For more information about the easiest way of accessing all IT services when away from campus, see Using IT services off campus

The VPN (virtual private network) service allows you to access certain IT services when you are off campus if you are not using a Secure PC.

Some of the services which may require VPN when off campus include:

You do not require VPN to access many IT services. Some of the services you do not need VPN for include:

VPN should not be used for accessing LUSI and Agresso when off campus. Instead you should use MyDesktop, which provides a higher level of security and more reliable connectivity.

You don't need to connect to the VPN if you are using a Secure PC.



Connection instructions

The connection instructions used will be different for staff members, or for students. Click the links below for step by step instructions on getting set up.

 VPN connection instructions for staff

You will connect to the VPN using the GlobalProtect Application, which is secured by Multi-Factor Authentication. This helps to ensure that whatever service you're using is being accessed in a secure way, to help keep your data protected.

If you have already set up multi-factor authentication, then you will just need to make sure you have your authenticator to hand, as you will be asked for a one-time password to log onto the VPN.

If you haven't used multi-factor authentication before, you'll need to set this up in order to use the VPN. 

You can find instructions for setting up for the first time, or find information if you want to recap multi-factor authentication, by following the link to the multi-factor authentication (MFA) help page

 Installing the VPN

You can find connection instructions for a range of devices below:

 Windows 10
 Lancaster University devices

These instructions are for people using a Windows 10 device, provided by Lancaster University, and set up by ISS.

You can find out what kind of device you have been provided with by visiting the Check your PC Build page.

You don't need to connect to the VPN if you are using a Secure PC.

If you are using an Independent computer, you can follow the personal device instructions.

  1. Open your web browser, and go AppsAnywhere at http://lancaster.ac.uk/apps

  2. When validated, search for GlobalProtect, and click Launch

  3. Once GlobalProtect has launched, Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand
 Personal devices
  1. Open your browser, and navigate to https://globalprotect.lancs.ac.uk

  2. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

  3. Select the Windows 64 bit or Windows 32 bit, depending on your device. 

    If you aren't sure if your device is 64 bit or 32 bit, you can check this by going to the Microsoft support page.

    GlobalProtect website

  4. Once downloaded, open GlobalProtect64.msi file, or GlobalProtect32.msi file, depending on which version you downloaded

    First page of install wizard for GlobalProtect

  5. Click Next, then select your installation location. Click Next

    Select your installation location

  6. Confirm you're happy for the installation to go ahead, and click Next

    Confirm the install

  7. When the installation is completed, you can click Close to close the installer wizard

    Confirmation of install

  8. You will see the GlobalProtect connection box in the bottom right of your screen. If you don't see this, you can press the start button, and search for GlobalProtect

    GlobalProtect connection box

  9. Enter the portal address globalprotect.lancs.ac.uk then click connect

    GlobalProtect Connection Box with portal address entered
  10. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

    Weblogin page pop-up
 MacOS

If your Mac model is from 2020 onwards, you may have the M1 chipset on the device. If you do, you can follow the M1 install instructions. If not, please follow the manual install instructions. 

The GlobalProtect client will gather certain bits of machine information (for example, the version of MacOS you are running), to make sure your machine in in line with security policies. You may find your machine will have limited network access if it isn't up to date, so please ensure your machine is up-to-date in line with the university systems patching policy.

 Manual install instructions

These instructions are for machines running MacOS Catalina or newer. If you are running and older version of MacOS, you may find some of the security settings do not apply, or are not required on your device. 


  1. Open your web browser, and go to the web address https://globalprotect.lancs.ac.uk/

  2. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

  3. Select the download for Mac 32/64 bit GlobalProtect Agent

  4. Once downloaded, open the GlobalProtect.pkg file

  5. On the installer wizard, select your install location, and click to Continue

    Select the install location

  6. On the installation type, make sure GlobalProtect is selected, and click Continue. You do not need to install the other elements, so only select GlobalProtect

    Select GlbalProtect from the list

  7. Click Install. You will be prompted for your password. Enter your password to install the software.

    Click install

  8. Once installed, GlobalProtect will launch in the top right of your screen, and you will be asked for your portal address. Enter the portal address as globalprotect.lancs.ac.uk

    GlobalProtect connection box

    If you don't see the GlobalProtect connection box popup, you can search for GlobalProtect in Finder, and select it.

  9. After a few seconds, you will see a pop-up with a login page. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

  10. You may be prompted to enable a system extension. Click Open Security Preferences

    Enable system extension

  11. Click the padlock on the bottom left to allow changes, Then click Allow

    Enable changes in security and privacy

  12. You will be shown a prompt reading “GlobalProtect” Would Like to Filter Network Content. Select Allow

    GlobalProtect network filtering pop up

  13. Go back to Security and Privacy, and select the lock in the bottom left to prevent further changes

  14. You can check the connection status by clicking the GlobalProtect icon in the top right of the menu bar




 M1 install instructions
  1. Go to the App Store and search for GlobalProtect. Make sure the publisher is listed as Palo Alto Networks, and download the app

  2. Enter the Portal address for the University (globalprotect.lancs.ac.uk)

  3. Log in using WebLogin. You will be asked for a One-Time Password, so have your authenticator to hand

  4. You can check the connection status by clicking the GlobalProtect icon in the top right of the menu bar
 Android
  1. Go to the Play Store and search for GlobalProtect. Make sure the publisher is listed as Palo Alto Networks and download the app

  2. When installed, open the app. Enter the Portal address as globalprotect.lancs.ac.uk

  3. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand. If you see a security prompt, select OK
 iPhone or iPad
  1. Go to the App Store and search for GlobalProtect. Make sure the publisher is listed as Palo Alto Networks, and download the app

  2. When installed, open the app. Enter the Portal address as globalprotect.lancs.ac.uk

  3. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand. If you are asked to, confirm the security prompt and enter your pin

 Linux
  1. Download the installer file

  2. This file contains several different versions of the Global Protect VPN client for Linux. You can unpackage the file using the command;

    tar zxvf PanGPLinux-5.3.0-c32.tgz


  3. This will open up the tarred and gzipped file and extract several files from it. For Ubuntu you should install the file GlobalProtect_UI_deb-5.3.0.0-32.deb

    sudo dpkg -i GlobalProtect_UI_deb-5.3.0.0-32.deb

    You may see an error message saying there are missing libraries. If this happens, see the instructions below:

     Instructions for installing missing libraries

    The initial install might fail saying that a library is missing. In this case, the most likely missing library is libqt5webkit5, this can be installed by;

    sudo apt install libqt5webkit5

    This will install the missing library and all its own dependencies, which could include multiple packages.

    Once the library is installed you can retry the dpkg command from step 3 of the instructions, and it should now install.

  4. Once installed, the Global Protect application will start and prompt you for a Portal Address. Enter the Portal address as globalprotect.lancs.ac.uk 

    Do not enter https:// or http:// before this address, as it will not resolve.



    GlobalProtect Connection Box with portal address entered

  5. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

  6. Once connected, a new network interface will be created for you for you called “gpd0”. This is the new Global Protect VPN interface, and your Linux box is now connected to the University networks.

    Other versions of the Global Protect files can be extracted from the tarred archive:

    • For Redhat, the files with .rpm at the end
    • For ARM architecture machine, those with deb_arm, are for Debian/Ubuntu clones on machines using ARM processors, and likewise the rpm_arm files are for Redhat/Fedora/CentOS clones on ARM machines

    There are some install files that would allow you to connect to the Global Protect service without using a graphical interface. This is not recommended, as the multi-factor authentication requires a graphical prompt.

 Connecting to the VPN
  1. Open the GlobalProtect application on your device

  2. Click the connect button

  3. Log in using WebLogin. You may be asked for a One-Time Password, so have your authenticator to hand

  4. To disconnect, open the GlobalProtect application, and click the disconnect button
 VPN connection instructions for students


 Connect to the VPN using Windows

The video below shows the process for connecting to the VPN from a Windows 10 PC. For written instructions for both Windows 10 and Windows 8, see below the video.



 Windows 10

If you are using a supported build then the VPN should already be set up. To connect to the VPN see the 15 step by step instructions below.


  1. Click on the network symbol in the bottom right hand corner (this may appear as four curved lines or an icon depicting a monitor with a cable).

  2. Select Network settings.

  3. Select VPN.
    Network settings link at the bottom of the Network window

    Then:

  4. In the network settings menu, click Add a VPN Connection.

  5. Enter the following settings:
    • VPN Provider: Windows (Built in)
    • Connection Name: Lancaster University VPN
    • Server name or address: vpn.lancaster.ac.uk
    • Select VPN type: Secure Socket Tunneling Protocol (SSTP)
    • Type of sign-in info: your username and password
    • Username: lancs\username (e.g. lancs\bloggsj - please remember to include the backslash after lancs)
    • Password: Enter your normal University password

      VPN connection window

  6. Click Save – the VPN settings menu will reappear. Continue with the following steps.

    If the VPN settings menu does not reappear, click the network symbol from the bottom right corner > Click Network Settings > Select VPN from the left toolbar.

    Then:

  7. In the settings menu, under the subheading Related Settings, click Change adaptor options. This will open the Network Connections window, you should see your VPN connection you have just created here.

  8. Right click on this connection and select Properties.



  9. Go to the Security tab. 

  10. Click the option for Allow these protocols.

  11. Tick the box named Challenge Handshake Authentication Protocol (CHAP).

  12. Ensure the box under this named Microsoft CHAP Version 2 (MS-CHAP v2) is also checked.

  13. Click OK.

  14. If prompted by the protocol message, click Yes.

  15. Close the open windows.

To connect to the VPN:

  1. From the main desktop, click on the network symbol in the bottom right hand corner.

  2. Select Lancaster University VPN and click Connect.




 Windows 8
  1. Press Windows key + S – this will open the Search side panel.

  2. Type: vpn  
    1. You should see a list.

  3. Click Manage Virtual Private Networks (VPN).

  4. Click on Add a VPN Connection.

  5. Drop the VPN provider list and select Microsoft.

  6. In Connection Name type: Lancaster University VPN

  7. In Server name or address, type: vpn.lancaster.ac.uk

  8. Un-select Remember my sign-in info.

  9. Click Save — you should see the Network Ethernet screen.

Then:

  1. Press Windows key + S – this will open the Search side panel.

  2. Type: View network connections
    1. You should see a list.

  3. Click on View network connections – you should see a list of network connections.

  4. Right click on Lancaster University VPN – you should see a tabbed dialog box.

  5. Click on the Security tab – see dialog.

  6. Select VPN type: Secure Socket Tunneling Protocol (SSTP).

  7. Click on Allow these protocols EAP-MSCHAPv2 will be used for IKEv2 VPN type..

  8. Notice that Microsoft CHAP Version 2(MS-CHAP v2) is selected.
    1. If it is not, select it.

  9. Leave all other options as they are.

  10. Click OK.

  11. Close Network Connections dialog box.

To connect to the VPN:

  1. Click the Network icon (next to the speaker, near the time) – the Sidebar appears.

  2. Click the Lancaster University VPN connection.

  3. Click Connect.

  4. At the Network Authentication prompt:
    1. Enter your username, in the format: lancs\username (e.g. lancs\bloggsj - please remember to include the backslash after lancs).
    2. Enter your University password.

  5. Click OK.




 Connect to the VPN using a Mac

These instructions apply to the latest version of Mac OS.

  1. From the Apple Menu in the top right of your screen, select System Preferences.

    System Preferences, then Network

  2. Click Network

  3. If the preference pane is locked, usually indicated by a closed padlock in the bottom left hand corner, this will need to be unlocked. To unlock it, click the padlock, then enter administrator credentials for your Mac.

  4. If there are any previous VPN connections in the list, remove them now.

  5. From above the padlock, click the icon.

    Click the plus icon. If necessary, click the padlock in the lower left to unlock the preference pane

    The VPN settings window appears.

  6. The required settings are:
    • Interface: VPN
    • VPN Type: L2TP over IPSec
    • Service Name: Lancaster University VPN

    Enter details for VPN in required fields

  7. Once the interface has been created, a Not configured pane appears. Add the following information:
    • Server Address: vpn.lancaster.ac.uk
    • Account Name: lancs\your username (e.g. lancs\bloggsj - please remember to include the backslash after lancs)
    • Tick Show VPN status in menu bar

    Enter further details

  8. Select Authentication Settings…

  9. Under Machine Authentication, enter the Shared Secret which you can find here: VPN shared secret

  10. Click OK.

    Enter shared secret code

  11. From the right-hand side of the Not configured pane, click Advanced…

  12. To ensure that all your data is sent securely, tick Send all traffic over VPN connection. Then click OK.

  13. In the Network pane, click Connect. Then, when asked to apply settings before connecting, click Apply.

  14. When prompted, enter University password. Then click OK.

    Enter name and password

You should now be connected to the VPN.

To disconnect from VPN

  1. Click on the VPN icon in the menu bar, then select Disconnect Lancaster University VPN.


Disconnecting from the VPN

To reconnect to the VPN at any time, you can select the VPN button in the menu bar and click Connect.




 Connect to the VPN using Android

These instructions were tested on Android version 6.0.1 on a Samsung Galaxy Tab S2. The process should be similar on other Android versions and devices.

  1. Open Settings.

  2. Tap More connection settings.

  3. Tap VPN.

  4. Tap Add VPN.

  5. Enter the following (If necessary, scroll down for additional settings):
    Name: Lancaster University
    Type: L2TP/IPSec PSK
    Server address: vpn.lancaster.ac.uk
    IPSec pre-shared key: enter the code which you can find here: VPN shared secret
    Leave other settings as their defaults.

  6. Tap Save.

  7. In the menu, tap Lancaster University.

  8. Enter the following:
    1. Username: lancs\username (e.g. lancs\bloggsj)
    2. Password: your University account password

  9. Tap Connect.



 Connect to the VPN on an iPhone or iPad

These instructions apply to the latest version of iOS.

  1. Open the Settings app.

  2. Select General.

  3. Select VPN.

  4. Tap Add VPN Configuration…

  5. Enter the following settings:
    1. Type: L2TP
    2. Description: Lancaster University VPN
    3. Server: vpn.lancaster.ac.uk
    4. Account: lancs\username (e.g. lancs\bloggsj)
    5. Secret: Enter the Shared Secret which you can find here: VPN shared secret 
    6. Leave other settings as their defaults.

  6. Select Done at the top right.

    Setting up VPN on iOS


To connect to the VPN at any time, click Settings and slide on the VPN option.

Enter your University password when prompted.

The slider on the VPN option - currently set to Off




 Connect to the VPN using another operating system or device

When prompted in your devices settings, enter the following details in the correct fields:

  • Interface: VPN

  • VPN Type: SSTP or L2TP over IPSec

  • Service Name: Lancaster University VPN

  • Server Address: vpn.lancaster.ac.uk

  • Account Name: lancs\your username (e.g. lancs\bloggsj)
     
  • If you are prompted for a Shared Secret, enter the the word you can find here: VPN shared secret