Installing and using VPN on a Windows computer

VPN (Virtual Private Network) is software that provides password-protected access to NYU's network (NYU-NET) and internet services from an off-campus location that is as secure as being connected directly to NYU-NET on campus. VPN is required to access some secure NYU services when using a computer outside NYU-NET.

Important notes

• All NYU community members using vpn.nyu.edu are required by policy to use NYU Multi-Factor Authentication to connect to NYU VPN, as detailed below. For more information about MFA, see the Enrolling in Multi-Factor Authentication and installing the Duo Mobile App knowledge base article.

• vpn.nyu.edu requires you to choose between two options each time you log in:

  • "NYU VPN: NYU-NET Traffic Only" - Meaning that only web traffic destined for services and websites hosted on NYU's network will be sent through the NYU VPN tunnel.

  • "NYU VPN: All Traffic" - Meaning that ALL web traffic from your VPN-connected computer will be sent first through the VPN tunnel to NYU-NET before it goes to the destination service or website, and back from that destination through NYU-NET before it reaches to your computer, regardless of where the destination service and website is hosted. Note that this option is required in order to connect to most NYU Libraries resources.

Note that at this time, these items only affect vpn.nyu.edu, not the other global NYU VPN servers listed below (vpn.berlin.nyu.edu, vpn.abudhabi.nyu.edu, etc.)

Installing the Cisco Secure Client AnyConnect VPN

Note: If the below software installer does not open correctly when using Internet Explorer, please use the Chrome or Firefox browser instead.

To install the VPN client on a Windows computer:

1. Download the Windows Cisco Secure Client. You may be prompted to enter your NYU NetID and password. 

   1. ARM-based Windows devices can instead use the download here.

2. When asked whether you would like to save the installer, click Save File.

3. In your computer's Downloads folder, find and double-click the "cisco-secure-client-..." file to launch the installer. (See the Microsoft site for more detailed instructions for unzipping files in Windows, if needed.)

4. If prompted about whether you are sure you want to run this file, click Run.

5. In the "Cisco AnyConnect Secure Mobility Client Setup" window that opens, click Next >. 

6. On the "End-User License Agreement" screen, read the license agreement, click the radio button next to "I accept the terms...", then click Next >.

7. On the "Ready to Install" screen, click Install. 

8. If a "User Account Control" or other confirmation window opens, click Yes.

9. The software will install. When complete, click Finish to exit the Setup Wizard, then delete the installer file. Note: After installation, the Cisco AnyConnect client automatically updates, so you will not need to check back to this page for new versions.

Setting up NYU VPN

1. Open the "Start" menu and select the "Cisco Secure Client" icon. 

2. In the window that opens, type the appropriate server address for your location (the text in bold, below) into the textbox, then click Connect. Be sure to use the exact addresses listed below. 

   • New York and NYU global sites not listed below: vpn.nyu.edu

   • Abu Dhabi: vpn.abudhabi.nyu.edu

   • Berlin: vpn.berlin.nyu.edu

   • China:
     NYU community members or affiliates with a NetID who are visiting NYU Shanghai for a short period of time should use:

     1. NYU full-time student, faculty and staff: vpn.shanghai.nyu.edu

   • Note: NYU students, faculty, and staff who live and/or work in Shanghai should contact the NYU Shanghai Technology Services for VPN support.

   • Florence: vpn.florence.nyu.edu

   • London: vpn.london.nyu.edu

   • Prague: vpn.prague.nyu.edu

   • Sydney: vpn.sydney.nyu.edu

   • Tel Aviv: vpn.telaviv.nyu.edu

3. Skip to the login screen instructions in step 4, below.

Establishing an NYU VPN connection

Each time you want to connect to NYU's network using NYU VPN, follow these steps:

1. Open the "Start" menu and select the "Cisco Secure Client" icon.

2. In the Cisco Secure Client window, enter or select the name of the VPN server you want to use (vpn.nyu.edu, vpn.abudhabi.nyu.edu, etc.) then select Connect.

   1. If you are using one of the global server addresses listed in step 2 above (i.e., any VPN address except vpn.nyu.edu), you will see a login screen. Enter your NYU NetID and password in the "Username" and "Password" fields, then click OK.

   2. If you are using vpn.nyu.edu at any location besides NYU Shanghai:

• • 1. Select “NYU VPN: NYU-NET Traffic Only” or “NYU VPN: All Traffic” (see note at top of page)

    2. A new window or tab will open in your default web browser, displaying the standard NYU Login (SSO) prompt. Enter a valid NetID and Password then select Login

    3. The standard NYU MFA (Duo) prompt will open. Authenticate using the default method that appears or by selecting “Other option” to select or configure another method (Duo Push, passcode, Touch ID, etc.). 

    4. After successful MFA authentication, the Duo prompt in the browser window is replaced with a “Secure Client” screen indicating VPN connection success.

    5. The Cisco AnyConnect Secure Mobility client screen will also indicate a successful connection.

    6. To access an online NYU service (NYU Email, NYUHome, etc.), go to it in the same web browser (either in the “Secure Client” tab or a new tab).
       
       Note: If you quit the browser (e.g., end the session) or log out of any NYU service, you will be disconnected from VPN and will need to repeat the process on slides 3-5 to reconnect.

Ending an NYU VPN Connection

When you are ready to terminate your VPN connection, follow these steps:

1. Select the Cisco Secure Client icon in the "Start" menu or the taskbar.

2. Select Disconnect. 

3. When the connection is successfully terminated, a new tab or window will open in your default browser displaying NYU's standard Logged Out screen and the Cisco Secure Client icon will no longer display the lock icon.