The New School operates a virtual private network (VPN), vpn.newschool.edu, to enable faculty, staff, and other authorized individuals to access internal computer systems from off campus.
Note: This page
describes the desktop VPN client. For the mobile device client, see
Allowing remote access to sensitive information resources entails increased risk. Therefore, any such access must be approved by an Information Trustee as defined in
The New School Information Security Policy (PDF). From a practical standpoint, this means that an individual’s request for remote access must be approved by the executive officer (Senior Vice President, Vice President, Dean, or equivalent) of that individual’s main office or department. Each executive officer may designate one or more directly-reporting subordinates (Assistant Vice President, Associate or Assistant Dean, etc.) who may grant approvals on his or her behalf. In addition, the individual must complete the Information Security Awareness for New School Faculty and Staff training course.
To request remote access, complete the
Remote Access VPN Request Form (PDF), have it signed by the appropriate approver as described above, and return the scanned document to the address shown on the form. You will be notified by email when your access is ready; you will also receive a separate email with your
Swivel PINsafe PIN (required to access the VPN) if you don’t already have one.
Once you have installed the Pulse client (see “Getting Started,” below), using the VPN is easy:
- Enter the URL of the VPN into your browser's address bar:
- Log in with your NetID, your password, and the one-time code derived from your Swivel PINsafe PIN (
Swivel PINsafe instructions).
- Use your computer just as if it were connected directly to the New School network. All internal sites, including Banner and Argos, as well as network file shares, are available (note, however, that file shares are not automatically mounted, you will have to mount them manually).
- When you are finished using the VPN, click the “Sign Out” button at the top left of the VPN window in the browser. This will terminate the Pulse client and log you out of the VPN. Do not close the VPN browser window prematurely; closing the window will sign you out of the VPN.
For mobile devices (iPhone, iPad, Android, Windows Mobile),
see these instructions.
NOTE FOR USERS OF GOOGLE CHROME
Version 45 of Google Chrome, released on Sept. 1, 2015, removed support for the legacy NPAPI interface used by the Java plug-in. This causes the Junos Pulse launcher to silently fail. Until Oracle fixes the Java plug-in to use a more modern interface, you can either use a different web browser to access the VPN or use the Pulse client directly as described in the next section.
NOTE FOR WINDOWS 10 USERS
Microsoft Edge, the default browser on Windows 10, does not yet support plug-ins, and therefore cannot be used with the SSL VPN. However, Internet Explorer, which is also installed, can still be used (you may have to search for it if it doesn't appear in your All Programs menu). Firefox, if you have it installed, will also still work.
RE-AUTHENTICATING AND CONNECTING DIRECTLY WITH THE PULSE CLIENT
To help maintain security, the VPN will disconnect after 15 consecutive minutes of idle time (no traffic). It will also disconnect after four hours' continuous connection. Five minutes before disconnecting, you will be prompted to re-authenticate to extend your session.
It is also possible to use the Pulse client directly to initiate the VPN connection; you do not have to sign into the web page as described above (although generally, it's easier to use the web page).
In both of these situations, the Pulse client software will prompt you for a one-time code. However, due to limitations of the Pulse software, it cannot display the Turing image needed to determine the one-time code. You must use a Swivel mobile application to generate the Security String in either of these situations;
see these instructions.
PULSE CLIENT ICON STATES
The Pulse client interface displays a system tray icon (Windows) or a menu bar icon (OS X) that indicates connection status, provides access to menu items that let the user connect and disconnect from networks. Only one icon is visible even when there are multiple connections. One icon provides the status for all connections by indicating the most important connection state information.
||Connected with issues. For example, Host Checker found an issue that must be fixed before full access is available.
||The user has suspended the connection.
||No active connections.
DISABLING PULSE CLIENT AUTO-START
By default, the Pulse client will start when your computer starts. If you wish to disable this so that the client only runs when you connect to the VPN, follow the instructions below:
- On Windows, type msconfig into the search box. When the “System Configuration” window appears, click on the “Startup” tab. Un-check the checkbox for the Pulse client, and click “OK”.
- On Mac OS X, navigate to System Preferences > Users and Groups. Click on your username in the left-hand column, and then un-check the checkbox for the Pulse client.
UNINSTALLING NETWORK CONNECT
If you used the VPN prior to the switch to the Pulse client, you may want to uninstall the Network Connect client that was used previously (this is optional). To do so:
- On Windows, open then Control Panel and select “Programs and Features”. Highlight the line for “Juniper Network Connect” and click “Uninstall”.
- On Mac OS X, follow these
directions from Juniper.
The first time you log on to the VPN, you will be asked to install a VPN helper software component called, depending on the particular version, “Junos Pulse,” “Pulse Connect,” “Pulse Secure,” or just “Pulse”. All the names refer to the same thing; the SSL VPN product line was transferred to a new vendor in 2014 and is currently being rebranded, so multiple names are currently in use.
INSTALLING THE VPN
The VPN works on Windows computers using Internet Explorer, Firefox, and Chrome. If you use Firefox or Chrome, you must have Java installed.
The VPN works on Mac computers using Safari or Firefox It will not work
with Chrome (this will change when Chrome for the Mac is released in a
64-bit version). You must have Java installed.
- Make sure you have Java installed on your system by visiting Oracle’s Java verification page at http://www.java.com/en/download/installed.jsp. If you will be using Internet Explorer, you can skip this step.
- Enter the URL of the VPN into your browser’s address bar: vpn.newschool.edu.
- Log in with your NetID, your password, and the one-time code derived from your Swivel PINsafe PIN (Swivel PINsafe instructions)
- The first time you log in to the VPN, you will be prompted to execute a Java applet or Active X control from Juniper Networks, Inc. or Pulse Secure, LLC. Click “Yes” or “Run” to approve.
- The Pulse client will download and install. During the installation process, Windows may prompt you two or three times to allow the installer to make changes to your system; click “Yes” or “Run” or “Always” to approve.
- Once the Pulse client has installed, it will automatically execute and establish the VPN. You will see a small icon in the system tray at the bottom right of your screen (see below).
For mobile devices (iPhone, iPad, Android, Windows Mobile), see these instructions.