Why Use VPN?
Using a Virtual Private Network (VPN) provides a secure connection to the campus network from any location, as long as the device has an internet connection. VPN can be used to access campus resources (e.g., library resources, file servers) or to securely browse the internet. Due to security vulnerabilities, some services currently require VPN for access, including Canvas and MyCUInfo.
How to Download, Set Up & Use VPN
- Download: Download the VPN that will work for your device from OIT's VPN service page. Please note: If your computer is managed by Buff Techs Pro (BTP), you may already have this software installed.
- Set up: Follow OIT's setup and connect instructions for your device (see documentation column below) to connect to the VPN.
- Required setup information: The first time you connect to the Cisco VPN service, enter the following information:
- Server Address: vpn.colorado.edu
- Your CU Boulder Credentials: IdentiKey username and password
- Using VPN: After initial setup, all you need to do to use VPN is open the Cisco Secure Client application and enter your IdentiKey credentials to connect.
Security Tips to Reduce Risk Online
The Office of Information Security has compiled a great resource for how to reduce risk online. Some key things to know include:
- Use only university-provided computers and devices to access or handle sensitive university data. If you must use a personal computer, it is recommended that you use remote desktop to connect to your university-provided computer.
- Secure your home Wi-Fi router by using a strong, unique password, and enabling encryption.
- Boost Wi-Fi security by using a virtual private network (VPN), especially when using public Wi-Fi.
- Keep your software and apps updated.
- Follow university guidelines on artificial intelligence (AI).
Read the full article and find more security resources from CU's Office of Information Security.
When to Use VPN
When working remotely, many of the resources and tools to complete your daily work do not require the use of the CU's VPN. A few that do include:
- CU Boulder's file servers, like UCB Files, CIFS and NFS file sharing
- CU System administrative tools when accessed from off campus, like HCM and CU-SIS
- Microsoft Teams Calls
- Specific library databases
Note: Some countries outside the United States filter internet traffic. As a result, access to some CU resources (including VPN) may be restricted. Such restrictions are outside of CU's control and can change frequently. OIT is unable to know which resources may not be accessed from countries outside the United States.
Campus Wi-Fi Options
| Service | Available For | Features and When To Use It | Does a user need to connect to the VPN when using this service? |
|---|---|---|---|
| CU Secure Wi-Fi | All CU Boulder affiliates with an active IdentiKey | CU Secure provides access to the network in approximately 90% of all indoor building space on campus and is the network that faculty, staff and students should use, unless they are visiting an eduroam institution. | To gain access to a privileged system, a user may need to use a VPN to access those resources. Since this network is considered secured, a VPN is not needed to protect traffic in flight. |
| eduroam Wi-Fi | Visitors from participating eduroam institutions or CU Boulder affiliates who are visiting other eduroam institutions. | A federated Wi-Fi network service available on the CU Boulder campus as well as hundreds of other institutions in the United States and worldwide. | To gain access to a privileged system, a user may need to use a VPN to access those resources. Since this network is considered secured, a VPN is not needed to protect traffic in flight. |
| CU Guest Wi-Fi | Any guest visiting the CU Boulder campus. | Wi-Fi access for CU Boulder visitors that doesn't require an IdentiKey. Connections last for 24 hours. | All employees with an IdentiKey should avoid using this network, because it is intended for visitors, is not secured and only allows certain protocols. |
Remote Network Connectivity Guidance
Use this guidance to improve home internet connectivity. OIT also has a Home Networking 101 presentation available for download that goes through our recommendations, as well as a recording of the Networking 101 webinar.
Internet Connection Types
Broadband
Broadband connections are run over a cable infrastructure (i.e., coaxial cable, optical fiber and/or Ethernet).
- Cable connectivity offered by Comcast/Century Link are very common and offer technical help in setting up the connection.
- Speeds range from 25Mbps to 150Mbps for download and 1Mbps to 25Mbps for upload. Generally, this type of connectivity is considered optimal, since speeds of over 25Mbps can offer multiple people in a single residence better than good performance.
Cellular
Cellular connections are run over a wireless "cell" infrastructure and are provided by companies like AT&T, T-Mobile and Verizon.
- Speeds can vary depending on the service you are connected to. These services are upgraded in an evolution as carriers roll out better speeds over time. The most common is 4G LTE and in some metropolitan areas 5G is being adopted, though speeds are limited to your device's cellular chipset.
- Speeds range from 5Mbps to 12Mbps for download and 2Mbps to 5Mbps for upload, but will vary depending on congestion and signal to the nearest cellular tower.
- Connecting a wireless-enabled computer to a cellular device (e.g., phone or hotspot) is typically done by creating a wireless network and then connecting that device to it.
- OIT does not recommend that these types of connections be shared between more than one user at a time.
Base Recommendations
Because Zoom is the remote learning collaboration tool that is most reliant on a consistent internet connection, your ISP's speed should meet Zoom's minimum bandwidth requirement of 3Mbps.
Test your ISP's connection using CU Boulder's speed test site. A couple tips:
- Make sure to close extra tabs in your browser and quit any unnecessary applications before you click the Start button to begin the speed test.
- Be sure to test from the computer you plan on using for work or school, and make sure it is connected to Wi-Fi or a hotspot.
Any result in the download gauge showing speeds near or above 3Mbps should be acceptable. If your connectivity doesn't meet the threshold, contact your ISP to discuss other available options.
