CUHK VPN (Virtual Private Network)

CUHK VPN allows CUHK users to securely connect to the campus network from the Internet (such as from a home broadband service). Data transferred in between is encrypted.

Some CUHK websites / online resources require VPN when accessed from outside the campus network. For effective use of network resources, other non-campus-related network traffic will go through your Internet Service Provider (ISP) as if you’re not connected to the CUHK VPN (i.e. split-tunnel).

Available to

Staff & students

Service Charge and Application

Free, no application required

Service Availability

24 X 7; except maintenance period

Off-Campus Access to Library E-Resources

Please use Library’s Easy Access system via the links provided in the Library website or LibrarySearch for off-campus access to Library E-Resources. Current CUHK VPN (launched in Aug 2023) is no longer required for this access. You may refer to CUHK LIB at: for more information.


Set up and Connect CUHK VPN

Click the link below to reach the set up guide landing page.  Make sure you’ve logged in before clicking the links to instructions for specific platforms.


Click here to reach the set up guide landing page.

Details of CUHK VPN

Max connection session: 12 hours with 1 hour inactive time out.   You can view the connected time from the app.  For details, please refer to FAQ #3 from ITSC Knowledge Base (requires sign-in).


  • Protect user’s sensitive information transferred over the Internet
  • By restricting data/computing resources to be accessible only from the campus network, system developers/system administrators/data owners can effectively reduce the number of possible points (i.e. attack surface) from which an unauthorized user may gain access.


Services Require VPN Connection

  • The following central IT resources or services require a campus network connection when you’re outside CUHK.
    • CUHK Restricted Webpage at
    • CUPIS – CU Personnel Information System
    • CUSAP Financial System
    • IOPAS – Integrated Outside Practice Administration System
    • SPUS – Staff Profile Update System
    • SSAS – Staff Superannuation Administration System
    • ITSC managed Research Computing Platforms (Newcluster, AVES, GAIA)
    • Kaspersky anti-virus download center
    • Camtasia & Snagit License Registration – Details
    • RDP (Remote Desktop Protocol) – policy
    • SMB (Server Message Block) – policy
    • Wake-on-LAN
    • ITSC Computing Account Application and Management System
  • Access ClassNet, a wired network in CUHK classrooms
  • For department IT services, please consult related departmental IT support.


  1. Android 13 users may see an error message ‘AccessDenied’ after sign-in. Refer to the Known Issue section in the CUHK VPN setup guide for Android for a workaround (requires sign-in).
  2. Some users may already have been using the same GlobalProtect app provided by other institutions. While Windows app and macOS app support multiple profiles for such a scenario, Linux app and mobile apps (iOS, iPadOS and Android) do not.  For the latter cases, users must sign out of the app before accessing VPN services from other institutions.
  3. You may experience an unstable VPN connection and even fail to connect from mainland China even followed all steps correctly. Most of the University systems do not require a VPN connection. You can do your email, access eLearning system, browse CUHK websites, etc. through any Internet connection. Please check out services that require a VPN connection.
    On the contrary, access to some teaching and learning systems and tools may be restricted to the campus network. The University has therefore subscribed a third party VPN add-on service for teachers, teaching assistants, and students who are currently staying in Mainland China to facilitate their online teaching and learning activities.