Installing and using VPN on a Macintosh computer

VPN (Virtual Private Network) is software that provides password-protected access to NYU's network (NYU-NET) and internet services from an off-campus location that is as secure as being connected directly to NYU-NET on campus. VPN is required to access some secure NYU services when using a computer outside NYU-NET.

Important notes

• All NYU community members using vpn.nyu.edu are required by policy to use NYU Multi-Factor Authentication to connect to NYU VPN, as detailed below. For more information about MFA, see the Enrolling in Multi-Factor Authentication and installing the Duo Mobile App knowledge base article.

• vpn.nyu.edu requires you to choose between two options each time you log in:

  • "NYU VPN: NYU-NET Traffic Only" - Meaning that only web traffic destined for services and websites hosted on NYU’s network will be sent through the NYU VPN tunnel.

  • "NYU VPN: All Traffic" - Meaning that ALL web traffic from your VPN-connected computer will be sent first through the VPN tunnel to NYU-NET before it goes to the destination service or website, and back from that destination through NYU-NET before it reaches your computer, regardless of where the destination service and website is hosted. Note that this option is required in order to connect to most NYU Libraries resources.

Note that at this time, these items only affect vpn.nyu.edu not the other global NYU VPN servers listed below (vpn.berlin.nyu.edu, vpn.abudhabi.nyu.edu, etc.).

Installing the Cisco Secure Client AnyConnect VPN

To install the VPN client for a macOS computer, follow the instructions below. Note: It is necessary to use the Cisco AnyConnect client, not the built-in macOS VPN software. 

1. Download the macOS Cisco Secure Client. You may be prompted to enter your NYU NetID and password.

2. If the downloaded .DMG file does not open automatically, double-click it to open it.

3. In the "AnyConnect" window that opens, double-click the "AnyConnect.PKG" file to launch the installer.

4. On the "Introduction" screen, click Continue.

5. On the "License" screen, click Continue, then, in the window that opens, click Read License, then Agree.

6. If prompted with the "Destination Select" screen, click Continue to accept the default location.

7. IMPORTANT: You must make these exact selections in order for the software to work correctly: On the "Installation Type" screen, deselect "Web Security" and "Posture" so that only the checkboxes next to VPN and Diagnostics and Reporting Tool are selected, then click Continue. 

8. On the "Standard Install" screen, click Install.

9. Type in your computer's administrative password, if prompted, and click OK. 

10. The software will install. When complete, click Close, and move the installer files to the Trash. Note: After installation, the Cisco AnyConnect client automatically updates, so you will not need to check back to this page for new versions.

If you're having trouble installing the VPN client on your Mac, you may need to adjust your security settings. This Apple support article explains how to open apps from an unidentified developer:

1. On your Mac, choose Apple menu > System Settings, then click Privacy & Security in the sidebar. (You may need to scroll down.)

2. Go to Security, then click Open.

3. Click Open Anyway.

This button is available for about an hour after you try to open the app.

4. Enter your login password, then click OK.

Setting up NYU VPN

1. Any time you want to establish a VPN connection to NYU-NET, open the "Applications" folder on your computer, open the "Cisco" folder, then double-click the Cisco AnyConnect Secure Mobility Client icon to launch the client.

2. In the window that opens, type the appropriate server address for your location (the text in bold, below) into the textbox, then click Connect.
   Note: Some of the below server addresses were updated in March 2014. Be sure to use the exact addresses listed below. 

   • New York and NYU global sites not listed below: vpn.nyu.edu

   • Abu Dhabi: vpn.abudhabi.nyu.edu

   • Berlin: vpn.berlin.nyu.edu

   • China:
     NYU community members or affiliates with a NetID who are visiting NYU Shanghai for a short period of time should use:

     1. NYU Shanghai full-time student, faculty and staff: vpn.shanghai.nyu.edu

   • Note: NYU students, faculty, and staff who live and/or work in Shanghai should contact the NYU Shanghai Technology Services for VPN support.

   • Florence: vpn.florence.nyu.edu

   • London: vpn.london.nyu.edu

   • Prague: vpn.prague.nyu.edu

   • Tel Aviv: vpn.telaviv.nyu.edu

3. Skip to the login screen instructions in step 3, below.

Establishing an NYU VPN Connection

Each time you want to connect to NYU's network using NYU VPN, follow these steps:

1. Open the Cisco Secure Client.

2. In the box to the left of the “Connect” button, enter vpn.nyu.edu then click Connect.

   1. If you are using one of the global server addresses listed in step 2 above (i.e., any VPN address except vpn.nyu.edu), enter your NYU NetID and password in the "Username" and "Password" fields, then click OK.

   2. If you are using vpn.nyu.edu:

      1. Select “NYU VPN: NYU-NET Traffic Only” or “NYU VPN: All Traffic” (see note at top of page)

      2. A new window or tab will open in your default web browser, displaying the standard NYU Login (SSO) prompt. Enter a valid NetID and Password then select Login

      3. The standard NYU MFA (Duo) prompt will open. Authenticate using the default method that appears or by selecting “Other option” to select or configure another method (Duo Push, passcode, Touch ID, etc.). 

      4. After successful MFA authentication, the Duo prompt in the browser window is replaced with a “Secure Client” screen indicating VPN connection success.

      5. The Cisco AnyConnect Secure Mobility client screen will also indicate a successful connection.

      6. To access an online NYU service (NYU Email, NYUHome, etc.), go to it in the same web browser (either in the “Secure Client” tab or a new tab).
         
         

Note: If you quit the browser (e.g., end the session) or log out of any NYU service, you will be disconnected from VPN and will need to repeat the process on slides 3-5 to reconnect.

Ending an NYU VPN Connection

When you are ready to cancel or terminate your VPN connection, follow these steps:

1. Select Disconnect in the Cisco Secure Client if you're already connected to VPN, or Cancel if you have not yet connected to VPN.

2. If you were already connected to VPN, a new tab or window will open in your default browser displaying NYU's standard Logged Out screen.