What is bsecure VPN?
The bSecure VPN service is a collaboration between Network Operations and the Information Security Office.
What is bsecure remote access?
The bSecure Remote Access VPN (Virtual Private Network) service, using the Palo Alto Networks GlobalProtect software, allows CalNet ID–authenticated users to securely access the UC Berkeley network from outside of campus as if they were on campus and encrypts the information sent through the network. There are three tunnels:
How many tunnels are there in a VPN?
There are three tunnels: Split Tunnel is the default and is used to allow users to access on-campus resources. When using the split tunnel option, any traffic meant for destinations on campus will go through the GlobalProtect client and VPN tunnel.
Does Google use VPN?
However, traffic meant for other sites like Google will not use the VPN tunnel. Full Tunnel (listed as “Library Access and Full Tunnel”) directs all traffic, regardless of the destination, through the GlobalProtect client and VPN tunnel. All client traffic is routed through the campus network with an IP address associated with the campus.
No Action Needed
When the update is made, most users will have a seamless experience. Users and support staff do not need to take any action.
Edge Cases
The first issue relates to some regions of Verizon LTE wireless Internet service. During our original implementation we found that in a small number of Verizon LTE customers would connect successfully, but then not be able to reach any sites.
More Info & Contact
Please read the knowledge base article on bSecure GlobalProtect: Remote Access Portals (link is external) for more detailed information. If you have any questions about this updated service, please contact Sean Schluntz (sschluntz@berkeley.edu (link sends e-mail) ).
Why change VPN services?
The Cisco VPN software is at end-of-life and will no longer be supported.
How to Install
If your computer has the managed Berkeley Desktop for Windows or macOS, you can install the "GlobalProtect VPN" from Big Fix (for Windows) or the Self Service application (for macOS) on your computer.
What to Expect
The bSecure Remote Access VPN will require you to login with your CalNet ID and passphrase and do the 2-Step (using Duo) to connect.
Keeping EH&S Applications Secure
EH&S has implemented temporary security parameters to reduce vulnerabilities across our applications. In order to use EH&S applications, you will now need to either
Install the bSecure VPN on your device
UC Berkeley uses Palo Alto Networks GlobalProtect software for the bSecure Remote Access VPN service. Take steps to install and start using bSecure VPN (link is external) today.
What is remote access VPN?
The Remote Access VPN (Virtual Private Network) service allows CalNet ID authenticated users to connect to the UC Berkeley network from outside of campus, as if they were on campus, and encrypts the information sent to the network.
Is Cisco VPN still available?
Note: The Cisco VPN will no longer be available as of September 30, 2019. It is being replaced by a new service called bSecure Remote Access VPN, based on the GlobalProtect application from Palo Alto Networks. Go to bSecure Remote Access VPN site for more information and download instructions.
