Change is coming to cloud storage at the University of Nebraska. ITS is beginning the process of moving all data from Box to Microsoft 365 services. Learn more at its.nebraska.edu/box. Ready to move now? Fill out this opt-in form.

Virtual Private Network (VPN)

Virtual Private NetworkVirtual Private Network (VPN)

A virtual private network (VPN) creates a secure connection to NU networks. You may be required to use a VPN in order to access certain computer systems for work or class. Once you connect through the VPN, you will be able to access your campus resources at Kearney, Lincoln, and Omaha remotely in the same manner as if your device was physically on campus.

Virtual Private Network

Features

VPNs typically require remote users of the network to be authenticated, and often secure data with encryption technologies to prevent disclosure of private information to unauthorized parties. VPNs may serve any network functionality that is found on any network, such as sharing of data and access to network resources, printers, databases, websites, etc.

A VPN user typically experiences the central network in a manner that is identical to being connected directly to the central network. VPN technology via the public Internet has replaced the need to requisition and maintain expensive dedicated leased-line telecommunication circuits once typical in wide-area network installations.

NU Information Technology Services currently supports Cisco's AnyConnect Secure Mobility VPN. It is a VPN client that can be installed and launched from a web browser, and it works on a wide variety of operating systems and hardware configurations. The Cisco AnyConnect Secure Mobility VPN client and service will work under current NU-supported Mac and Windows versions. Some selected linux versions also work with the VPN.  Coming in the summer of 2021, NU will be migrating to Palo Alto's GlobalProtect VPN client.   More information on that can be found below and we are encouraging users to start migrating now to help identify any issues before the final cut-over date.

Getting Started

Enrolling in TrueYou Two-Factor Authentication
Before you connect to the NU VPN, you must be enrolled in TrueYou Two-Factor Authentication (2FA). 2FA is a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
To register with TrueYou Two-Factor Authentication use these instructions or visit the Two-Factor support page for videos and additional help topics.

NEW - Installing the GlobalProtect VPN Client

Windows Quick Start Guide

Mac Quick Start Guide

Linux Quick Start Guide

The guides above provide greater detail, but in general, here is the information for connecting.  Please refer to the guides for more specific details.

  1. Browse to https://nu-vpn.nebraska.edu
  2. Fill in your TrueYou Credentials (8-digit NUID and password).
    1. If your credentials don't work, please reset your password via TrueYou.
    2. A page will load giving you the option to download the VPN software by clicking on “GlobalProtect Agent” at the top-right of the screen.
    3. From that link, choose the version of software needed for your device and install the client.
    4. After install, open the GlobalProtect App from where it was installed.
    5. Enter the portal address of nu-vpn.nebraska.edu
    6. Click the connect button
    7. When prompted, sign in with your NUID and password (You should then be prompted for DUO 2-factor by whatever method you have chosen). 
    8. Once connected, you should see the GlobalProtect icon in the Taskbar with a small shield icon indicating the connection. 
    9. To view your VPN settings, click the icon in the Taskbar, and then find the settings menu by clicking on the three horizontal lines in the upper right.  From there, you can view tabs that show your connection details.

GlobalProtect FAQ:

Q. What address range will I receive when connected to the GlobalProtect VPN?
A. You will be assigned a dynamic IP in the range of 10.144.0.0/19.  To allow access to any systems that you manage, you will need to make sure that this range is allowed through any applicable firewalls. 

Q. Is the new service a full-tunnel or split-tunnel VPN?
A. In a change from the AnyConnect VPN, the GlobalProtect VPN is a hyrid full-tunnel/split-tunnel, cloud-based service.  All traffic will be routed to the cloud gateway and from there, only traffic destined to the University will continue on in a tunnel.  Internet-destined traffic will route out directly from the cloud firewall.  This configuration also allows you to access resources on your local network, such as a networked printer or server at home, as well as being able to stream music and video while connected the VPN. 

Q. How often is the client updated?
A. Client updates are typically available every three months or so.  When a new update is available from the vendor, the client will prompt you to install the update when you log into the VPN.

Installing the AnyConnect VPN Client

  1. Go to vpn.nebraska.edu
  2. Fill out your TrueYou Credentials (8 digit NUID and password) .  
    1.  For "2nd Password" type "push" or "phone". "Push" will send the notification to your cell phone for authentication, "phone" will call the number you have specified in your profile (or use "phone2", "phone3", etc. if you have more than one phone defined). Alternatively, you can enter a code from optional hardware token or a code generated in the smartphone app.
    2.  If your credentials don't work, please reset your password via TrueYou.
  3. A page will load showing the VPN Disclaimer
    1. Press Continue on this page
  4. The VPN will now download and install the client

Logging in with the VPN Client

  1. Open the Cisco AnyConnect program that was just installed.
  2. Input "vpn.nebraska.edu" without the quotes into the "Connect to:" field and press "Connect".
  3. Fill out your TrueYou credentials (8 digit NUID & password) for the "Username and "Password" fields.
  4. In the "Second Password" field, type "push" or "phone". "Push" will send the notification to your cell phone for authentication, "phone" will call the number you have specified in your profile (or use "phone2", "phone3", etc. if you have more than one phone defined).  Alternatively, you can enter a code from optional hardware token or a code generated in the smartphone app.

What is a full-tunnel VPN?

A full-tunnel VPN(Virtual Private Network) encrypts all internet traffic from your computer. This may inadvertently block you from using resources on your local network, such as a networked printer or drive at home.

Security Policy

Only Active Students, Faculty and Staff will have access to the VPN

AnyConnect NU DOMAIN
vpn.nebraska.edu

Updated Credentials

Your TrueYou Credentials (NUID) are what you will use to access the VPN.

How does the VPN work?

VPN allows you to connect to the NU network as if you were on campus, making access to restricted services possible. 

Nebraska VPN
2-factor VPN
Encrypts all internet traffic from your computer but may inadvertently block you from using resources on your local network, such as a networked printer at home. Requires two-factor authentication to confirm your identity.

Service News

There are no recent news items for this service. Find other service news items here.

More ITS service news

Customer Relations Manager

Ricky Keim

Didn't find what you were looking for? Visit the full services catalog.