Virtual Private Network – VPN

Most of the university’s IT services are only available to university members. For this reason, some services can only be accessed within the university network.

Within the university network, i.e., on a device (PC, laptop, ...) that is connected to the university network (i.e. the LAN):

  • You do not need a VPN.

On a device that is not connected to the university network (i.e., connected via Wi-Fi or off campus):

  • You will need a VPN connection for some IT services.
  • A Virtual Private Network – VPN for short – connects your external computer to the university network and encrypts the data.

In the FAQs below, you can find an overview of the services that are only accessible from the university network.

One more urgent request...

  • Please only use VPN if it is absolutely necessary
  • and turn it off again when you no longer need it.

Establishing the VPN connection to the university network

To establish a VPN connection to the university network, you have to carry out a one-off installation of a VPN client on your PC/mobile device.

Please note: The following documents, if not marked as English are in German

For those in a hurry

Step-by-step instructions for installing the VPN client

Windows 7/8/XP users: Please note the information below in the FAQs.

English version of the instructions

Any questions?

If you encounter any problems with the installation, IT Service Desk support staff will be happy to help you.

FAQs and installation instructions

Which IT services do I need a VPN for?

On a device that is connected to the university network (i.e., the LAN):

  • You do not need a VPN.

On a device that is not connected to the university network (i.e., connected via Wi-Fi or off campus):

  • You will need a VPN connection for some IT services.

You need a VPN for...

  • Self-service portal
  • myOhm the Ohm’s digital workplace (incl. access to the QM portal)
  • Home directories and public directories
  • Content services in my.ohm
  • Access to the BayZeit flextime systemm
  • Working on websites using Typo3 (Editing intranet pages and internet pages)
  • HISinOne: accessing studium.ohmportal.de

You do not need a VPN for...

  • The university’s public website (www.th-nuernberg.eu)
  • Moodle
  • VirtuOhm and StudyOhm
  • Groupware in my.OHMportal
    • Email and calendar - Access via Zimbra webmail or client software installed on your PC/laptop/smartphone
    • Team Collaboration
  • Shibboleth services such as Studisoft and FAUbox
  • MS Teams
  • Zoom
  • DFNconf

Please note: The systems listed here represent only a selection of the IT infrastructure available.

How do I update my password in the VPN?

The GlobalProtect VPN access uses your my.ohm password, which you also use for VirtuOhm, for example.

If you change the password for my.ohm, you must also update your VPN password. To do this, open the VPN:

Click

  • on the three horizontal bars at the top right
  • Einstellungen (Settings)
  • Sign off

You will then be asked for your VPN login details. Enter your user name and your (new) my.ohm password.

Does the VPN work with older Windows versions like Windows 7 or 8?

Windows 7, Windows 8, or Windows XP

No.

These systems are not allowed VPN access to the university network. Central IT recommends changing to a more current operating system.

For more information, please contact Central IT’s user support at

Why does by VPN connection drop when I use a mobile hotspot?

Repeated drops of the VPN connection can occur under the following conditions:

  • VPN connection of a PC/Laptop established through a mobile hotspot (from a mobile device/smartphone)
  • Mobile service provider: Deutsche Telekom

In this case, please check the following mobile service settings:

  • Access point: internet.telekom must be set (not: internet.v6.telekom)

Background: Our VPN does not use any IPv6 addresses. It can only be accessed with IPv4.

Does the VPN work with older MacOS versions?

The VPN works with older MacOS versions no older than Catalina (10.15). The GlobalProtect VPN cannot be installed on devices with MacOS versions that are older than Catalina.

VPN access is possible with:

  • macOS 10.15: Catalina
  • macOS 11: Big Sur
  • macOS 12: Monterey
  • macOS 13: Ventura

VPN access is not possible with:

  • OS X 10.8 Mountain Lion
  • OS X 10.9 Mavericks
  • OS X 10.10: Yosemite
  • OS X 10.11: El Capitan
  • macOS 10.12: Sierra
  • macOS 10.13: High Sierra
  • macOS 10.14: Mojave

What other systems can be used for the VPN?

Other operating systems (Mac, Linux ...)

Currently supported operating systems (website from PaloAlto, the manufacturer of the GlobalProtect VPN):

Why does my VPN connection sometimes drop out?

Network connection

If you have problems with the VPN connection, you should first check whether the computer was able to establish a working internet connection.

If the message “No internet access” appears when connecting to the Wi-Fi, then the VPN connection will not be able to function either.

VPN terminations (which are not due to the central infrastructure) may occur due to

  • the throttling of private DSL connections during the day by the internet service provider or
  • other members of the household using the connection at the same time.

Power saving mode for Centrino notebooks

If the VPN connection is established using a Centrino notebook, the Wi-Fi adapter’s power saving mode may be to blame. You can try installing an updated driver for the Wi-Fi module, or turning off the module’s power management.

Firewalls

Any firewalls used must allow external connections to the VPN client. In many firewall products, this setting is called “server privilege”.

Checking the network settings

  • Check to see if a static IP address has been entered. This should be replaced by dynamic assignment via DHCP.
  • Does the firewall on the Windows system allow the VPN client to access the network?
  • Some VPN clients require special configuration if they are used behind a NAT (network address translation) connection, which will often be the case in “foreign” networks.
  • Is a proxy server from the home or company network still configured on the system?
  • Is a UMTS connection being used? Some VPN clients do not work with such connections.
  • Is a network bridge active on the system? This can also make it difficult, if not impossible, to establish a VPN connection.
  • Is there a “leased connection” on the system, for example via a modem, which always tries to log in first? This will prevent the establishment of the VPN tunnel.

Is it possible to establish a VPN connection without installing a client?

No. At the moment, there is no “VPN workplace” available, which allows VPN access without a client.

MacOS: Warning during installation that app developer is not verified by Apple

You may receive a warning at the start of the installation that the GlobalProtect app has not been registered with Apple by a verified developer. In this case, hold down the Control key when you click on the installation package.

Linux: What distributions can I use to install the GlobalProtect VPN?

Ubuntu and RedHat

GlobalProtect supports Ubuntu and RedHat.

Ubuntu versions older than version 20 are no longer supported, that means it is not possible to connect via VPN with Ubuntu 16 or Ubuntu 18.

OpenSuse

GlobalProtect cannot be used under OpenSuse Leap. In this case, the installation will appear to be successful but it will not be possible to establish a VPN connection.

Other distributions

If needed, below is the link to the compatibility list from PaloAlto, the provider: