Virtual Private Network (VPN) - How to Connect to the VPN at MSU on macOS

Objective

This will guide you through connecting to the virtual private network (VPN) at MSU for the first time. Future connections will not require re-installation of the components.

Environment

macOS

Before You Begin

There are a few things you'll need before you can connect to the VPN successfully. Please see KB 36 (link) for details.

Steps

1. Open a web browser and navigate to vpn.msu.edu (link)
2. Log in using your MSU email address and NetID password
3. You will be prompted to authenticate using your multi-factor authentication (MFA) credential
4. After successfully using your MFA credential, you will be prompted to install the F5 Endpoint Inspector
5. Select Download for the "Endpoint inspection client components required" prompt
6. When prompted "Do you want to allow downloads from vpn.msu.edu, select Allow
7. Click on the downloads icon in Safari and double-click on the mac_f5epi.pkg file to open and install the F5 Endpoint Inspector
   Depending on your security settings macOS Catalina might display a "mac_f5epi.pkg can't be opened because Apple cannot check it for malicious software" prompt. Open your macOS System Preferences and the Security & Privacy section. In the General tab select Open Anyway next to "mac_f5epi.pkg was blocked from use because it is not from an identified developer."

   Screenshot

   

8. Complete the "Install F5 Endpoint Inspector" prompts that macOS Catalina shows.
   If during the installation macOS shows "Installer would like access files in your Downloads folder" prompts select OK to continue.
9. After macOS shows "The installation was successful" select Close to continue.
10. Return to Safari, where the "Endpoint inspection client components required" prompt should still display, and select Click here when the installation completes to continue.
11. Select Allow for the "Do you want to allow this page to open the F5 Endpoint Inspector?" prompt.
    If macOS Catalina requires permission for the "F5 Endpoint Inspector" access to certain folders on your computer a prompt will display. Select OK to continue.
12. The F5 Endpoint Inspector application will automatically open, and your browser will show "Checking for security software..."
13. After some brief moments the "Checking for security software..." completes and your browser will show the "Welcome to F5 Networks" home page.
     
    Screenshot

    

14. Under Launch Browser Client, select the level of VPN you wish to connect to (if you have more than one).
15. Select Start for the "Browser needs permission to start VPN" prompt.
16. Select Download for the "Network access client components are required" to download the mac_f5vpn.pkg file.
     
    If macOS Catalina shows the "mac_f5vpn.pkg can't be opened because Apple cannot check it for malicious software" prompt select OK and follow the same steps as installing the Inspector file above by allowing the installation under System Preferences and Security & Privacy and selecting Open Anyway.
    
    After macOS shows "The installation was successful" for Install F5 VPN select Close to continue.
17. Return to Safari, where the "Network access client components required" prompt should still display, and select Click here when the installation completes to continue.
18. Select Allow for the "Do you want to allow this page to open the F5 VPN?" prompt.
19. You're done! You're now connected to the VPN for the first time. After connecting Safari opens a smaller window showing a Connected status. You may minimize the window to hide it. Note that closing this window will also terminate the F5 VPN connection.
    Screenshot

    

Additional Info

You can right-click the red icon in the systray and select Terminate Connections when you no longer need the VPN.

An installable client is available to download if you prefer that over using the browser to connect each time. See KB 30 (link) for those instructions.