VPN - Frequently Asked Questions

Summary

This article provides answers to the most commonly received questions about the VPN service.

Body

Questions

Q1. What is the server that I should connect to from the application?

Q2. What address range will I receive when connected to the GlobalProtect VPN?

Q3. Is the service a full-tunnel or split-tunnel VPN?

Q4. How often is the client updated?

Q5. I am unable to connect to a resource on the GlobalProtect VPN that I was able to previously. How do I fix that?

Q6. I connected to the VPN, but I can't access any university resources. What is happening?

Answers

A1. What is the server that I should connect to from the application?

  • When connecting for the first time, the "portal" should be set to nu-vpn.nebraska.edu

 

A2. What address range will I receive when connected to the GlobalProtect VPN?

  • You will be assigned a dynamic IP in the range of 10.144.0.0/19.  To allow access to any systems that you manage, you will need to make sure that this range is allowed through any applicable firewalls.

 

A3. Is the service a full-tunnel or split-tunnel VPN?

  • The GlobalProtect VPN is a hyrid full-tunnel/split-tunnel, cloud-based service.  All traffic will be routed to the cloud gateway and from there, only traffic destined to the University will continue on in a tunnel.  Internet-destined traffic will route out directly from the cloud firewall.  This configuration also allows you to access resources on your local network, such as a networked printer or server at home, as well as being able to stream music and video while connected the VPN.

 

A4. How often is the client updated?

  • Client updates are typically available every three months or so.  When a new update is available from the vendor, the client will prompt you to install the update when you log into the VPN.

 

A5. I am unable to connect to a resource on the GlobalProtect VPN that I was able to previously. How do I fix that?

  • Please submit a service request and provide the following information:
    • The resource you're connecting to
    • The resource you're connecting from
    • The most recent connection attempt
    • What the connection to the resource is being used for

 

A6. I connected to the VPN, but I can't access any university resources. What is happening?

  • The connecting device is likely failing the GlobalProtect Host Information Profile (HIP) checks. Devices must pass all HIP checks to be able to connect to university resources. The most common HIP check failure that may not be easily recognized in Linux devices is if the device is not in the Supported Operating Systems list. If the Operating System is not explicitly in this list, the device will fail the HIP check and not allow connections to university resources.

Details

Details

Article ID: 230
Created
Wed 4/10/24 3:05 PM
Modified
Thu 9/5/24 1:05 PM

Related Articles

Related Articles (2)

This article introduces the GlobalProtect Host Information Profile (HIP) and how the results of a HIP check can influence a device's access level.
This article details all of the Operating Systems and their respective versions that are supported by the university.

Related Services / Offerings

Related Services / Offerings (2)

Network Access Control secures data and systems by preventing unauthorized access from unknown locations, compromised devices, or malicious network traffic.
A virtual private network (VPN) provides a secure connection to university networks from anywhere.