Service overview
The McGill VPN allows for secure communications over the Internet to a specific network, such as McGill's network. It requires user authentication and uses the IPSec or TLS/SSL protocols to encrypt data. Connecting to the McGill VPN ensures members of the McGill community have access to the network and the data they are sending and receiving is secure.
IMPORTANT: New VPN client being deployed
- McGill's IT Services are in the process of replacing the Cisco Secure Client with the GlobalProtect VPN Client.
- Both VPN clients will be able to connect to McGill's Network until October 5th 2026. After that date, only the GlobalProtect VPN client will be allowed to connect to the McGill Network.
Important information for the installation of the client:
If you have a McGill managed computer (owned and managed by McGill), the new client will be installed automatically on your computer in the next few weeks.
For personal computers, you will need to install the GlobalProtect client and uninstall the Cisco client by following the instructions in the section "Installing and connecting to McGill's VPN" below.
IMPORTANT: McGill managed computers - running both clients concurrently
During the transition period until the end of 2026, the Legacy Cisco client will not be removed immediately from McGill-managed computers but you must use the GlobalProtect VPN client.
|
Do not start both VPN clients at the same time. Here is a comparison of the icons to help you discern them in your Windows System tray, Mac toolbar or Linux launcher. | |
IT Services managed computers' new VPN Pre-Logon and Always On
Pre-logon: Pre-Logon allows the VPN connection to be established before you sign in to Windows. This enables remote devices to communicate with McGill services during the sign-in process.
Always On automatically maintains the VPN connection while a Windows session is opened, reducing the need to manually connect to maintains access to McGill services.
If your computer is managed by a OneIT unit (MedIT, Engineering, Science, etc.), your Lan admin will let you know if these features are enabled.
Disconnecting VPN
Even if the VPN connection is automatically established at login, you can always disconnect at your convenience.
VPN connection is NOT needed to access most Library resources.
- McGill students, faculty, and staff can simply click on any resource link from the McGill Libraries website and they will be prompted to sign into EZproxy, a service which provides access to the materials you are allowed to view based on your student, faculty, or staff member status. See When to use the Virtual Private Network below for more information.
- McGill alumni can access Electronic resources for alumni from off-campus via EZ Proxy by simply signing in with their McGill Username and Password when prompted.
Due to licensing restrictions, only McGill students, faculty, and staff are allowed to access restricted library resources, whether through VPN or EZproxy.
You will be prompted to authenticate with 2FA every time you log into VPN. This applies whether you are on or off campus.
When to use the Virtual Private Network (VPN)
When you are not connected to the McGill network (e.g., working from home), you must use the VPN to access McGill restricted sites and resources, including:
- printing to uPrint machines via device drivers
- accessing McGill computers and servers via Remote Desktop Protocol (RDP), e.g., staff computers, Banner INB and ApplicationXtender
- personal drives (F:, P:, W:) on the McGill network
- accessing infrastructure management services
- accessing McGill WMS sites on staging.mcgill.ca or on development servers such as RAS and QA
- using some of the mobile apps recommended by McGill Libraries. (Note: You do not need VPN to access Library resources via direct links on the Library website except for the ones listed here.)
Please note: You will be prompted to authenticate with 2FA every time you log into VPN. This applies to all users whether they are on or off campus.
The following resources do not require VPN:
- McGill's public web site pages (www.mcgill.ca) and the site admin interface for live sites (it is required for staging sites)
- Outlook on the web (https://outlook.com/mcgill.ca)
- Personal storage on OneDrive (cloud file storage)
- Most Library resources. (Exceptions apply for certain mobile apps recommended by McGill Libraries as well as some resources, including those listed here.)
- Microsoft Teams and other Microsoft 365 apps
- Minerva
Not sure if you need to use VPN?
See When to use VPN and Remote Desktop (RDP)
Who can use it
McGill students, faculty, staff, affiliates (non-McGill staff who work in McGill-affiliated hospitals, or McGill-affiliated companies/professionals providing services to McGill), and visitors (such as visiting faculty). Retired faculty and staff are also eligible.
How to request and access the service
What credentials you need to set up a VPN connection
Note:
VPN access requires two-factor authentication (2FA).
- McGill students, faculty, and staff (including retirees): You need a McGill Username and McGill Password.
- Affiliates and visitors: A sponsor who is a full-time McGill faculty or staff member can request a McGill Username for you by submitting the Affiliate account creation form.
- McGill-affiliated companies: A sponsor who is a full-time McGill faculty or staff member can request a "restricted VPN account" to allow external McGill-affiliated employees secure access to restricted servers and services (e.g., application servers) from off campus. Please contact the IT Service Desk and provide details about the affiliated party and the type of VPN access needed.
Installing and connecting to McGill's VPN
IMPORTANT: Installation on personal computer
Below, you will find instructions to install GlobalProtect on your personal computer. If your computer is a McGill owned and managed computer, YOU DO NOT NEED TO INSTALL THE CLIENT. It will be automatically installed before October 5th.
Install instructions.
To install the GlobalProtect client and uninstall the Cisco Secure Client, follow the instructions for your operating system:
Note: If your platform is not listed here please contact the IT Service Desk and they will assess your VPN needs on a case-by-case basis. In many cases, there are alternatives.
Once you have finished accessing McGill restricted sites, disconnect from the McGill VPN as there are a limited number of simultaneous VPN connections available.
NOTE: Verify the version of the GlobalProtect Client
- Open the GlobalProtect client.
- On the window that opens, click the hamburger icon and select Settings.
- Click on About on the left menu and the next screen will display the version number.
NOTE: Automatic timeout
VPN connections are terminated automatically after 24 hours, regardless of being active or not.
Cost
There is no cost associated with this service. If you are a student, the cost is covered under the IT portion of your student fees.
Availability
This service is available 24 X 7, except during scheduled and unscheduled maintenance. Check the System Status page for announcements regarding service interruptions.
Best practices & policies
When you have finished accessing McGill restricted sites, disconnect from the VPN. There are a limited number of simultaneous VPN connections available.
Training & documentation
See VPN setup instructions in the Connecting to McGill's VPN section above.
Support
Report an issue/Request support for VPN
Contact the IT Service Desk