
- Log in with your NetID, your password, and the one-time code derived from your Swivel PINsafe PIN (
Swivel PINsafe instructions).
- Use your computer just as if it were connected directly to the New School network. All internal sites, including Banner and Argos, as well as network file shares, are available (note, however, that file shares are not automatically mounted, you will have to mount them manually).
- When you are finished using the VPN, click the “Sign Out” button at the top left of the VPN window in the browser. This will terminate the Pulse client and log you out of the VPN. Do not close the VPN browser window prematurely; closing the window will sign you out of the VPN.
For mobile devices (iPhone, iPad, Android, Windows Mobile),
see these instructions.
RE-AUTHENTICATING AND CONNECTING DIRECTLY WITH THE PULSE CLIENT
To help maintain security, the VPN will disconnect after 15 consecutive minutes of idle time (no traffic). It will also disconnect after four hours' continuous connection. Five minutes before disconnecting, you will be prompted to re-authenticate to extend your session.
It is also possible to use the Pulse client directly to initiate the VPN connection; you do not have to sign into the web page as described above (although generally, it's easier to use the web page).
In both of these situations, the Pulse client software will prompt you for a one-time code. However, due to limitations of the Pulse software, it cannot display the Turing image needed to determine the one-time code. You must use a Swivel mobile application to generate the Security String in either of these situations;
see these instructions,
DISABLING PULSE CLIENT AUTO-START
By default, the Pulse client will start when your computer starts. If you wish to disable this so that the client only runs when you connect to the VPN, follow the instructions below:
- On Windows, type msconfig into the search box. When the “System Configuration” window appears, click on the “Startup” tab. Un-check the checkbox for the Pulse client, and click “OK”.
- On Mac OS X, navigate to System Preferences > Users and Groups. Click on your username in the left-hand column, and then un-check the checkbox for the Pulse client.
The first time you log on to the VPN, you will be asked to install a VPN helper software component called, depending on the particular version, “Junos Pulse,” “Pulse Connect,” “Pulse Secure,” or just “Pulse”. All the names refer to the same thing; the SSL VPN product line was transferred to a new vendor in 2014 and is currently being rebranded, so multiple names are currently in use.
INSTALLING THE VPN
The VPN works on Windows computers using Internet Explorer, Firefox, and Chrome. If you use Firefox or Chrome, you must have Java installed.
The VPN works on Mac computers using Safari or Firefox It will not work
with Chrome (this will change when Chrome for the Mac is released in a
64-bit version). You must have Java installed.
- Make sure you have Java installed on your system by visiting Oracle’s Java verification page at http://www.java.com/en/download/installed.jsp. If you will be using Internet Explorer, you can skip this step.
- Enter the URL of the VPN into your browser’s address bar: vpn.newschool.edu.
- Log in with your NetID, your password, and the one-time code derived from your Swivel PINsafe PIN (Swivel PINsafe instructions)
- The first time you log in to the VPN, you will be prompted to download and install and "application installer" or Active X control from Pulse Secure, LLC. Click “Yes” or “Run” to approve.
- The Pulse client will download and install. During the installation process, Windows may prompt you two or three times to allow the installer to make changes to your system; click “Yes” or “Run” or “Always” to approve.
- Once the Pulse client has installed, it will automatically execute and establish the VPN. You will see a small icon in the system tray at the bottom right of your screen.
For mobile devices (iPhone, iPad, Android, Windows Mobile), see these instructions.