This content is viewable by Everyone
VPN
- Audience: Affiliate, Faculty, Staff, Student, Technical Partner
- Service Support Team: HCL Network Data
- Supporting Training:
- Service Category: Network & Wireless
- Day-to-day Contact: Tom Chen
- Service Manager: Steve Young
- Service Support Team: HCL Network Data
- Service Owner Team: IT Infra Network Operations
How to Request Access
Active Directory user account and DUO are required to sign on to Pulse Secure VPN.
Description
UCSF Pulse Secure VPN can be accessed by (1) using the Pulse Secure VPN client on your computer or smartphone client or (2) using the VPN web portal. All methods require that you have a UCSF Active Directory account and Duo two-factor authentication. See VPN Web Portal for more details.
The Pulse Secure VPN installed client is an application that runs on your desktop, laptop or mobile device and allows you to connect directly to the UCSF network as if you were on campus. When you are connected to the UCSF network, all your applications will work the same way they do when you are on campus.
Because locally installed Pulse Secure VPN client simplifies access when you aren't on campus, it's a good idea to make it your first choice when connecting remotely. More information about how to Install and Use Pulse Secure VPN Client (Windows & Mac) is available, or contact the IT Service Desk for assistance.
Benefits
- Single Unified Client - Reduce management complexity with only one client for remote and on-site access
- Stateful Endpoint Compliance - Ensure that all devices comply with security requirements before connecting
- Single Sign-on - Simple, secure and streamlined access to on-premises and cloud-based resources
Getting Support?
You can find more information about VPN on our VPN Frequently Asked Questions page, or call the IT Service Desk for assistance at 415-514-4100.
Using Pulse Secure VPN
Use of the Pulse Secure VPN client is required to run:
- A full desktop email client, such as Microsoft Outlook or Apple Mail, from your desktop or laptop
- A terminal session to access a server's command line
- A remote desktop session initiated to connect to another computer at UCSF
The Pulse Secure VPN client is not required to use:
- The native email client on your iOS or Android phone or tablet
- Cloud applications such as UCSF Outlook Web (email.ucsf.edu), Box, DocuSign, Qualtrics or Zoom.
Connect on mobile devices
Download Pulse Secure from Google Play or the App Store to connect using Apple iPads, Apple iPhones or Android devices. See VPN Web Portal for more details.
Connect via the UCSF web portal
The UCSF VPN web portal is your alternative method for accessing UCSF applications when you are on a non-UCSF computer and you cannot download or install local Pulse Secure VPN client. See VPN Web Portal for more details.
Important: The web VPN portal is only an alternative tool to access limited internal resources and does not provide the same full functionality and access as the locally installed Pulse Secure VPN client. We recommend installing Pulse Secure VPN client via software.ucsf.edu on nonpublic computers you use for UCSF work whenever possible. This is a one-time install.
Pulse Secure IP range assignment:
Below are the current IP and ranges assigned to Pulse VPN. For departmental IP who require specific firewall policy or access-list update to allow access please refer to list below. Please reach out to Tom Chen if you have further questions regarding VPN IP assignment. Thank you!
Pulse Secure desktop client IP range:
10.48.0.0/17
10.49.0.0/17