Connect to the VPN

Remote access VPN for UNSW staff and students

UNSW staff and students are encouraged to connect to the VPN service while working remotely. This service provides additional network security, ensures access to the latest security updates and allows self-service downloads. It also helps prevent being disconnected from the network. If your device does disconnect, you may need to visit the IT Service Centre on campus for support.

The remote access VPN service routes all network activity through the UNSW network, including personal internet browsing, video streaming, gaming and downloads. Therefore, it is recommended to connect to the VPN when you start working and disconnect once you have finished.

UNSW is providing a new VPN solution called GlobalProtect. AnyConnect will be decommissioned later this year.

Installing and connecting to the VPN

To connect to the Remote Access VPN service, UNSW staff and students must first download and install the GlobalProtect app on their devices. Once installed, the app can be configured to connect to the Remote Access VPN portal at ra.vpn.unsw.edu.au using your zID credentials and multi factor authentication.

Download instructions

Windows and Mac users: Download the GlobalProtect client software from ra.vpn.unsw.edu.au.
iPhone and iPad users: Download the GlobalProtect client software from the Apple App Store.
Android users: Download the GlobalProtect client software from Google Play Store, opens in a new window.
Linux users: Please raise a ticket via the UNSW IT Service Desk to obtain the GlobalProtect client software.

See below for more detailed installation and configuration guides.

Download and install GlobalProtect on Windows

For Canberra staff that are on a UNSW Windows device you will need to install Global Protect from Company Portal App.

Instructions to Install and Connect to Global Protect VPN

Open the VPN Portal:

Click this link or paste it into your browser: https://ra.vpn.unsw.edu.au., opens in a new window

Download the VPN Client:

Download and install the 64-bit Global Protect agent for Windows or Mac.

Install the VPN Client:

Once the download is complete, open the downloaded file.

Click Next and follow the prompts to install.

When asked to authorize the download, click Yes.

After installation, you will see “Installation Complete”; click Close.

Launch the VPN Client:

Go to your search toolbar and type “Global Protect” until the app appears.

Select Open.

Set Up the VPN Connection:

When the app pops up, click on the blue button Get Started.

Under Portal, type in: ra.vpn.unsw.edu.au and click Connect.

Authenticate:

You will be guided to Multi-Factor Authentication (MFA) as you normally would when accessing UNSW systems.

A new window will open advising “Authentication Complete”; you can close this window.

Confirm Connection:

In your bottom left tray, hover over the Global Protect icon. The word “Connected” should appear, confirming your VPN connection.

For more detailed instructions, download our Windows installation guide, opens in a new window or go to the Palo Alto Networks GlobalProtect user guide, opens in a new window.
Installing and using GlobalProtect on macOS

For Canberra staff that are on a UNSW Mac (SOE) device you will need to install Global Protect from the Self-Service App.

Installation Steps

Log in to GlobalProtect Portal:

Open a browser and go to https://ra.vpn.unsw.edu.au., opens in a new window

Enter your Name (zID@ad.unsw.edu.au) and Password, then click LOG IN. Complete multi-factor authentication using the Authenticator app on your mobile device.

Download the App:

After logging in, the app download page should appear. Click the link for “Download Mac 32/64 bit GlobalProtect agent.”

Install the App:

Open the downloaded file and run the software.

Run the GlobalProtect Installer, click Continue, and select the installation folder.

On the Installation Type screen, check the boxes for “GlobalProtect” and “GlobalProtect System extensions” (this may be disabled by default).

Click Install, enter your User Name and Password, then click Install Software.

After installation, close the installer. If you see a system extension prompt, select Open Security Preferences to allow the extensions. If using MDM like Jamf Pro, this notification may be suppressed.

Configure Security Preferences:

Go to Security & Privacy and click the padlock icon to make changes.

Select App Store and identified developers under “Allow apps downloaded from” and click Allow.
Using GlobalProtect

Log In:

Open the GlobalProtect app from the system tray.

Enter ra.vpn.unsw.edu.au as the Portal, then click Connect.

Sign in with your zID credentials and complete MFA. Click Open GlobalProtect when prompted.

Connect/Reconnect:

Click the system tray icon and select ra.vpn.unsw.edu.au from the Change Portal drop-down if necessary.

Click Connect and sign in again if prompted. Select Allow on any additional prompts to use Split Tunnel and enforce network access features.

Disconnect:

Open the GlobalProtect app from the system tray.

Click the hamburger menu (three lines) and select Disconnect.

Note

When installing or upgrading to GlobalProtect app 5.1.4 on macOS Catalina 10.15.4, macOS Big Sur 11, or later, you’ll need to enable system extensions for certain features. You might see a “System Extension Blocked” notification—follow the instructions to enable these extensions.

For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide., opens in a new window
Download and install GlobalProtect on iOS

Open the App Store.

Search for GlobalProtect.

Select GlobalProtect™ from the search results.

Tap GET on the app page.

Install the app.

Sign in with your Apple ID when prompted.

Connect and disconnect

The 'Portal' to connect to is ra.vpn.unsw.edu.au. You will need to connect using your zID@ad.unsw.edu.au credentials along with MFA.

For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide, opens in a new window.
Download and install GlobalProtect on Android

Open Google Play.

Search for GlobalProtect™.

Select GlobalProtect from the search results.

Tap INSTALL on the app page.

Review the information GlobalProtect requests access to, then choose 'Accept'.

Connect and disconnect

The 'Portal' to connect to is ra.vpn.unsw.edu.au. You will need to connect using your zID@ad.unsw.edu.au credentials along with MFA.

For more detailed instructions, visit the Palo Alto Networks GlobalProtect user guide.
Having issues?

If you're having problems connecting to the VPN or using Global Protect, download our troubleshooting guide for further assistance.

Download

UNSW students at on-campus accommodations

Privileged Access VPN

The Privileged Access VPN service lets you establish a secure network connection over the Internet from your computer/mobile device to a Security Gateway that provides privileged access to restricted UNSW resources. It is a tool that provides privileged access to UNSW resources where there is a need for additional cyber security access controls. These controls could include ensuring that access is restricted to a particular group within UNSW, or that the resource is being accessed from a trusted device.

Please note: Some countries restrict or regulate use of encryption and VPN technologies. Be aware of, and respect local laws that apply at your location, prior to using the Remote Access VPN Service.

The Remote Access VPN service is implemented using Global Protect technology from Palo Alto Networks. This replaces the Cisco AnyConnect technology used in the Legacy Remote Access VPN service, which has been deprecated and will be decommissioned in late 2024.

Examples of applications or systems that may require access via the Privileged Access VPN are listed below:

Systems that are critical to UNSW's safety and security.

Research systems that are subject to regulatory controls, or include sensitive personal data.

Medical systems that contain patient medical data

Finance applications that contain banking or credit card details.

Applications that contain staff and student HR data

The list of applications and systems accessible via the Privileged Access VPN service will grow as the some of the group-based access from the Legacy Remote Access VPN is migrated to the new Privileged Access VPN service, and as additional applications and systems get onboarded. Please note that most administrator access to UNSW resources has not yet been migrated to the Privileged Access VPN service. Most system and application administrators should continue to use the "IT Admin VPN" or the "Hosting VPN" services, that are managed by Cyber Security Operations team within UNSW IT.

The Privileged Access VPN service is implemented using Global Protect and Prisma Access technology from Palo Alto Networks. It partially replaces the Cisco AnyConnect technology used in the Legacy Remote Access VPN service, which has been deprecated and will be decommissioned in late 2024.

The Privileged Access VPN service is available to only those UNSW staff and students that require it for their work. UNSW staff and students that are working remotely and require access to UNSW resources that don't require privileged access are encouraged to use the Remote Access VPN service instead.
UNSW staff and students wishing to connect to the Privilege Access VPN service must first download and install the GlobalProtect app on their device. Once installed, Global Protect can then be configured to connect to the Privileged Access VPN portal (pa.vpn.unsw.edu.au) using zID credentials and multi-factor authentication.

For Windows and Mac users, please download the GlobalProtect client software, opens in a new window.

For iPhone and iPad users, please download the GlobalProtect client software from Apple App Store.

For Android users, please download the GlobalProtect client software from Google Play Store.

For Linux users, please raise a ticket via UNSW IT Service Desk, opens in a new window to obtain the GlobalProtect client software.

The Privileged Access VPN uses the same GlobalProtect app as the Remote Access VPN service.

Legacy Remote Access VPN

When you open the VPN client application, the server address connection setting will determine which network devices will be available to you.

Cisco AnyConnect VPN exists on the Azure Single Sign-On (SSO) platform to improve application security and enable multi-factor authentication (MFA). When signing in, you will be prompted to enter your zID in the format zID@ad.unsw.edu.au and may need to verify your sign-in using your authenticator.

The general access VPN provides access to centralised services including email, file and print. This does not provide access to non-centralised services including RDP (remote access to computers) and Faculty based servers.

Use the default connection setting: vpn.unsw.edu.au.

For VPN to work, you must be using the correct ‘Cisco AnyConnect VPN client’. This will allow you to securely and privately connect to the internet, and will provide you with a UNSW IP address.

The correct version of the UNSW Cisco VPN can be downloaded to your home machine here: https://vpn.unsw.edu.au

You should also be using the correct VPN suffix for your faculty.

Network access to applications and services over VPN depends on the underlying end-to-end network. This usually includes non-UNSW network such as home WiFi and broadband ISP networks, which are outside the control of UNSW IT and may be a source of performance issues.

Working remotely over high-latency connections such as over a VPN can impact the performance of some applications, particularly applications designed to work on Local Area Networks such as file sharing and database access. If your work relies on applications that need low-latency network connections, other solutions such as myAccess may be more appropriate.

If you experience performance issues while connected to the Remote Access VPN service, consider disconnecting form the VPN when you do not need to use it.
You can use the Library Resource VPN connection to access library resources as if you were physically located on campus, allowing access to geographically restricted websites when travelling to some locations abroad. Using this VPN connection will send all of your internet traffic from your device through UNSW.

Before connecting with the VPN client, change the connection server address to: vpn.unsw.edu.au/library

Remember to disconnect after you have finished, so that your internet traffic will no longer be sent via UNSW.

Group based access

You may be directed to use a VPN connection that is specific to the group or faculty that you work with. Authorisation to use these connections will be based on your role and affiliation at UNSW and may require additional approvals.

Before connecting with the VPN client, change the connection setting to the appropriate server address from the table below:

Group	VPN server address
Chief of Staff & Vice-President	vpn.unsw.edu.au/vcdivisn
Division Of Advancement Staff	vpn.unsw.edu.au/doa
Deputy Vice-Chancellor Academic Staff	vpn.unsw.edu.au/dvca
Deputy Vice-Chancellor Research Staff	vpn.unsw.edu.au/dvcr
Executive Division Finance & Operations (EDFO) Staff	vpn.unsw.edu.au/edfo
Executive Division University Services Staff	vpn.unsw.edu.au/edus
Faculty of Arts & Social Science Staff	vpn.unsw.edu.au/fass
Faculty of Engineering Staff	vpn.unsw.edu.au/feng
Faculty of Engineering Research Staff	vpn.unsw.edu.au/feng_rsch
Faculty of Engineering For Ad Hoc users	vpn.unsw.edu.au/feng_adhoc
Faculty of Law & Justice Staff	vpn.unsw.edu.au/law
Faculty of Medicine & Health Staff & Research Students	vpn.unsw.edu.au/fmed
Faculty of Medicine & Health for Ad Hoc users	vpn.unsw.edu.au/fmed_adhoc
Faculty of Medicine & Health – Hospitals	vpn.unsw.edu.au/hospital
UNSW Art & Design IT Staff	vpn.unsw.edu.au/fituad
UNSW Business School Staff & Research Students	vpn.unsw.edu.au/asb
UNSW Canberra	vpn.unsw.edu.au/can
UNSW IT	vpn.unsw.edu.au/unswit

Group
Chief of Staff & Vice-President
VPN server address
vpn.unsw.edu.au/vcdivisn
Group
Division Of Advancement Staff
VPN server address
vpn.unsw.edu.au/doa
Group
Deputy Vice-Chancellor Academic Staff
VPN server address
vpn.unsw.edu.au/dvca
Group
Deputy Vice-Chancellor Research Staff
VPN server address
vpn.unsw.edu.au/dvcr
Group
Executive Division Finance & Operations (EDFO) Staff
VPN server address
vpn.unsw.edu.au/edfo
Group
Executive Division University Services Staff
VPN server address
vpn.unsw.edu.au/edus
Group
Faculty of Arts & Social Science Staff
VPN server address
vpn.unsw.edu.au/fass
Group
Faculty of Engineering Staff
VPN server address
vpn.unsw.edu.au/feng
Group
Faculty of Engineering Research Staff
VPN server address
vpn.unsw.edu.au/feng_rsch
Group
Faculty of Engineering For Ad Hoc users
VPN server address
vpn.unsw.edu.au/feng_adhoc
Group
Faculty of Law & Justice Staff
VPN server address
vpn.unsw.edu.au/law
Group
Faculty of Medicine & Health Staff & Research Students
VPN server address
vpn.unsw.edu.au/fmed
Group
Faculty of Medicine & Health for Ad Hoc users
VPN server address
vpn.unsw.edu.au/fmed_adhoc
Group
Faculty of Medicine & Health – Hospitals
VPN server address
vpn.unsw.edu.au/hospital
Group
UNSW Art & Design IT Staff
VPN server address
vpn.unsw.edu.au/fituad
Group
UNSW Business School Staff & Research Students
VPN server address
vpn.unsw.edu.au/asb
Group
UNSW Canberra
VPN server address
vpn.unsw.edu.au/can
Group
UNSW IT
VPN server address
vpn.unsw.edu.au/unswit

IT walk-in service centres

Upper Campus IT Hub - Room G06, D26 Biological Sciences Building (Next door to XS Cafe) (View on map, opens in a new window)
Middle Campus IT Hub - G008, Ground Floor H13 Anita B Lawrence Centre (Formerly the Red Centre Building off University Mall) (View on map, opens in a new window)
Paddington Campus IT Hub - Ground Floor, Block D, Paddington Campus (View on map, opens in a new window)
UNSW Canberra ADFA Campus IT Hub - Ground Floor, Building 14, UNSW Canberra ADFA Campus (View on map, opens in a new window)

Remote access VPN for UNSW staff and students