Remote Access Services—VPN and Citrix
Also known as VPN, Citrix, RDP, or XenApp.
CUIT provides two methods to connect to the Columbia network from a remote location: VPN and Citrix.
Please note: The Citrix software is also used by other groups at Columbia such as SIPA. The information on this page only applies to CUIT Citrix.
Most of Columbia’s systems can be accessed directly in your web browser without using VPN (virtual private network) or Citrix, freeing up licenses for other users. Columbia U Secure wi-fi eliminates the need to use VPN while on campus to access Columbia administrative resources. However, a few restricted administrative applications require the CUIT VPN. VPN is also is used to connect to shared files on the University network from a remote location. If you are a CUIT customer that pays for access to the Columbia Central Server, you can use CUIT Citrix to access certain applications and resources on the server. Before utilizing either remote access service, review the Columbia University Remote Access Policy for specific requirements and guidelines.
If you are remote or on an insecure (unencrypted) wireless networks on the Columbia campus and you need to:
- Access your shared drive files (e.g. “H drives”)
- Access restricted administrative applications:
Please note that the R25 classroom scheduling application on the Morningside Campus is only accessible when you are physically on campus.
CUIT recommends that you use VPN in conjunction with logging into Remote Desktop Protocol (RDP) to connect to Columbia’s Windows servers or workstations.
...on your desktop/laptop computer (preferred)
Follow our step-by-step VPN installation instructions, which include detailed instructions on installing the software client and using Duo MFA to log in to the VPN. (If client is already installed, skip to step 3: “Launch Cisco AnyConnect client”.)
...on your mobile device
- iOS: Visit the App Store, download and install the Cisco AnyConnect app. Enter vpn.columbia.edu for the server name.
- Android: Visit the Google Play Store, download and install the Cisco AnyConnect ICS+ app. Enter vpn.columbia.edu for the server name.
If you are remote and need fast access to:
- Connect to the Columbia Central Server for access to your shared files (“Workgroup Space” or "H-Drive". Please note that CUIT strongly suggests that you use VPN to access your shared files. Citrix is not preferred because it is not designed or recommended for connecting to the University servers.
- For downloading certain Windows applications (only available if your department is eligible for the program):
Visit http://citrix.cuit.columbia.edu and click Install to download Citrix.
You must have an Active Directory account (ALPHA or ADCU domain) in order to use the CUIT Citrix service. You can check if you are on the ALPHA domain by looking at your login screen: it will display either ALPHA\yourUNI or ADCU\yourUNI. If you would like to join the ALPHA domain, please visit the Shared Drive Account Administration service page.
- Find and double click the Citrix application
- Log in using your Columbia UNI and password
Cloud-based services provided by CUIT use the same strong encryption employed by banks and other high-security sites, which protects the privacy of your data. Please note that if you receive warning messages from your web browser stating that a site may not be secure, you should not proceed to the site.
Most countries allow open access to the Internet, allowing you to use applications in your browser directly, as well as VPN and Citrix, just like you would at home.
No. Under recommendation from CUIT Security and the Office of General Counsel, CUIT does not provide the VPN access that would allow CU affiliates to visit Western sites while in China.
CU faculty and staff can use the CUIT VPN service for encrypted access to Columbia resources that are operated on the Columbia Network (ARC, SAS, SDR, etc) while in China. However, using CUIT’s VPN service in China will not provide them with access to any off-campus resources (including web access to cloud services like LionMail).
As of 2018, the following websites and apps are known to be blocked by China’s firewall, using IP blocking, DNS tampering, keyword filtering, deep packet inspection, URL filtering, and manual enforcement. Note that this is not an exhaustive list.
- All Google services (Gmail, Translate, Search, Drive, Play Store, etc)
- Western News media
Yes, however CUIT strongly suggests that you use VPN to access your shared files. Citrix is not preferred because it is not designed or recommended for connecting to the University servers.