Remote Access VPN

VPN (Virtual Private Network) allows staff and students secure access to university-restricted services away from campus.

The university has implemented a new VPN service "FortiClient", which builds in support for multi-factor authentication (MFA). It will soon replace the existing (legacy) VPN service, which currently requires a Remote Access (RATS) Password. 

This is a new service and does function in a different manner to the existing (legacy) VPN service. If you encounter any issues or need further support, please contact the IT Service Desk in the first instance.

  • You will connect to the new VPN using your synchronised university password that you already use to connect to services such as MUSE.
  • You will now need to perform MFA during the VPN connection process by approving the connection each time on your mobile device or token.
  • You must be set up with MFA before you begin setting up the new VPN.

Do I need to use VPN?

Find out when you need to use VPN before connecting as most university services no longer require the VPN. Please only use a VPN connection if it's essential and disconnect when you're finished.

Connecting from China?

If you are located in China and require access to the University's online teaching and learning resources, such as Blackboard or Google Apps for Education. You may find that access to these services is not possible or that they perform poorly in your location. Please connect to the UCC service to improve your access to these resources. Only connect to the university VPN service if you need access services listed here.



Setting up and connecting to VPN

Follow these steps to access VPN.

Step 1: Setting up Multi-factor authentication (MFA)

If you're already enrolled in MFA, skip to Step 2.

MFA provides an additional layer of security by requesting multiple forms of evidence to prove your identity when signing into an application.

To improve security, the University's new VPN service requires the use of MFA in order to successfully connect to it. MFA is mandatory, if you haven't already opted into MFA and enrolled a device, you must do this before setting up the new VPN.

I want to set up MFA

Please note clicking this link takes you to our MFA google site which is restricted to staff/student access only.

Find further advice on connecting to VPN with MFA in Step 3.

Step 2: Setting up your VPN connection

Find out how to set up VPN on YoYo University Desktop, Windows, Linux, Mac, iPad, iPhone and Android.

YoYo University Desktop/Laptop

Microsoft Windows

Apple

Google

Linux

Step 3: Connecting to VPN with MFA

When you have completed setting up MFA and the new VPN (see Step 2), you can begin to use the new VPN service. The following guidance explains how to easily connect to the new VPN service using the FortiClient VPN application with MFA.



Things to note:

  • You will need to use MFA to approve your connection to FortiClient VPN each time you connect.
  • The maximum connection time is 24 hours, it will then time out and you will need to reconnect to VPN using MFA.
  • If your WiFi connection drops, your computer enters sleep mode, or your connection is interrupted for any reason then you will need to reconnect to VPN and approve login with MFA once more.
  • The 'Remember Me' feature for MFA works for web services, such as your browser. As VPN isn't a web service and therefore doesn't have cookies, it's not possible to use the 'Remember Me' MFA feature for VPN.


Push notification



If you use the MFA mobile app to approve log ins.

  1. Enter your username and password into the FortiClient VPN application and press connect.
  2. You should receive a notification on your default mobile device from the MFA mobile app asking to approve your connection to the VPN service. Select approve to complete your VPN connection

If you have more than one mobile device registered into MFA.

You can specify that you want the notification to be sent to your second device instead by adding ,push2 after your password within the password field of FortiClient. For example you would enter yourpassword,push2 to direct the notification to your second mobile device. Note the comma (without spaces) required between your password and the word push2.



Note: If you ever receive a notification for a VPN connection attempt that you weren't expecting, press Deny to reject the request. You’ll be given the option to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it.

If you use an alternative MFA method (for example, hardware token), please see further instructions.