Secure Sockets Layer Virtual Private Network (SSL VPN) provides CUHK staff with a secure remote access to on-campus resources over an Internet connection. Once connected, all traffic for accessing on-campus resources go through the VPN tunnel. The rest traffic goes through your original Internet connection.
DUO Two Factor Authentication (2FA) must be enabled
Set up and Connect CUHK SSL VPN with
Windows (, )
Mac (, )
Details of CUHK SSL VPN
Max connection session: 8 hours with 1 hour idle time out
Protect your sensitive information transferred online
Avoid lengthy idle time and moderate IP addresses usage
Prevent network resource abuse by prohibiting multiple logins to CUHK VPN / ClassNet
Unify access restriction methods on CUHK online resources. System developers therefore can restrict their resources by asking users to connect to SSL VPN with email address (staff: firstname.lastname@example.org , students: email@example.com) + OnePass (CWEM) password.
3. Services Require VPN Connection
Services Require VPN Connection
The following central IT resources or services require a campus network connection when you’re outside CUHK.
You may experience an unstable VPN connection from mainland China with the gradual upgrade of China’s Great Firewall. Most of the University systems do not require a VPN connection. You can do your email, access eLearning system, browse CUHK websites, etc. through any Internet connection. Please check out services that require a VPN connection.
For MacOS / iOS / iPadOS: With the network policy in Mainland China, you may not able to download the SSL VPN client (Aruba VIA) from Apple App Store. Please download the app before you go to the mainland. You can then connect to SSL VPN in the mainland.
Kaspersky Endpoint Security 11 blocks Aruba Connection on MacOS:
Aruba will prompt error “Fail to resolve Server name” or it does not prompt window for user authentication. Please close Kaspersky and then connect to SSL VPN.
Reference: ITSC Knowledge Base