Connect to the UCL China Connect service

This guide will show you how to download and install the software needed to use the UCL China Connect service. See our Troubleshooting section for common issues.

This guide is aimed at...

• Students

Before you start...

• Your UCL user ID and password
• An internet connection
• A computer running one of the supported web browsers

Contents

• Instructions
  • Download the FortiClient VPN Client
  • Install the FortiClient VPN Client
  • Configure the VPN
  • Connect the Forticlient VPN Client
  • Test your VPN connection to the university
  • Disconnecting your VPN connection
• Help and Support

Instructions

Download the FortiClient VPN Client

Download the correct VPN client installer for your computer by right-clicking the appropriate link below and saving the file to your computer.

• Windows (103MB)
• macOS (69MB)
• Linux .rpm (86MB)
• Linux .deb (99MB)

Install the FortiClient VPN Client

1. Run the downloaded installer.
2. Click the Yes, I have read and accept License Agreement check box, then click Next.
   
   
   
   
   Fig.1 – Welcome to the Forticlient VPN Setup Wizard
3. Change the installation destination, if desired. Click Next.
   
   
   
   
   Fig.2 – Installation destination folder
4. Click Install.
   
   
   
   
   Fig.3 – Ready to install FortiClient VPN
5. Wait for the installation to complete.
   
   
   
   
   Fig.4 – Installing FortiClient VPN
6. Click Finish.
   
   
   
   
   Fig.5 – Completed the FortiClient VPN Setup Wizard

Configure the VPN

1. The FortiClient will now be running. Right-click on the icon in the System Tray and click Open FortiClient Console.
   
   
   
   
   Fig.6 – Open FortiClient Console in System Tray
2. Tick the checkbox and click I accept
   
   
   
   
   Fig.7 – Welcome to FortiClient VPN
3. Click Configure VPN
   
   
   
   
   Fig.8 – Configure VPN
4. In the New VPN Connection window, enter the following information:
   
   VPN: SSL-VPN
   Connection Name: UCL
   Remote Gateway: china-ucl.ucl.ac.uk
   Tick Customize port and enter ‘18443’
   Tick Enable Single Sign On (SSO) for VPN Tunnel – the options below this box disappear.
   Click Save
   
   
   
   
   Fig.9 – New VPN Connection

Connect the FortiClient VPN Client

To improve your connectivity to UCL resources login to the Fortinet Client VPN. You will need your UCL username and password to log in.

1. Click SAML Login
   
   
   
   
   Fig.10 – SAML Login
    

   Please note: If you see a blank page after clicking SAML Login, please see our Troubleshooting section.

2. Enter your userID@ucl.ac.uk and click Next.
   
   
   
   
   Fig.11 – UCL sign in
3. Enter your UCL password and click Sign in.
   
   
   
   
   Fig.12 – Enter password
    

   Please note: If you see a 'Failed to establish the VPN connection. This may be caused by a mismatch in the TLS version.’ error message, please see our Troubleshooting section.

4. The VPN Client will start connecting. When the connection is complete, the VPN Connected window will display.
   
   
   
   
   Fig.13 – VPN connected

Test your VPN connection to the university

Once connected as above, test the connection by browsing to Moodle (UCL's virtual learning environment) and logging in with your user name and password.

Disconnecting your VPN connection

When you no longer need the VPN connection, open the VPN Connected window and click Disconnect.

Help and Support

Please join the UCL China Connect DingTalk support group by scanning the QR code here. You will be prompted to download and register for the DingTalk app.  If that group is unable to resolve the problem, then please contact UCL’s IT Service Desk.

Troubleshooting

The FortiClient software is taking a long time to download and/or install. Is this normal?

The FortiClient software downloads are quite large, but they are hosted on a server in mainland China. The time taken to download depends on your network speed in mainland China.

I’m having trouble installing the FortiClient software

All students from mainland China will have received an email inviting them to join the UCL China Connect DingTalk support group. If you haven’t received the email please contact the IT Services desk.  A UCL representative is a member of that Ding Talk group and will provide assistance within 30 minutes (Monday – Friday, 8am – 5pm local time). If it is outside those hours, or that group are unable to resolve the problem, then please contact the IT Services desk.

When I click login button ‘SAML Login’ on the FortiClient I get a blank page. What should I do?

If you see a blank page after clicking SAML Login, please check your connection settings.

1. Click the three bars next to VPN Name (circled below) and select Edit the selected connection
   
   
   
2. At the Edit VPN Connection screen please check the Remote Gateway and Customize port details have been entered correctly as below:
   
   Remote Gateway: china-ucl.ucl.ac.uk
   Customize port: 18443
3. Click Save if you made any changes.

If you still see a blank screen after clicking SAML Login, please contact the IT Services desk.

I get the error message: ‘Failed to establish the VPN connection. This may be caused by a mismatch in the TLS version.’

To set the correct TLS version on your Internet Explorer:

1. Go to Internet Explorer > Settings > Internet Options > Advanced tab
2. Scroll down and tick the settings for TLS versions 1.0, 1.1, 1.2 and 1.3 (experimental)
   
   
   
3. Click on Apply and OK
4. Restart your device and try connecting to the FortiClient again