New CUHK VPN (Virtual Private Network)

Set up and Connect New CUHK VPN

Click the link below to reach the set up guide landing page.  Make sure you’ve logged in before clicking the links to instructions for specific platforms.

Click here to reach the set up guide landing page.

Details of CUHK VPN

Max connection session: 12 hours with 1 hour inactive time out.   You can view the connected time from the app.  For details, please refer to FAQ #3 from ITSC Knowledge Base (requires sign-in).

Benefits

• Protect user’s sensitive information transferred over the Internet
• By restricting data/computing resources to be accessible only from the campus network, system developers/system administrators/data owners can effectively reduce the number of possible points (i.e. attack surface) from which an unauthorized user may gain access.

Services Require VPN Connection

• The following central IT resources or services require a campus network connection when you’re outside CUHK.
  • CUHK Restricted Webpage at http://www.cuhk.edu.hk
  • CUPIS – CU Personnel Information System
  • CUSAP Financial System
  • IOPAS – Integrated Outside Practice Administration System
  • SPUS – Staff Profile Update System
  • SSAS – Staff Superannuation Administration System
  • ITSC managed Research Computing Platforms (Newcluster, AVES, GAIA)
  • Kaspersky anti-virus download center
  • Camtasia registration list
  • RDP (Remote Desktop Protocol) – policy
  • SMB (Server Message Block) – policy
  • Wake-on-LAN
  • ITSC Computing Account Application and Management System
• Access ClassNet, a wired network in CUHK classrooms
• For department IT services, please consult related departmental IT support.

• When using CUHK VPN service, users are subject to the following policies:
  • Wired Network Use Policy for General Users
  • Wireless LAN (Wi – Fi) Acceptable Use Policy and Guidelines
  • Computer Network – Policies and Guidelines on Access and Usage
• No concurrent access to VPN is allowed regardless of the connection methods – through ClassNet, ResNet or non-CUHK connection. This mechanism insures the fair share of network resources.
• If you use a shared PC, sign out from the VPN app after use. Refer to FAQ #2 from ITSC Knowledge Base for details (requires sign-in).
• There will be suspension of access to CUHK VPN / campus network if ITSC observes abnormal network traffic from your device / account.

1. Android 13 users may see an error message ‘AccessDenied’ after sign-in. Refer to the Known Issue section in the CUHK VPN setup guide for Android for a workaround (requires sign-in).
2. Some users may already have been using the same GlobalProtect app provided by other institutions. While Windows app and macOS app support multiple profiles for such a scenario, Linux app and mobile apps (iOS, iPadOS and Android) do not.  For the latter cases, users must sign out of the app before accessing VPN services from other institutions.
3. You may experience an unstable VPN connection and even fail to connect from mainland China even followed all steps correctly. Most of the University systems do not require a VPN connection. You can do your email, access eLearning system, browse CUHK websites, etc. through any Internet connection. Please check out services that require a VPN connection.
   On the contrary, access to some teaching and learning systems and tools may be restricted to the campus network. The University has therefore subscribed a third party VPN add-on service for teachers, teaching assistants, and students who are currently staying in Mainland China to facilitate their online teaching and learning activities.