VPN FAQ

This is a generalized FAQ with regards to the UCSB Campus VPN

A small reminder that the Engineering Computing Infrastructure (ECI) is not directly responsible for the Campus VPN and we can only give Best Effort Support with regards to the VPN.

VPN server status is one of the reported services at https://status.ucsb.edu/ and you can always check your connection status with here.

If you cannot find the answers here, you are urged to contact UCSB Enterprise Technology Services (ETS) at:

https://www.it.ucsb.edu/pulse-secure-campus-vpn

For additional support or Troubleshooting, you can contact ETS support at:

ets-info@ucsb.edu


Where to get Campus VPN

You will want to go to the following webpage:

https://www.it.ucsb.edu/get-connected-vpn

Download the appropriate client for your machine or device, please note that you may have to download a configuration file.  Instructions for how to install are also provided on this page.


What are the requirements?

As outlined from:

https://www.it.ucsb.edu/pulse-secure-campus-vpn

You will need the following:

  • A UCSBNetID
  • An internet connection (Wireless, Dialup, DSL, or Cable Modem)
  • The VPN client for your computer or device OS installed.
  • A supported operating system
  • The Duo two factor authentication app on your phone or a keyfob with a button to push from ETS.

VPN FAQ

ETS has an FAQ for the VPN listed here at:

https://www.it.ucsb.edu/vpn-service-frequently-asked-questions


Known Common Issues

We have noticed some of the following issues:

more are listed at Why is my VPN (Virtual Private Network) not Working?

User did not Wait Long Enough...

Please wait 60 seconds after seeing the green arrow appear on the pulse secure green S icon before trying to connect to secure services.

Connect Button is not Showing...

Quit Pulse Secure application and relaunch it, either via status bar or applications/programs for mac/pc, then click ok.

If connect button is still not showing, right click on UCSB Remote Access, then click Connect

This is often the result of having recently installed a VPN update or a system security update. A restart may be required to permanently fix this issue. 

  

Failed to Setup Virtual Adapter...


  1. If you did not click ok on first launch, you will have to take the following steps on a Mac to run the VPN
  2. Click the Apple menu at the top left of your desktop.

  3. Click System Preferences.

  4. Click Security & Privacy.

  5. Click the lock to make changes (if you are on Catalina, otherwise skip this step as unlocking is not required).

  6. Click the General tab.

  7. Under Allow apps downloaded from, select App Store and identified developers

  8. Look for the following message: System software from developer "Pulse Secure LLC" was blocked from loading.

  9. Next to the message click Allow to enable the extension.

  10. Close the Security & Privacy window.

  11. The kernel extension has been authorized and full functionality of the Pulse Desktop client should be available.

No Push Notification From Duo...

Typing the word 'push' (without quotes) in the VPN client secondary login field should result in a Duo Push being sent to your 1st registered device.

You may also open the pulse app on your phone, go to UCSB, and click on it (or arrow next to it). A 6 digit number will appear that you can use to login to pulse secure at the SMS step.

GUS Freezes while I am using the VPN...

The campus Pulse secure VPN has an idle timeout of 60 minutes and a max session of 720 minutes (12 hours). GUS' encrypted communications are not recognized as user activity. It is recommended you do some non encrypted activity every 30 minutes such as checking your email in order to avoid idle timeouts. If GUS

I can't connect to the machine...

If you are having issues connecting to the machine in question, you may want to test your connection while next to the machine in question...  Often times it may be more directly related to how your computer is setup.

For example, If you are trying to do Remote Desktop Connection to a Windows computer, you may not have Remote Desktop Enabled or the Windows Firewall may be configured on the computer to block.

Firewalls need to be configured to allow the following subnets for whatever service you are trying to access that is blocked by the Campus Border:

  • 128.111.61.0/24 (128.111.61.1-128.111.61.254)
  • 128.111.64.0/22 (128.111.64.1-128.111.67.254)
  • 128.111.180.0/22 (128.111.180.1-128.111.183.254)
  • 128.111.188.0/22 (128.111.188.1-128.111.191.254)

Campus VPN range was expanded multiple times in March 2020 by to include the 65-67, 180-183, and 188-191 subnets 



 If this does not help you, please contact ETS VPN support at:

Contact ets-info@ucsb.edu.