Off Campus Access
VPN and Using Administrative Systems and Services
Before You Start
A VPN connection is required to access restricted, electronic resources at Indiana State University. ISU's web-based VPN service offers access to ISU's virtual private network (VPN), which provides authentication and encryption when you use an off-campus network. When you use the ISU VPN, you can access IP-restricted university resources and connect to network file servers. The VPN allows you to access library databases restricted to ISU students, faculty, and staff.
VPN services are available for all retired and current faculty and staff, business affiliates and educational affiliates.
Indiana State offers two options for connecting through VPN:
- Cisco VPN Client - Use of the full AnyConnect client will force all network traffic to flow through the client VPN session. (instructions found here) For accessing:
You will not be able to access any network resources, such as the home printer.
- Map network drives (or any other campus server)
- SharePoint Collaboration (Team Pages)
- RSA Token - Only needed by system administrators. If you are a system administrator, contact the help desk to receive the instructions to get RSA access.
RSA SecureID Token FAQ
What is a RSA SecureID token?
The token is a physical device which generates a random password. This provides what is known as two factor authentication. Two factor
authentication involves using "something you have" and "something you know" and usually consists of using a password and another form
of authentication such as a smart card, biometric data (fingerprints, retinal scan) or token.
Why do I need a RSA SecureID token?
Certain administrative systems are restricted and only accessible from on-campus. Employees that are required to access administrative
systems, such as Banner, from off-campus will need a token.
How do I obtain an RSA SecureID token?
To request an RSA SecureID token, fill out the RSA Token Request Form located at http://www.indstate.edu/oit/documentation/RSA Token Request Form.pdf.
The instructions are located at the bottom of the form.
What administrative systems can be accessed through the use of an RSA SecureID token?
What is the cost to my department for an RSA SecureID token?
The initial cost to a department for a staff member to have a token assigned to them is $75.00. This includes the first year of
maintenance and approximately half of the purchase price of the token. Each year afterward the department is responsible for the
annual maintenance fee of $40.00.
The department should plan on budgeting for the replacement cost every three years. In order to allow for price increases, it is
recommended that $75 be used for budgeting purposes.
What do I do if my token is lost or damaged?
Notify OIT by contacting the Help Desk (237-2910) that the token is lost or damaged and whether a replacement is desired. It is the
responsibility of the department to pay for a replacement.
Can I share my token with another employee?
Tokens are not to be shared. The tokens are registered to their owner and the owner is responsible for their use and security.
Can I use the token with my own personal PC?
For security reasons, tokens should be used only with University-provided computers. Under Indiana laws passed in 2006 you can be
held criminally liable for data breaches under certain circumstances. Please review Indiana code 4-1-10 and 4-1-11 at www.in.gov/legislative
Can support staff receive a token?
Yes, support staff can receive a token.It is recommended that the department check with HR to review policies and/or procedures
that may affect employees in this category who perform work from home.
Under what conditions does a token have to be returned to OIT?
- Employee leaves the University
- Employee accepts another position in a different department.
- Supervisor determines that the employee no longer needs access from off-campus.
What is the process to return a token?
The employee needs to return the token to the OIT central desk in the basement of Rankin Hall.
Can a token just be kept within a department when an employee leaves and then given to a new employee?
No, the token must be returned to OIT as stated above.The new employee must fill out the request form and go through the standard
If a department determines that their employees no longer need to work from off-campus and return the tokens, is part of
the annual maintenance refunded?
No, the department is responsible for the entire year of maintenance.
Token Request Form >>
Using ISU's web-based VPN service for off-campus connections
Indiana State University's web-based VPN service offers cross-platform access to ISU's virtual private network (VPN), which provides
authentication and encryption when you use an off-campus network. When you use the ISU VPN, you can access IP-restricted university
resources and connect to network file servers. The VPN allows you to access library databases restricted to ISU students, faculty,
Connecting to the web-based VPN
To configure your web-based VPN connection from off campus:
- In a browser, go to: https://isuvpn.indstate.edu
- Select ISUVPN
- Enter your Username and credentials accordingly.
- The first time you log in at that URL, the server will download and install a Java applet or a ActiveX applet to your workstation.
If you are prompted to accept a certificate and applet from Cisco, do so by selecting Always.
- Once connected you receive a Welcome Message, click continue.
- The browser window will remain open after you are connected to remain connected through the VPN. Closing this browser window will disconnect you from the VPN.
- When you browse to a site through this window you will notice a mini-toolbar will appear in the top right corner.
- Clicking on the Double Arrows will move the mini-toolbar from side to side to avoid it being on top of any links needing to be
- The Road Sign will allow you to enter a new URL in the window.
- The Home will take you back to the initial login screen.
- The "X" will log you out of the VPN and terminate the current window.
- To log out, Either click the Red "X" on the mini toolbar or from the home screen click
"Logout" in the top right hand corner of the VPN in the browser window.
Note: After 15 minutes of inactivity, you will be timed out automatically. Active connections will be timed out
automatically after nine hours.
Compatible operating systems and browsers
ISU's web-based VPN service should work with the following operating systems:
- Windows 8
- Windows 7
- Windows Vista (Enterprise, Ultimate, Business, Home Basic, Home Premium)
- Windows XP (Professional and Home) with Service Pack (SP) 2 or SP3
- Windows 2000 Professional with SP4
- ac OS X 10.5 and later (Intel Macs)
- OpenSuse 10.x or 11 (32-bit only)
- Ubuntu 7.10 or 8.10 (32-bit only)
- Fedora 9 (32-bit only)
- Red Hat Enterprise Linux 5 and 6 (32-bit only)
ISU's web-based VPN service should work with the following browsers:
- Firefox 2 or above
- Internet Explorer 7 or above
- Safari 1.0 and above
- Firefox 2 or above
You must have Sun Java Runtime Environment 5/1.5.07 or above.
Note: If you find that you need to install the Sun Java Runtime Environment (JRE), visit
Java Downloads for All Operating Systems - Sun Microsystems. Follow the
download and instruction links for your operating system.
Using ISU's VPN service for off-campus connections with
the Cisco AnyConnect VPN Client
Indiana State University's VPN service offers web-based, cross-platform access to ISU's virtual private network (VPN), which provides authentication and encryption when you use an off-campus network. When you use the ISU VPN, you can access IP-restricted University resources and connect to network file servers. The VPN allows you to access library databases restricted to ISU students, faculty, and staff. Use of the full AnyConnect client will force all network traffic to flow through the client VPN session. You will not be able to access any local resources from your remote location, essentially making your entire machine appear on campus for network connectivity.
Installing the Cisco AnyConnect VPN Client
To install for Windows, Macintosh and Linux:
- Windows, Macintosh and Linux users will first need to log into the Web base version of VPN so they can download the “AnyConnect” VPN Client. To access the web base VPN log in as described in “Using ISU's
web-based VPN service for off-campus connections”
- After you have connected using the Web base version of the VPN you will be able to select and install the “AnyConnect Client” from the left hand window. Then select “Start AnyConnect”. This will install the AnyConnect Client on your machine and auto log you in the first time. Additional instructions are in the right hand web browser window.
- Be sure to logout of the client or disconnect after you are done.
- For future sessions simply go to All Programs/Cisco and click on the “Cisco AnyConnect Secure Mobility Client”. When prompted select isuvpn.indstate.edu. A pop up window will appear, select the appropriate group (ISUVPN or ISUVPN-RSA) and enter your username and credentials. You will receive one more pop up box indicating you are logged into the VPN.
To install for Android or iPad devices:
- Download and install the Cisco AnyConnect client from the appropriate APP
Store for your device. Android users will notice there are several versions of the
client for Rooted, non-rooted and OS specific versions, select the most
appropriate for you device.
- Launch the AnyConnect Client and “Add VPN Connection…”, For the server
address enter “isuvpn.indstate.edu” and an appropriate description for the
- Launch the AnyConnect Client and have the VPN client connect to
isuvpn.indstate.edu profile created in the above step. Select the Group “ISUVPN”
or “ISUVPN-RSA” and enter your username and credentials.
- Be sure to logout of the client or disconnect after you are done.