Installation

Note: As of July 22, 2022, the branding for the campus VPN client has changed from Pulse Secure (9.1rx) to Ivanti Secure Access (22.2Rx). All other aspects of the client are the same. Any reference to Pulse Secure should be interpreted as Ivanti Secure Access.

Search for and install the Ivanti Secure Access VPN client application from the Google Play Store. Please note that Android 10 or later is required.

There are two ways to configure the VPN client: one is by automatic configuration, and the other is by manual configuration. Both methods are described below.
 

Automatic Configuration (On-boarding)

Step 1: Open a web browser and navigate to https://ps.vpn.ucsb.edu/install
android vpn screenshot

Step 2: Enter your UCSB NetID and password and click "Login"

android vpn screenshot

Step 3: When prompted, select "Already installed, continue" and follow the prompt.

Step 4: The VPN client is now configured.

Step 5: Click the "Sign Out" button in the upper-right corner of the site to finish the onboarding process.  Continue on to the last section of this page "Usage" to make a connection.

 

(Alternative) Manual Configuration

Step 1: Open the Pulse Secure app, enter https://ps.vpn.ucsb.edu/ra in the URL field, and press "Submit."

android vpn screenshot
 

Step 2: When prompted to add a connection, create a connection with the following parameters:

Connection Name: UCSB Remote Access Trusted
URL: https://ps.vpn.ucsb.edu/ra
Username: <your UCSBNetID>

Ensure that you have typed the URL exactly as listed above - http:  will not work - it must be https: 

android vpn screenshot
 

Click "Connect".

 

Usage

IMPORTANT: you must first have at least one device already enrolled with UCSB's MFA service (Duo Security) in order to connect to VPN.

Step 1: Open the Ivanti Secure Access VPN client. Tap on your "UCSB Remote Access Trusted" connection profile, select Connect.

android vpn screenshot

Step 2: The first thing you see will be a prompt explaining how to use Duo multi-factor authentication with the VPN client.  Once you have read the Pre Sign-in notification carefully, click "Proceed" to begin the authentication process.

vpn android pre sign-in notification

Step 3: Provide your UCSB NetID and password and click "Sign In." 

vpn android sign-in

Step 4: Once your UCSB NetID credentials have been authenticated, you will be prompted to enter which factor you want to use for multi-factor authentication (MFA).

Please type 'push' (no quotes) in the designated field to get a push notification via the Duo mobile application, or enter a current SMS, Duo, or hard token numerical passcode. Alternatively, you can type 'sms' (no quotes) to receive a new set of codes via SMS message on your phone (login will fail - you will need to authenticate to the VPN again to use the newly received SMS passcodes, which are good for one hour). You have a short period of time after entering this information to approve the Duo push notification or enter your code.  Click "Sign In."

You can find more about the distinctions in Duo device setup here: https://www.it.ucsb.edu/getting-started-mfa-duo/which-devices-should-i-enroll-mfa-duo.

 

vpn android push, sms, or enter code screen

Once you have verified your login via Duo (usually only a few seconds), your client will connect and the interface should change to read "Active Connection". Selecting your Connection Profile will bring up your connection profile and indicate a connection.

vpn android connection status screen

Step 5: Verify your VPN connection by using a web browser to visit https://next.noc.ucsb.edu/ip. The web page will display the network address your computer is using. If the VPN is in use, it should say “On-campus address (VPN)”.

Step 6: To disconnect from the VPN server, return to the Ivanti Secure Access VPN client app, tap the three vertical dots next to your connection profile, and tap “Disconnect”. 

closing the app