University Firewall Change – ARD & VNC

On Tuesday, July 13th, ISC will block inbound Apple Remote Desktop (ARD) and Virtual Network Computing (VNC) traffic on the University border firewalls (full message below).

NOTE: Apple Remote Desktop (ARD) is used to remotely connect from one Mac to another. Virtual Network Computing (VNC) is an open remote desktop standard but is not supported by DART.

Will this affect me:

DART Supported Users

Yes, if you use either ARD or VNC, connect to Pulse Secure first. Please go to https://www.med.upenn.edu/dart/vpn-instructions.html and follow the instructions to install Pulse Secure

-OR-

Non-DART Supported Users

Yes, if you use either ARD or VNC, go to https://www.isc.upenn.edu/how-to/university-vpn-getting-started-guide and follow the instructions to install the University VPN Client.

If you are unable to use ARD or VNC after 7/13/2021, please contact your local support provider for assistance.

ISC Message:

This is a reminder that on July 13th, 2021 ISC will block inbound Apple Remote Desktop (ARD) and Virtual Network Computing (VNC) traffic on the University border firewalls. This will block inbound ARD/VNC traffic from off-campus regardless of port, though outbound ARD/VNC should remain unaffected. Campus representatives at Firewall Governance have approved this change to mitigate external attacks using these protocols, and which will significantly improve Penn's information security posture. 

In order to use these protocols from off-campus, we encourage users to use the University Client VPN. The University Client (GlobalProtect) VPN service is for the entire campus community, and provides encrypted and authenticated access to the PennNet network using PennKey and Two-Step Verification. The University Client VPN service provides access to the general campus network, creating a similar experience from a remote location as if connected to PennNet on campus.

Users will continue to be able to ARD/VNC to their workstations after they have successfully connected to the VPN service.

ISC has created an extensive user guide for getting started with the University Client VPN service at https://www.isc.upenn.edu/how-to/university-vpn-getting-started-guide. ISC has also created a comprehensive troubleshooting guide for the University VPN at https://www.isc.upenn.edu/how-to/university-client-vpn-troubleshooting-guide. We encourage our campus IT colleagues to share these guides with their ARD and VNC users and if any issues arise to contact Client Care for further assistance. “