MyIT

Connect to the VPN

Personalise
Cyber security and Security password login online concept Hands typing and entering username and password of social media, log in with smartphone to an online bank account, data protection hacker

Remote access VPN for UNSW staff and students

UNSW staff and students are encouraged to connect to the VPN service while working remotely. This service provides additional network security, ensures access to the latest security updates and allows self-service downloads. It also helps prevent being disconnected from the network. If your device does disconnect, you may need to visit the IT Service Centre on campus for support.

The remote access VPN service routes all network activity through the UNSW network, including personal internet browsing, video streaming, gaming and downloads. Therefore, it is recommended to connect to the VPN when you start working and disconnect once you have finished.

UNSW is providing a new VPN solution called GlobalProtect. AnyConnect will be decommissioned later this year.

Installing and connecting to the VPN

To connect to the Remote Access VPN service, UNSW staff and students must first download and install the GlobalProtect app on their devices. Once installed, the app can be configured to connect to the Remote Access VPN portal at ra.vpn.unsw.edu.au using your zID credentials and multi factor authentication.

Download instructions

  • Windows and Mac users: Download the GlobalProtect client software from ra.vpn.unsw.edu.au.
  • iPhone and iPad users: Download the GlobalProtect client software from the Apple App Store.
  • Android users: Download the GlobalProtect client software from Google Play Store.
  • Linux users: Please raise a ticket via the UNSW IT Service Desk to obtain the GlobalProtect client software.

See below for more detailed installation and configuration guides.

  • Download and install GlobalProtect on Windows

    1. Log In:
      • Go to https://ra.vpn.unsw.edu.au/.
      • Enter your username (zID@ad.unsw.edu.au) and password, then click Log In.
      • Complete multi factor authentication (MFA) with the Authenticator app.
    2. Download the App:
      • After logging in, the download page should appear. Download the latest Windows software package.
    3. Install the App:
      • Click the link for the 64-bit version (if applicable).
      • Open the downloaded file and run the GlobalProtect Setup Wizard.
      • Click Next through the prompts and accept the default installation folder (C:\Program Files\Palo Alto Networks\GlobalProtect).
      • Close the wizard when installation is complete.
    4. Using GlobalProtect:
      • Log In: Open the app from the system tray, enter ra.vpn.unsw.edu.au as the Portal, and click Connect. Sign in with your zID credentials and complete MFA.
      • Connect/reconnect: Click the system tray icon, select ra.vpn.unsw.edu.au if needed, and click Connect. Re-enter credentials if prompted and select Allow on additional prompts.
      • Disconnect: Open the app from the system tray, click the hamburger menu (three lines), and select Disconnect.                   

    For more detailed instructions, download our Windows installation guide or go to the Palo Alto Networks GlobalProtect user guide.

  • Installing and using GlobalProtect on macOS

    Note: When installing or upgrading to GlobalProtect app 5.1.4 on macOS Catalina 10.15.4, macOS Big Sur 11, or later, you'll need to enable system extensions for certain features. You might see a “System Extension Blocked” notification—follow the instructions to enable these extensions.

    Installation steps

    1. Log in to GlobalProtect Portal:
      • Open a browser and go to https://ra.vpn.unsw.edu.au/.
      • Enter your Name (zID@ad.unsw.edu.au) and Password, then click LOG IN—complete multi-factor authentication using the Authenticator app on your mobile device.
    2. Download the App:
      • After logging in, the app download page should appear. Click the link for "Download Mac 32/64 bit GlobalProtect agent."
    3. Install the App:
      • Open the downloaded file and run the software.
      • Run the GlobalProtect Installer, click Continue, and select the installation folder.
      • On the Installation Type screen, check the boxes for "GlobalProtect" and "GlobalProtect System extensions" (this may be disabled by default).
      • Click Install, enter your User Name and Password, then click Install Software.
      • After installation, close the installer. If you see a system extension prompt, select Open Security Preferences to allow the extensions. If using MDM like Jamf Pro, this notification may be suppressed.
    4. Configure security preferences:
      • Go to Security & Privacy and click the padlock icon to make changes.
      • Select App Store and identified developers under "Allow apps downloaded from" and click Allow.

    Using GlobalProtect

    1. Log In:
      • Open the GlobalProtect app from the system tray.
      • Enter ra.vpn.unsw.edu.au as the Portal, then click Connect.
      • Sign in with your zID credentials and complete MFA. Click Open GlobalProtect when prompted.
    2. Connect/reconnect:
      • Click the system tray icon and select ra.vpn.unsw.edu.au from the Change Portal drop-down if necessary.
      • Click Connect and sign in again if prompted. Select Allow on any additional prompts to use Split Tunnel and enforce network access features.
    3. Disconnect:
      • Open the GlobalProtect app from the system tray.
      • Click the hamburger menu (three lines) and select Disconnect.

    For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide.

  • Download and install GlobalProtect on iOS

    1. Open the App Store.
    2. Search for GlobalProtect.
    3. Select GlobalProtect™ from the search results.
    4. Tap GET on the app page.
    5. Install the app.
    6. Sign in with your Apple ID when prompted.

    Connect and disconnect

    The 'Portal' to connect to is ra.vpn.unsw.edu.au. You will need to connect using your zID@ad.unsw.edu.au credentials along with MFA.

    For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide.
    1. Log In:
      • Open the GlobalProtect app from the system tray.
      • Enter ra.vpn.unsw.edu.au as the Portal, then click Connect.
      • Sign in with your zID credentials and complete MFA. Click Open GlobalProtect when prompted.
    2. Connect/reconnect:
      • Click the system tray icon and select ra.vpn.unsw.edu.au from the Change Portal drop-down if necessary.
      • Click Connect and sign in again if prompted. Select Allow on any additional prompts to use Split Tunnel and enforce network access features.
    3. Disconnect:
      • Open the GlobalProtect app from the system tray.
      • Click the hamburger menu (three lines) and select Disconnect.

    For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide.

  • Having issues?

    If you're having problems connecting to the VPN or using Global Protect, download our troubleshooting guide for further assistance.
    Download

Privileged Access VPN

The Privileged Access VPN service lets you establish a secure network connection over the Internet from your computer/mobile device to a Security Gateway that provides privileged access to restricted UNSW resources. It is a tool that provides privileged access to UNSW resources where there is a need for additional cyber security access controls. These controls could include ensuring that access is restricted to a particular group within UNSW, or that the resource is being accessed from a trusted device.

Please note: Some countries restrict or regulate use of encryption and VPN technologies.  Be aware of, and respect local laws that apply at your location, prior to using the Remote Access VPN Service.

The Remote Access VPN service is implemented using Global Protect technology from Palo Alto Networks. This replaces the Cisco AnyConnect technology used in the Legacy Remote Access VPN service, which has been deprecated and will be decommissioned in late 2024.

  • Examples of applications or systems that may require access via the Privileged Access VPN are listed below:

    • Systems that are critical to UNSW's safety and security.
    • Research systems that are subject to regulatory controls, or include sensitive personal data.
    • Medical systems that contain patient medical data
    • Finance applications that contain banking or credit card details.
    • Applications that contain staff and student HR data

    The list of applications and systems accessible via the Privileged Access VPN service will grow as the some of the group-based access from the Legacy Remote Access VPN is migrated to the new Privileged Access VPN service, and as additional applications and systems get onboarded. Please note that most administrator access to UNSW resources has not yet been migrated to the Privileged Access VPN service. Most system and application administrators should continue to use the "IT Admin VPN" or the "Hosting VPN" services, that are managed by Cyber Security Operations team within UNSW IT. 

    The Privileged Access VPN service is implemented using Global Protect and Prisma Access technology from Palo Alto Networks. It partially replaces the Cisco AnyConnect technology used in the Legacy Remote Access VPN service, which has been deprecated and will be decommissioned in late 2024.

    The Privileged Access VPN service is available to only those UNSW staff and students that require it for their work. UNSW staff and students that are working remotely and require access to UNSW resources that don't require privileged access are encouraged to use the Remote Access VPN service instead.

  • UNSW staff and students wishing to connect to the Privilege Access VPN service must first download and install the GlobalProtect app on their device. Once installed, Global Protect can then be configured to connect to the Privileged Access VPN portal (pa.vpn.unsw.edu.au) using zID credentials and multi-factor authentication.

    • For Windows and Mac users, please download the GlobalProtect client software.
    • For iPhone and iPad users, please download the GlobalProtect client software from Apple App Store.
    • For Android users, please download the GlobalProtect client software from Google Play Store.
    • For Linux users, please raise a ticket via UNSW IT Service Desk to obtain the GlobalProtect client software.
    • The Privileged Access VPN uses the same GlobalProtect app as the Remote Access VPN service.

Legacy Remote Access VPN

When you open the VPN client application, the server address connection setting will determine which network devices will be available to you.

Cisco AnyConnect VPN exists on the Azure Single Sign-On (SSO) platform to improve application security and enable multi-factor authentication (MFA). When signing in, you will be prompted to enter your zID in the format zID@ad.unsw.edu.au and may need to verify your sign-in using your authenticator.   

  • The general access VPN provides access to centralised services including email, file and print. This does not provide access to non-centralised services including RDP (remote access to computers) and Faculty based servers.

    • Use the default connection setting: vpn.unsw.edu.au.
    • For VPN to work, you must be using the correct ‘Cisco AnyConnect VPN client’. This will allow you to securely and privately connect to the internet, and will provide you with a UNSW IP address. 
    • The correct version of the UNSW Cisco VPN can be downloaded to your home machine here: https://vpn.unsw.edu.au
    • You should also be using the correct VPN suffix for your faculty.

    Network access to applications and services over VPN depends on the underlying end-to-end network. This usually includes non-UNSW network such as home WiFi and broadband ISP networks, which are outside the control of UNSW IT and may be a source of performance issues.

    Working remotely over high-latency connections such as over a VPN can impact the performance of some applications, particularly applications designed to work on Local Area Networks such as file sharing and database access. If your work relies on applications that need low-latency network connections, other solutions such as myAccess may be more appropriate.

    If you experience performance issues while connected to the Remote Access VPN service, consider disconnecting form the VPN when you do not need to use it.

  • You can use the Library Resource VPN connection to access library resources as if you were physically located on campus, allowing access to geographically restricted websites when travelling to some locations abroad.  Using this VPN connection will send all of your internet traffic from your device through UNSW.

    • Before connecting with the VPN client, change the connection server address to: vpn.unsw.edu.au/library
    • Remember to disconnect after you have finished, so that your internet traffic will no longer be sent via UNSW.

  • You may be directed to use a VPN connection that is specific to the group or faculty that you work with.  Authorisation to use these connections will be based on your role and affiliation at UNSW and may require additional approvals.

    Before connecting with the VPN client, change the connection setting to the appropriate server address from the table below:

    Group VPN server address
    Chief of Staff & Vice-President vpn.unsw.edu.au/vcdivisn
    Division Of Advancement Staff vpn.unsw.edu.au/doa
    Deputy Vice-Chancellor Academic Staff vpn.unsw.edu.au/dvca
    Deputy Vice-Chancellor Research Staff vpn.unsw.edu.au/dvcr
    Executive Division Finance & Operations (EDFO) Staff vpn.unsw.edu.au/edfo
    Executive Division University Services Staff vpn.unsw.edu.au/edus
    Faculty of Arts & Social Science Staff vpn.unsw.edu.au/fass
    Faculty of Engineering Staff vpn.unsw.edu.au/feng
    Faculty of Engineering Research Staff vpn.unsw.edu.au/feng_rsch
    Faculty of Engineering For Ad Hoc users vpn.unsw.edu.au/feng_adhoc
    Faculty of Law & Justice Staff vpn.unsw.edu.au/law
    Faculty of Medicine & Health Staff & Research Students vpn.unsw.edu.au/fmed
    Faculty of Medicine & Health for Ad Hoc users vpn.unsw.edu.au/fmed_adhoc
    Faculty of Medicine & Health – Hospitals vpn.unsw.edu.au/hospital
    UNSW Art & Design IT Staff vpn.unsw.edu.au/fituad
    UNSW Business School Staff & Research Students vpn.unsw.edu.au/asb
    UNSW Canberra      vpn.unsw.edu.au/can
    UNSW IT vpn.unsw.edu.au/unswit

We're here to help

We're here to help with all your tech needs, offering support and services to enhance your learning and work experience.
Report a problem

To create a ticket for help with an IT issue, submit your details through the support portal.
Need urgent help?
For urgent IT matters call us.

Mon - Fri 8:00 am - 8:00 pm (AEST) Saturday: 11:00 am - 3:00 pm (AEST) Call +61 2 9385 1333

Visit us

Open Hours: Monday - Friday: 8:00 am - 6:00 pm (AEST)

IT walk-in service centres

  • Upper Campus IT Hub - Room G06, D26 Biological Sciences Building (Next door to XS Cafe) (View on map)
  • Middle Campus IT Hub - G008, Ground Floor H13  Anita B Lawrence Centre (Formerly the Red Centre Building off University Mall) (View on map)
  • Paddington Campus IT Hub - Ground Floor, Block D, Paddington Campus (View on map)