Information Technology at JPL

Remote Access

JPL IT - Remote Access

Remote Access Service

News & Announcements

Pulse Secure is JPL's new Virtual Private Network (VPN)

Pulse Secure will automatically be pushed to JPL subscribed Windows and Mac systems. You will see the new icon on your system and can start using it immediately!
Note: Linux users will have to manually download using the Linux Standalone Installers.

If the Pulse Secure icon does not appear on your system or if you are using a home system, you can manually download by either using the RAS Portal or by downloading the client using the Standalone Installers.

What's New?

Support for macOS Sierra - For any manual upgrades to macOS Sierra 10.12.1, you will need to upgrade to the Pulse Secure Client 5.2.5. The Pulse Secure client can be located from the VPN Standalone Installers page.

Full Tunnel and Split Tunnel VPN Types? - If you are using the Pulse Secure client (i.e. clicking on the icon) you will be asked to make a choice between Full or Split Tunnel.

Mobile RAS Portal - Using your mobile device (iPhone/iPad, Android) to remotely connect to the JPL Network just got easier. Configure and install the new Pulse Secure Mobile app.

Network Connect VPN is still accessible - Network Connect will stay active on your system until it is phased out in FY 2016.



The Remote Access Service (RAS) allows you to connect to the JPL Network from a remote location and access internal JPL websites, files on your work computer's hard drive and files on network drives.

Connecting to the JPL Network

Some commonly used JPL applications do not require Remote Access connections. You can access UMS JPL email-client, Calendaring, Jabber and JPL Public Websites directly from the Internet.

When do you use BrowserRAS vs VPN? >>

When to use BrowserRAS

BrowserRAS is generally used for brief transactions from a remote location and lets you quickly connect to JPL Intranet Web pages. BrowserRAS will timeout after 10 minutes of inactivity and you will have to re-authenticate after 2 hours.

Some common sites you can access include:

  • Timecard
  • JPL Space
  • Voice Mail Web Access
  • NearSpace

Use BrowserRAS if you cannot install VPN software on your computer (e.g., connecting from a kiosk).

US Persons have full access to JPL Intranet (websites), NASA sites, library journals. Non-US Persons have access to permitted resources only.

When to use VPN

VPN is recommended if you are working remotely for an extended period of time and require full access to JPL resources. VPN will timeout after 30 minutes of inactivity and you will have to re-authenticate after 72 hours.

VPN requires the installation of the VPN client - Pulse Secure.

US Persons have full access to the JPL Intranet. Non-US Persons have limited role based access to permitted resources only.

What is Full Tunnel vs Split Tunnel? >>

These VPN options are only applicable when connecting to the JPL Network via VPN.

What is Full Tunnel?

  • Fully simulates working on-site at JPL.
  • Allows for full access to JPL resources such as BEACON and NASA sites such as NENS
  • All network traffic is sent to the JPL network just as if you were on site at JPL. Therefore, any sites visited during a VPN Full Tunnel session is captured as it would be while physically on site at JPL
  • When using VPN Full Tunnel, you will not have access to your home network (temporarily while on VPN Full Tunnel) such as network printers and file sharing. You can resume home printing when you log off of VPN.

What is Split Tunnel?

  • A secure VPN type that does NOT fully simulate being physically at JPL.
  • You cannot access NASA sites and some JPL resources such as BEACON, while connected via VPN Split Tunnel.
  • Only encrypts traffic destined for JPL; all other traffic goes through your local network or the Internet.
  • Allows you to access your local network printer or file share while connected with VPN.

Connection Options:

  1. VPN Client (Pulse Secure)

    You can download and connect using the Pulse Secure client. For most subscribed Windows and Mac systems, you can simply click on the Pulse Secure icon or search Pulse Secure on your system.

    If you do not have the Pulse Secure client downloaded, or you are on a Linux or home system, you can download the VPN Standalone Installers.

    Note: Installation via the standalone client usually requires administrator privileges

  2. RAS PORTAL - https://connect.jpl.nasa.gov now using Pulse Secure

    RAS Portal (using Pulse Secure) is a "one-stop" portal that provides users options for connecting to the JPL Network, via BrowserRAS or Virtual Private Network (VPN), including the Research Network, from one convenient location. In addition, users can choose between VPN Types - Full or Split Tunnel.

    Note to MSL science operations team - The VPN Client (Pulse Secure) is recommended for non-JPL members of the MSL science operations team, instead of the RAS PORTAL. See option 1 above.

    TIPS and Information:

    • The OCIO strongly recommends using Internet Explorer for Windows and Firefox for Macintosh systems..
    • Google Chrome does not currently work with the RAS Portal.
    • Installation requires administrator privileges. You will be asked to enter your JPL password
    • First Time Use - Select "Always", "Allow", or "Trust" when prompted.
    • Click "Continue" at the Security Warning pop-ups.
    • You may see a "Loading Components..." message for "Host Checker", let this run and load.

    Linux users will also have to manually download using the Linux Standalone Installers.

  3. Mobile RAS Portal

    The Mobile RAS Portal makes it easier to view and connect to the JPL Network when using your mobile device (iPhone/iPad, Android). Use these Mobile RAS Portal Instructions to configure your mobile device to use Remote Access.

  4. Connect using an already installed Pulse Secure Version 5 and above

    In Pulse Secure, select the plus symbol ( + ) to add connections

    Add Full Tunnel VPN >>

    1. Type: Policy Secure (UAC) or Connect Secure (VPN)
    2. Name: JPL VPN Full Tunnel
    3. Server URL: https://jplvpn.jpl.nasa.gov/full
    4. Select: Add

    Add Split Tunnel VPN >>

    1. Type: Policy Secure (UAC) or Connect Secure (VPN)
    2. Name: JPL VPN Split Tunnel
    3. Server URL: https://jplvpn.jpl.nasa.gov/split
    4. Select: Add

Help

  • If you need assistance, please submit a Service Request, or contact the Service Desk directly at 4-HELP (818-354-4357).
https://ras.jpl.nasa.gov/