PittNet VPN (Ivanti/Pulse Secure)

Key Benefits

Access to On-Campus Resources: Securely access unrestricted and restricted resources through a virtual private network (VPN).
Access to University Network Security: Encrypts all network traffic and makes it look as if the user is on the University's network, regardless of geographic location.
Privacy Protection: Use for added safety and confidentiality for public and private network connections.

Security Roles (Policies)

Security Roles or Policies are essential when connecting to University resources while on or off campus.

For campus generic resources that only require a Pitt IP address, follow the instructions to install GlobalProtect. GlobalProtect provides the benefit of obtaining the user’s identity to make use of directory and security policies.

If you are using Ivanti/Pulse Secure as your PittNet VPN client to access departmentally restricted, on-campus resources, you must first request a Ivanti/Pulse Secure role by contacting that department’s Responsibility Center Account Administrators. Responsibility Center Account Administrators work with Pitt IT Security to set up Ivanti/Pulse Secure Roles for their departments.

Note: If you are unsure about which Responsibility Center Account Administrators to contact, contact the Pitt IT Help Desk.

Access Library Resources Via EZProxy

The University of Pittsburgh Library System and the University of Pittsburgh Health Sciences Library System resources are unrestricted, on-campus resources. Unrestricted, off-campus access to these resources is available via EZProxy to any current Pitt students, faculty, and staff. See either www.library.pitt.edu and www.hsls.pitt.edu for more information about this method of access. Any Ivanti/Pulse Secure role may be used to access these library resources, but its use is not necessary.

Requirements

Connections through Ivanti/Pulse Secure Require:

A University of Pittsburgh student, faculty, staff, or sponsored account is required for Ivanti/Pulse Secure connections.
Note: You must have registered a device for multifactor authentication before you can establish a secure connection. To request a sponsored account, follow these guidelines.
Ivanti/Pulse Secure Roles are required for Ivanti/Pulse Secure Connections.
The Ivanti/Pulse client is required. It can be obtained via the Software Download Service via My Pitt. An app is available from the Apple App Store (iOS), the Google Play store (Android), and a browser extension via the Chrome Webstore.
Ivanti/Pulse Secure establishes a connection from devices to the University's network by first verifying the device as a trusted device. Through such a Health Check, Ivanti/Pulse Secure reviews configuration settings on devices each time it connects. If the requirements are not met, the device's connection through Ivanti/Pulse Secure is denied. To pass the Health Check, devices must meet the following criteria:

A supported, up-to-date operating system:
- Macintosh, Linux, Android, iOS, and Windows Phone automatically pass the Health Check.
- Windows 8.1 or Windows 10 with Microsoft Automatic Software Update turned on, so you can receive the latest security patches.
A supported, up-to-date Anti-Virus Application is required.
Note: Connections through Ivanti/Pulse Secure cannot be guaranteed if the Operating System is either no longer supported or lacks a supported, up to date Anti-Virus Application.
Antivirus Tools (Products and Versions) Compatible with the Health Check
The vendor of the PittNet VPN Service confirms that each of the following antivirus products will also pass the Health Check:

AVG Antivirus

AVG Internet Security

AVG Internet Security Business Edition

BitDefender Total Security

BitDefender Antivirus Free Edition

Emisoft

Avast! Free Antivirus

ESET

Forticlient

McAfee AntiVirus Plus

McAfee Endpoint Security

McAfee Internet Security

McAfee LiveSafe

McAfee Total Protection

McAfee VirusScan

Microsoft Defender

Microsoft Forefront Client Security

Microsoft Security Essentials

Norton 360

Norton AntiVirus

Norton Internet Security

Sophos Endpoint Security and Control

Sophos Home

TrendMicro

VIPRE Internet Security

VIPRE Business Process

Webroot

Windows Defender

Connecting with Ivanti/Pulse Secure

The following information is used when connecting with Ivanti/Pulse Secure:

Connecting with Windows, macOS, or Linux

Open Ivanti/Pulse Secure.
Click the plus ("+") button and Add A Connection with the following settings:

Windows macOS Linux
- Connection Type: Policy Secure (UAC) or Connect Secure (VPN)
- Connection Name: This is a personal choice to label the Connection Profile.
- Server URL: Enter sremote.pitt.edu
  Note: UPMC users enter sremote.pitt.edu/upmc.
Click Add to create the connection profile.
Note: To make connecting to different systems easier, you can add additional profiles if you need them.
Click Connect, then read the Pre Sign-In Notification.
Click Proceed, then provide the following:

Windows macOS Linux
- Username: Enter your Pitt username
- Password: Enter your Pitt password
Click Connect. Per the PreSign-In Notification, enter one of the following Secondary Passwords: PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code.

Windows macOS Linux
Click Connect to authenticate with Duo.
Choose a Ivanti/Pulse Secure Role, then click Connect.
Note: If all of the requirements are met, the connection is secure and complete and connecting to on-campus resources should now be possible.

Windows macOS Linux
When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.

Connecting Android or iOS Devices

Set Up a Profile

Open the Ivanti/Pulse Secure app.
Enter sremote.pitt.edu.
Note: UPMC users enter sremote.pitt.edu/upmc.

Android iOS
Tap Submit
Add a Connection Profile with the following settings:
- Connection Name: This is a personal choice to label the Connection Profile.
- Server URL: Enter sremote.pitt.edu
  Note: UPMC users enter sremote.pitt.edu/upmc.
Note: To make connecting to different systems easier, you can add additional profiles if you need them.

Android iOS
Tap Add or Save, then choose Allow to "Add VPN Configurations," if prompted.
Tap Connect, then read the Pre Sign-In Notification.
Tap Proceed, then provide the following:
- Username: Enter your Pitt username
- Password: Enter your Pitt password
Android iOS
Sign in:
- Android Users: Tap Sign In, then authenticate with Duo.
- iOS Users: Tap Click here if you need to enter a second factor passcode. Provide the Duo Passcode per the Pre Sign-In Notification—PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code. Tap Sign In.
Android iOS
When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.

Connecting a Chromebook

Open the VPN settings from the System tray menu.
Click Ivanti/Pulse Secure or the “+” Button to add a Connection Profile with the following settings:
- Name: This is a personal choice to label the Connection Profile.
- URL: Enter sremote.pitt.edu
  Note: UPMC users enter sremote.pitt.edu/upmc.
Click Save to create the Connection Profile.
Note: To make connecting to different systems easier, you can add additional profiles if you need them.
Open the VPN settings from the system tray menu and click the Connection Name created in step 2. Provide the following credentials:
- Username: Enter your Pitt username
- Password: Enter your Pitt password
Click Continue. Per the Pre Sign-In Notification, enter the Secondary Credential password—PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code.
Click Continue, then authenticate with Duo.
Choose a Ivanti/Pulse Secure Role, then click Continue.
Note: If all of the requirements are met, the connection is secure and complete. Connecting to on-campus resources should now be possible.
When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.