Home ▻ Public Sites▻Information Solutions and Services▻Services for Staff▻Remote Access to IT Services▻Client-based VPN

Client-based VPN

A client-based Virtual Private Network (VPN) service to allow users to access application services that are typically restricted to the University of Galway wired network. 

The following systems can be accessed using a client-based VPN:

  • Agresso P2P Invoicing
  • Custom application/system: For example, HR Office applications, License servers, Unix-based machines (typically SSH) etc.
  • All macOS/Linux users: All users working remotely using a macOS/Linux device must use the Client-based VPN.

Request access

Financial System (Agresso) - Invoicing

To request access, log a ticket with the Library & IT Service Desk under the following category:

Include the following information in the Request Detail box

  • The name of the staff member requiring the access
  • Email address of the staff member
  • University of Galway Staff ID
  • Operating system of your off-campus device
  • Remember to tell us that you require remote access to Financial System (Agresso) - Invoicing

Ensure that your PC/laptop meet ISS security requirements to allow the VPN service to be installed on your computer.

Custom application/system

To request access, log a ticket with the Library & IT Service Desk under the following category:

Include the following information in the Request Detail box:

  • The name of the staff member requiring the access
  • Email address of the staff member
  • University of Galway Staff ID
  • Operating system of your off-campus device
  • IP Address(es) of the service/system and ports that you require access to (for example: access to 10.1.2.3 over https tcp/443)
  • Include as much information about the system or service you require access to.
  • Reason for requesting access
  • Remember to tell us that you require a Client-based VPN

Ensure that your PC/laptop meet ISS security requirements to allow the VPN service to be installed on your computer.

Note: Students/external users should log a ticket with an approval email from their Head of Unit.

Install the Client-based VPN

The instructions below are based on a Windows 11 device. Other combinations will follow a similar process with slightly different screen messages.

Windows 11

  1. Download the Ivanti Secure Client for Windows
  2. Open and run the installation executable
  3. Once the client has been installed, create a connection: Ivanti VPN Client Connection Information‌
  4. Click Connect.

  5. When connected, you should also see the Ivanti Secure icon will be added to the taskbar and you can connect/disconnect from there: ‌

    Pulse connected icon

    You may log out of the VPN connection via the client itself by right clicking on the icon, and selecting disconnect.

macOS

  1. Download the Ivanti Secure Client for macOS
  2. Open and run the installation executable
  3. Once the client has been installed, create a connection: ‌Ivanti VPN Client Connection Information
  4. lick Connect

  5. When connected, you should also see the Ivanti Secure icon will be added to the top bar. You can connect/disconnect from there.‌

    You may log out of the VPN connection via the client itself by right clicking on the icon, and selecting disconnect.

Linux

ISS provide support for Linux versions on a best effort basis only.

At time of writing, the following Linux versions are currently supported by Ivanti Secure. All clients connecting to the VPN service must be up-to-date and receiving security patches.

  • Ubuntu 24.04 LTS and later
  • Debian 13 and later
  • CentOS 9 and later
  • RHEL 7.9 and later

It may be possible to install the client on other versions of Linux and the following step by step instructions include steps for supported and unsupported clients. These instructions covers installation on Ubuntu 19.04 which is an unsupported client from the perspective of Ivanti Secure.

On a supported version of Linux, download the client, install it, install dependencies (step 4), and jump straight to the step 9

  1. Download the version for your Linux Distribution (you may be asked to login to your Office 365 account to access these links):

    32 bit CentOS\RHEL - Click Here 

    32 bit Unbuntu\Debian - Cick Here
    64 bit CentOS\RHEL - Click Here    
    64 bit Unbuntu\Debian   - Click Here

    The below parts will require to switch to root either using the sudo su - or su -.

  1.  Install the client:

    dpkg -i ps-pulse-linux-9.1r2.0-b69-ubuntu-debian-64-bit-installer.deb
  1. Edit the hardcoded Ubuntu versions to add support for 19.04:

    cd /usr/local/pulse/
    sed -i "s/UBUNTU_VER\ \=\ 18\ \]/& \|\|\ [\ \$UBUNTU_VER\ \=\ 19 \]/" PulseClient_x86_64.sh
  1. Install missing dependencies for the Pulse Client (there will be some errors that we fix later):

    cd /usr/local/pulse/
    ./PulseClient_x86_64.sh install_dependency_packages
  1. Create extra folders for missing dependencies:

    cd /usr/local/pulse/
    mkdir /usr/local/pulse/extra
    mkdir /usr/local/pulse/debs
  1. Download missing/old libraries:cd /usr/local/pulse/debs

    wget http://archive.ubuntu.com/ubuntu/pool/main/i/icu/libicu60_60.2-3ubuntu3_amd64.deb
    wget http://archive.ubuntu.com/ubuntu/pool/universe/w/webkitgtk/libjavascriptcoregtk-1.0-0_2.4.11-4_amd64.deb
    wget http://archive.ubuntu.com/ubuntu/pool/universe/w/webkitgtk/libwebkitgtk-1.0-0_2.4.11-4_amd64.deb
  1. Extract the downloaded deb packages, don’t install them:

    cd /usr/local/pulse/extra
    dpkg -x /usr/local/pulse/debs/libicu60_60.2-3ubuntu3_amd64.deb .
    dpkg -x /usr/local/pulse/debs/libjavascriptcoregtk-1.0-0_2.4.11-4_amd64.deb .dpkg -x /usr/local/pulse/debs/libwebkitgtk-1.0-0_2.4.11-4_amd64.deb .
  2. Edit the Pulse Client shortcut (I use vim editor, but nano, emacs, etc. can be used):

    vim /usr/share/applications/pulseUi.desktop
    Change the Exec= to Exec=/usr/bin/env
    LD_LIBRARY_PATH=/usr/local/pulse/extra/usr/lib/x86_64-linux-gnu:$LD_LIBRARY_PATH /usr/local/pulse/pulseUi
  3. Download the CA certificate, open Downloads folder and right click -> Open in terminal:

    cp DigiCertCA.crt /usr/local/share/ca-certificates/
    update-ca-certificates
    Updating certificates in /etc/ssl/certs...
    1 added, 0 removed; done.
    Running hooks in /etc/ca-certificates/update.d...
    done.
  4. Reboot your PC
  5. Launch the Pulse Client UI from the Ubuntu Search utility
    Pulse Linux Connection
  6. Add a new connection and save.

    Name:  University of Galway
    URL: https://myfiles.universityofgalway.ie/vpnclient

  7. Now you should be able to connect to the VPN.

Connect to the Client-based VPN

Windows 11

The instructions below are based on using a Windows 11 device. Other combinations will follow a similar process (with slightly different screen messages).

  1.  Open the Hidden icons on the bottom ribbon.
    Pulse No Active Connection
  2. Right click on the Ivanti Secure Access icon and select your connection to connect.
  3. Click Proceed and sign in using your Campus Account and MFA
  4. Client will connect.
  5. To check status, right click icon, select Open Ivanti Secure Access to view interface below.Pulse Connection Confirmation
  6. Disconnect VPN connection by clicking on Disconnect button.

Linux

  1. Launch the Ivanti Secure Client UI
  2. Connect to the VPN
  3. You should now be connected:

Linux Pulse Connected

Troubleshooting

Slow internet speeds when connecting to the Client-based VPN

We are aware of a bug affecting some Client-based VPN users who are using some editions of the Ivanti Secure client on Windows 10. This has been reported to our software vendor who are working on a fix.

Affected users should download and install the latest version of the Ivanti Secure client. 

Unable to access other websites while connected to the Client-based VPN

If you are able to access the required service/application using Client-based VPN, but other websites do not work, please contact the Library & IT Service Desk.