Overview
This article provides the account, security, and system requirements, installers, and instructions to set up and connect to SFU VPN.
- Account and Security Requirements
- System Requirements
- Download and install FortiClient VPN
- Configure the VPN Connection
- Connect to SFU VPN
- Troubleshoot your VPN connection
- SFU VPN FAQ's
Details
1. Account and Security Requirements
SFU VPN is immediately available to:
- Staff and Faculty
- Graduate Students enrolled in one or more courses
- Undergraduate Students enrolled in eligible programs or courses, such as Computing Science or Engineering
Additionally, your account must be enrolled in Multi-Factor Authentication (MFA).
Requesting access
If you require access to SFU VPN for work or research purposes, your supervisor can submit a request with the following information:
- Computing ID to grant access
- Reason for access
- Duration of access
2. System Requirements
As of February 24, 2025, only FortiClient VPN version 7.2.x or higher is compatible with SFU VPN.
Windows
- Windows 10 or 11 (64 bit)
- Intel processor or equivalent (ARM-based not supported)
- 2 GB RAM
- 1 GB free hard disk space
MAC
- macOS 12.0 or newer
- Intel or M-series processors
- 1 GB RAM
- 1 GB free hard disk space
LINUX
- Ubuntu 18.04 or newer; Red Hat 7.4 or newer; CentOS Stream 8, 7.4 or newer; Fedora 36 and later
- With KDE or GNOME desktop environments
- Intel processor or equivalent
- 512 MB RAM
- 600 MB free hard disk space
The full list of system requirements can be found in the FortiClient Administration Guide (7.2.0).
3. Download and install the FortiClient VPN
Download and open the corresponding installer. Then follow the on-screen instructions:
4. Configure the SFU VPN connection
- Open the FortiClient VPN application.
- On the welcome screen, select "I acknowledged..." and then select I accept.
- Select Configure VPN and configure the connection as follows. Then select Save.
Configuration for SFU VPN
| VPN Type |
SSL-VPN |
| Connection Name |
SFU VPN |
| Remote Gateway |
vpn.its.sfu.ca |
| Customize Port |
Checked |
| Port Number |
10443 |
| Client Certificate |
None |
5. Connect to SFU VPN
- Enter your SFU Computing ID and password then select Connect.
- Enter your MFA code (Windows: Answer; Mac: OTP passcode; Linux: Token) when prompted.
-
If the connection is successful, you'll see a confirmation screen with the VPN connection details:
-
To close your VPN connection, select Disconnect.
Make sure to connect to the VPN every time it's needed. The VPN disconnects when your computer is idle or sleeps. Unlike Wi-Fi, it does not re-connect automatically.
6. Troubleshoot your VPN connection
If you're having difficulty connecting to SFU VPN, see Troubleshooting connection issues with SFU VPN for common errors and resolutions before submitting a ticket.
7. SFU VPN FAQs
1. Can I use SFU VPN to bypass government or service restrictions?
Unlike commercial solutions, SFU Virtual Private Network (VPN) does NOT by-pass travel restrictions or re-route traffic. For instance, SFU VPN won't help you access websites blocked by national firewalls.
2. Can I use another VPN app to connect to SFU VPN?
Only FortiClient VPN is supported by IT Services. Other VPN apps may not comply with the university's security and privacy standards.
3. WHICH services require VPN for access?
myINFO,
FINS,
eTRACS, and Hyperion are a few of the resources that are only available while connected to the SFU on-campus network or on SFU VPN. Many online resources will be unaffected by this (such as Canvas, SFU Mail, Zoom, SFU Vault).
4. CAN I LOG IN TO SFU VPN USING A SPONSORED / DEPARTMENTAL ACCOUNT?
We recommend logging in to SFU VPN using your personal SFU account, and accessing any sponsored accounts once you are connected to the VPN.
For users who only have access to sponsored accounts for personal use (i.e., your sponsored account is only used by a specific individual, where the password and access to the account would never be shared with or transferred to others.), you can enroll in SFU's Multi-factor Authentication and contact the IT Service Desk for access to the VPN.
5. WHAT'S THE DIFFERENCE BETWEEN SFU VPN AND REMOTE DESKTOP CONNECTIONS?
SFU VPN is a way for your own devices to securely connect with the SFU campus network without needing an on-campus workstation (such as an office PC). This lets your device directly connect to shared folders and other resources while off-campus.
With a remote desktop connection (also known as RDP), you remotely control an on-campus workstation by sending mouse clicks, movements and other desktop commands over the internet. RDP is a great way to access your on-campus desktop but comes with the technical overhead of maintaining an on-campus workstation.
6. I MANAGE CREDIT CARD INFORMATION AT SFU. DOES SFU VPN MEET PCI DATA SECURITY STANDARDS?
No, SFU VPN is not PCI compliant. If you manage credit card information at SFU and are using SFU VPN, please follow
SFU's best practices. If you have questions or concerns, please email
pci@sfu.ca.
If you have a question about SFU VPN but don't see it here, please contact the Service Desk.
Submit a ticket