Topics Map > WiscVPN
Topics Map > Software > Remote Access
Topics Map > Software > macOS Applications
Topics Map > Software > Windows Applications > Software Center

Connecting to the SSCC Network via VPN

VPN (Virtual Private Networking) allows a computer to connect to the SSCC network as if it were in the building regardless of its physical location. This gives you access to SSCC network drives and printers. It gives you a UW IP address, which allows you to use services like the many library databases which are restricted to UW IP addresses. It also encrypts all of your network traffic, protecting your privacy on public wireless networks. UW-Madison uses Palo Alto GlobalProtect for its VPN solution.

Download GlobalProtect

To connect to the campus VPN service, you'll need to download and install the GlobalProtect client for your computer. If you're using an SSCC-managed machine you are able to install Global Protect via Software Center if it is not already installed.

Download the macOS client

For Linux installations, see DoIT's KB Article: 85193 .  

Mobile Client Applications

Clients for iOS and Android can be found in the appropriate app store.

Multifactor Authentication

The SSCC requires the use of multifactor authentication (MFA) via Duo to access various SSCC services including, the SSCC VPN, Linstat, and Silo.  Duo is the same MFA system you use for your NetID. You must have MFA set up before using the VPN and you will be required to authenticate every time you connect to the VPN. Information for Token Users
To set up MFA or to modify Duo's settings, you can go to the SSCC's Duo MFA portal.

Install the Client

Once the installer has finished downloading (GlobalProtect64.msi on Windows or GlobalProtect.pkg on Mac) run the installer, keeping all the default settings. Once it is installed you are ready to connect to the VPN.

Enter sscc.vpn.wisc.edu in Portal (note that it must be sscc and not ssc), give your SSCC username and password, then click Connect. 

GlobalProtect Portal Entry

After logging in using your SSCC username and password you will be asked to confirm the login on your phone. You'll then see Connected.

Connected

Installing the MacOS Client

macOS may try to block the GlobalProtect client from installing due to security requirements:
MacOS System Extension Blocked
If you see this message, click Open Security Preferences. Then click the Allow button in the bottom right, check the box next to Palo Alto Networks, click OK, then restart your computer to apply the changes.
MacOS Security & Privacy Menu

Changing Your VPN Portal

Most SSCC members will only need to use the SSCC portal, but it may be necessary for you to connect to a different VPN portal to access different resources. A portal is an address that allows you to create a secure connection to a server or network in order to access services unique to that server or network.  The SSCC has a unique VPN portal that is different from the default UW-Madison portal. Changing the portal is simply changing what VPN server you are connecting to. The instructions below will show you how to add an additional portal to your VPN and change between portals.

  • To open GlobalProtect in Windows, click on the up-arrow in the bottom right of your taskbar, then click on its icon (GlobalProtect Icon)
  • To open GlobalProtect in macOS, click on its icon (GlobalProtect Icon) in the menu bar at the top right and choose Show Panel.

On the panel, click the menu icon in the upper-right of the panel. Then click Settings.
settings option.png

Next, click Add and then enter the new portal address in the field. Then click Save. You can now close the window.
portal address.png

You've now added the new portal. To change which portal you are connecting to, open the panel again from the taskbar. It will look slightly different than before. You will be able to choose the new portal from the dropdown at the bottom of the panel.
Portals

Using a Token for MFA Authentication

If you would like to use a token to log into the VPN and have one already, please contact the Help Desk and include the serial number printed on the back of your token in your email. The token must be black and white colored, with the words "OTP c100" printed on the front - we cannot use the blue and green tokens that say "Duo" on the front. If you do not have a token, please let us know and we will issue you one.

Duo Token

When you log in, first give your username, then note the code on your token. When you are asked for your password, enter your actual password followed by a comma and then the code from your token (e.g. my_password,12345).


Keywords:
sscc, network, connect, vpn, remote, access ssccvpn, globalprotect, global, protect 
Doc ID:
93546
Owned by:
Russell D. in Social Science Computing Cooperative
Created:
2019-08-05
Updated:
2024-08-08
Sites:
Social Science Computing Cooperative
Clean URL:
https://kb.wisc.edu/sscc/connecting-to-the-sscc-network-via-vpn