You are here
PittNet VPN (Ivanti/Pulse Secure)
Quick Links: Key Benefits I Pulse Secure Roles I Access Library Resources Via EZProxy I Requirements I Connecting with Pulse Secure
PittNet VPN (Ivanti/Pulse Secure) no longer supports macOS 10.14 (Mojave) and requires macOS 10.15 (Catalina) or newer.
The PittNet VPN (Ivanti/Pulse Secure) service is available to all students, faculty, staff, and sponsored accounts to securely access unrestricted and restricted resources. The service encrypts traffic and makes it look as if the user's computer is on the University's network.
Students, faculty, staff, and sponsored accounts can download the Ivanti client from the Software Download Service via My Pitt. An app is available from the Apple App Store (iOS), the Google Play store (Android), and a browser extension via the Chrome Webstore.
Key Benefits
- Access to On-Campus Resources: Securely access unrestricted and restricted resources through a virtual private network (VPN).
- Access to University Network Security: Encrypts all network traffic and makes it look as if the user is on the University's network, regardless of geographic location.
- Privacy Protection: Use for added safety and confidentiality for public and private network connections.
Security Roles (Policies)
Security Roles or Policies are essential when connecting to University resources while on or off campus.
For campus generic resources that only require a Pitt IP address, follow the instructions to install GlobalProtect. GlobalProtect provides the benefit of obtaining the user’s identity to make use of directory and security policies.
If you are using Ivanti/Pulse Secure as your PittNet VPN client to access departmentally restricted, on-campus resources, you must first request a Ivanti/Pulse Secure role by contacting that department’s Responsibility Center Account Administrators. Responsibility Center Account Administrators work with Pitt IT Security to set up Ivanti/Pulse Secure Roles for their departments.
Note: If you are unsure about which Responsibility Center Account Administrators to contact, contact the Pitt IT Help Desk.
Access Library Resources Via EZProxy
The University of Pittsburgh Library System and the University of Pittsburgh Health Sciences Library System resources are unrestricted, on-campus resources. Unrestricted, off-campus access to these resources is available via EZProxy to any current Pitt students, faculty, and staff. See either www.library.pitt.edu and www.hsls.pitt.edu for more information about this method of access. Any Ivanti/Pulse Secure role may be used to access these library resources, but its use is not necessary.
Requirements
Connections through Ivanti/Pulse Secure Require:
- A University of Pittsburgh student, faculty, staff, or sponsored account is required for Ivanti/Pulse Secure connections.
Note: You must have registered a device for multifactor authentication before you can establish a secure connection. To request a sponsored account, follow these guidelines. - Ivanti/Pulse Secure Roles are required for Ivanti/Pulse Secure Connections.
- The Ivanti/Pulse client is required. It can be obtained via the Software Download Service via My Pitt. An app is available from the Apple App Store (iOS), the Google Play store (Android), and a browser extension via the Chrome Webstore.
- Ivanti/Pulse Secure establishes a connection from devices to the University's network by first verifying the device as a trusted device. Through such a Health Check, Ivanti/Pulse Secure reviews configuration settings on devices each time it connects. If the requirements are not met, the device's connection through Ivanti/Pulse Secure is denied. To pass the Health Check, devices must meet the following criteria:
- A supported, up-to-date operating system:
- Macintosh, Linux, Android, iOS, and Windows Phone automatically pass the Health Check.
- Windows 8.1 or Windows 10 with Microsoft Automatic Software Update turned on, so you can receive the latest security patches.
- A supported, up-to-date Anti-Virus Application is required.
Note: Connections through Ivanti/Pulse Secure cannot be guaranteed if the Operating System is either no longer supported or lacks a supported, up to date Anti-Virus Application.Antivirus Tools (Products and Versions) Compatible with the Health Check
The vendor of the PittNet VPN Service confirms that each of the following antivirus products will also pass the Health Check:
- AVG Antivirus
- AVG Internet Security
- AVG Internet Security Business Edition
- BitDefender Total Security
- BitDefender Antivirus Free Edition
- Emisoft
- Avast! Free Antivirus
- ESET
- Forticlient
- McAfee AntiVirus Plus
- McAfee Endpoint Security
- McAfee Internet Security
- McAfee LiveSafe
- McAfee Total Protection
- McAfee VirusScan
- Microsoft Defender
- Microsoft Forefront Client Security
- Microsoft Security Essentials
- Norton 360
- Norton AntiVirus
- Norton Internet Security
- Sophos Endpoint Security and Control
- Sophos Home
- TrendMicro
- VIPRE Internet Security
- VIPRE Business Process
- Webroot
- Windows Defender
Connecting with Ivanti/Pulse Secure
The following information is used when connecting with Ivanti/Pulse Secure:
Connecting with Windows, macOS, or Linux
- Open Ivanti/Pulse Secure.
- Click the plus ("+") button and Add A Connection with the following settings:
Windows macOS Linux - Connection Type: Policy Secure (UAC) or Connect Secure (VPN)
- Connection Name: This is a personal choice to label the Connection Profile.
- Server URL: Enter sremote.pitt.edu
Note: UPMC users enter sremote.pitt.edu/upmc.
- Click Add to create the connection profile.
Note: To make connecting to different systems easier, you can add additional profiles if you need them. - Click Connect, then read the Pre Sign-In Notification.
- Click Proceed, then provide the following:
Windows macOS Linux - Username: Enter your Pitt username
- Password: Enter your Pitt password
- Click Connect. Per the PreSign-In Notification, enter one of the following Secondary Passwords: PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code.
Windows macOS Linux - Click Connect to authenticate with Duo.
- Choose a Ivanti/Pulse Secure Role, then click Connect.
Note: If all of the requirements are met, the connection is secure and complete and connecting to on-campus resources should now be possible.Windows macOS Linux - When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.
Connecting Android or iOS Devices
Set Up a Profile
- Open the Ivanti/Pulse Secure app.
- Enter sremote.pitt.edu.
Note: UPMC users enter sremote.pitt.edu/upmc.Android iOS - Tap Submit
- Add a Connection Profile with the following settings:
- Connection Name: This is a personal choice to label the Connection Profile.
- Server URL: Enter sremote.pitt.edu
Note: UPMC users enter sremote.pitt.edu/upmc.
Android iOS - Tap Add or Save, then choose Allow to "Add VPN Configurations," if prompted.
- Tap Connect, then read the Pre Sign-In Notification.
- Tap Proceed, then provide the following:
- Username: Enter your Pitt username
- Password: Enter your Pitt password
Android iOS - Sign in:
- Android Users: Tap Sign In, then authenticate with Duo.
- iOS Users: Tap Click here if you need to enter a second factor passcode. Provide the Duo Passcode per the Pre Sign-In Notification—PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code. Tap Sign In.
Android iOS - When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.
Connecting a Chromebook
- Open the VPN settings from the System tray menu.
- Click Ivanti/Pulse Secure or the “+” Button to add a Connection Profile with the following settings:
- Name: This is a personal choice to label the Connection Profile.
- URL: Enter sremote.pitt.edu
Note: UPMC users enter sremote.pitt.edu/upmc.
- Click Save to create the Connection Profile.
Note: To make connecting to different systems easier, you can add additional profiles if you need them. - Open the VPN settings from the system tray menu and click the Connection Name created in step 2. Provide the following credentials:
- Username: Enter your Pitt username
- Password: Enter your Pitt password
- Click Continue. Per the Pre Sign-In Notification, enter the Secondary Credential password—PUSH, PHONE, SMS, a One-Time Passcode, or a 24-Hour Bypass Code.
-
Click Continue, then authenticate with Duo.
- Choose a Ivanti/Pulse Secure Role, then click Continue.
Note: If all of the requirements are met, the connection is secure and complete. Connecting to on-campus resources should now be possible.
- When you are finished accessing University resources, please end your Ivanti/Pulse Secure connection.