Skip to content Skip to main navigation Skip to footer
Choose language:
Choose language:

VPN – Virtual Private Network

Atualizado/Updated: 2024-01-30

How to install/setup?
 How to enable/disable?

Service site

Acronym for “Virtual Private Network“, i.e., virtual private network. The purpose of the service is to provide safer access to public and private networks for the academic community of Iscte. Through this service a tunnel is created that protects data traffic from prying eyes, even when you do not navigate a secure network. That is, the VPN guarantees:

  1. Secure and private access to public networks, in particular public Wi-Fi access points), providing secure gateways to access to trusted networks.
  2. Access to private networks: the user can access resources on the internal Iscte network, namely, consult the bibliographic databases of scientific articles contractualized by Iscte or access his/her workstation (applies only to Iscte employees), from any location outside the campus.
  3.  

Read also: telework

Iscte VPN is provided by Palo Alto Networks.

Important: Only users with an active Iscte account have access to the VPN.

How to install/setup VPN?

  1. Please ensure that the Multifactor Authentication (MFA) has been enabled. If not, please follow the instructions on our webpage for setting up MFA: Multifactor Authentication (MFA).
  2. Access the https://vpn.iscte-iul.pt address through a browser (Chrome, Firefox, Edge).



  3. You will be redirected to the website: https://login.iscte-iul.pt. In the authentication window, enter the Iscte account credentials and follow the steps for the Multifactor authentication.

  4. Follow the connection for the version of Windows installed on your computer (32 or 64 bit): “Download Windows 32-bit Global Protect Agent” or “Download Windows 64-bit Global Protect Agent“.



  5. Go to the “Downloads” folder.


    Method 1: Via browser option (Ctrl + J).


    Method 2: Via Windows Explorer (Win + E).

  6. Open the downloaded file above (“GlobalProtect.msi” or “GlobalProtect64.msi“).


    Method 1: Double-click on the file name.


    Method 2: Right click on the file name and choose the “Install” option.

  7. In the “Welcome to the Global Protect Setup Wizard” window, click “Next“.



  8. In the “Select Installation Folder” window, click “Next“.



  9. In the “Confirm Installation” window, click “Next“.



  10. In the “Installation Complete” window, click “Close” to exit the installer.



    Note: The “GlobalProtect” client automatically starts after installation.

  11. In the “Welcome!” window, click on “Get Started“.
  12. In the “Portal” field, type “vpn.iscte-iul.pt” and click “Connect“, to establish the connection.



  13. A new window will open in your default browser, asking you to verify your Iscte account.
    Notice: A pop-up window will appear, tick the box as in the image below and then click on “Open GlobalProtect”.





    After that, you must authenticate using the configured Multifactor authentication, following the instructions to complete it.



  14. Once authentication has been completed, a new GlobalProtect window will appear in the browser.



  15. If you don’t see the pop-up window in the browser tab, we recommend pressing “Click here” to connect the VPN.

  16. To confirm that the VPN connection has been established, click on the “GlobalProtect” icon on the taskbar, whose status should indicate “Connected“.


    Note: If the “GlobalProtect” icon is not visible, look under “hidden icons” (^).


  1. Please ensure that the Multifactor Authentication (MFA) has been enabled. If not, please follow the instructions on our webpage for setting up MFA: Multifactor Authentication (MFA).
  2. Choose a browser (Safari, Opera, Chrome, Firefox) and access the https://vpn.iscte-iul.pt.


    Browser used in this example: Safari.



  3. You will be redirected to the website: https://login.iscte-iul.pt. In the authentication window, enter the Iscte account credentials and follow the steps for the Multifactor authentication.

  4. Follow the link “Download MAC 32/64 bit Global Protect Agent“.



  5. Download the “GlobalProtect.pkg” file.

  6. Open the downloaded file above: “GlobalProtect.pkg“.



  7. If the message “System Extension Blocked” appears, click “Open Security Preferences“.




  8. In the “Security & Privacy” window, under “General“, click on “Allow” to unlock Palo Alto Networks. Then under “OK“.



  9. In the “Welcome to the GlobalProtect Installer” (Introduction) window, click “Continue“.



  10. In the “Select a Destination” (Destination Select) window, click “Continue“.



  11. In the “Custom Install on… ” (Installation Type), select the “GlobalProtect” package and click “Continue“.



  12. In the window “Standard Install on … “, (Installation Type), click “Install“.



  13. In the “Installer is trying to install new software” window, enter mac user credentials with administration privileges and click “Install Software“.



    Note: The actual installation of the “GlobalProtect” client for MAC OSX begins.

  14. In the “The installation was completed successfuly” (Summary) window, click “Close” to exit the installer.



    Note: If after clicking “Install” (in step 11), the “Installer is trying to install new software” window did not appear, i.e. if you did not set the “GlobalProtect” client as a trusted program, you need to perform a few additional steps:

  15. Access “System Preferences“, choose “Security & Privacy“.



  16. Select “General” and click on the “padlock” located in the lower left corner of the window.



  17. Enter mac user credentials with administration privileges.



  18. Clicking “Allow“, located next to the message “System software from developer “Palo Alto Networks” was blocked from loading. “



    Note: The “GlobalProtect” client automatically starts after installation.

  19. In the “Welcome to Global Protect” window, in the “Please enter your portal address” field, type “vpn.iscte-iul.pt” and click “Connect“, to establish the connection.



  20. A new window will open in your default browser, asking you to verify your Iscte account.
    Notice: A pop-up window will appear, tick the box as in the image below and then click on “Open GlobalProtect”.





    After that, you must authenticate using the configured Multifactor authentication, following the instructions to complete it.



  21. Once authentication has been completed, a new GlobalProtect window will appear in the browser.



  22. If you don’t see the pop-up window in the browser tab, we recommend pressing “Click here” to connect the VPN (as shown in the image above).

  23. To confirm that the VPN connection has been established, click on the “GlobalProtect” icon in the upper-right corner of the screen, whose status should indicate “Connected“.

On console/terminal

  1. Access the console or terminal command line and run the commands:

    sudo apt-get install vpnc-scripts network-manager-vpnc-gnome network-manager-vpnc

    vpncsudo vpnc-connectNote
    : The remaining data will be requested interactively. See immediately below how to automate the process of connecting vpnc via console.

  2. Access the console command line and create a file with iscte connection data, running:

    sudo cat > /etc/vpnc/username-of-the-account-iscte.conf << EOFIPSec
    gateway vpn.iscte-iul.pt
    IPSec ID
    mobileIPSec secret PreSharedKeydoIPSECIKE
    Authmode
    pskXauth username username-of-the-account-of-iscteXauth
    password-password-do-account-iscteEOF

  3. Run the command to connect the vpnc:

    sudo vpnc-name-of-user-of-the-account-iscteousudo



    vpnc-connect /etc/vpnc/username-user-of-the-iscte-account.conf

 

In the GUI environment

  1. Right-click on the network-manager icon and choose the “Edit Connections” option.



  2. Click the “+” button located in the lower left corner of the window.



  3. In the “VPN’s” window, choose “Cisco VPN (vpnc)“.



  4. In the “Select a link type” window and click “Create… “.



  5. Fill in the data regarding the VPN connection to Iscte and click “Save“.


    Gateway: vpn.iscte iul.pt
    User: iscte username (e.g. xxnes)
    User password: iscte account passwordGroup
    name: mobileGroup
    password: ******

  6. Close the “Network Connections” window using the cross (x) in the upper right corner.




  7. Click on the “Network-Manager” icon and mark the checkbox for “ISCTE VPN“.

Soon…

How to Enable or Disable VPN?

  1. To connect the VPN, access the “GlobalProtect” client and click “Connect” to establish the connection.


    The icon is located on the taskbar. If not visible, look under “hidden icons” (^).



  2. To disconnect the VPN, access the “GlobalProtect” client.



    The icon is located on the taskbar. If not visible, look under “hidden icons” (^). Then click on the upper-right corner of the window to access the “Menu” of the “GlobalProtect” client and choose the “Disconnect” option.



  1. To connect the VPN, access the “GlobalProtect” client and click “Enable” to establish the connection.


    The icon is located at the top edge of the screen.



  2. To disconnect the VPN, access the “GlobalProtect” client and click “Disconnect” to end the connection.


    If this button is not available, click the “Gear” symbol located in the top corner of the “GlobalProtect” window and choose the “Disable” option.

  1. To connect the VPN, on the console command line, run the

    command:sudo vpnc-connectNote
    : The remaining data will be requested interactively. See immediately below how to automate the process of connecting vpnc via console.

  2. To connect the VPN, on the console command line, using a configuration file, run one of the commands:

    sudo vpnc-name-of-the-account-of-iscteousudo



    vpnc-connect /etc/vpnc/user-name-of-the-iscte-account.conf

  3. To connect the VPN, in gui environment, click on the “Network-Manager” icon and mark the checkbox for “ISCTE VPN“.



  4. To disconnect the VPN, on the console command line, run the command:

    sudo vpnc-disconnect

  5. To disconnect the VPN, in gui environment, click the “Network-Manager” icon and uncheck the checkbox for “ISCTE VPN“.

Soon…