SFU VPNget help

Your SFU account must be secured with SFU Multi-Factor Authentication to use this service.

What is SFU VPN?

The SFU Virtual Private Network (VPN) is a way for faculty and staff to remotely connect to SFU's internal network using a secure (encrypted) and private connection. This service also provides access to SFU systems that are typically inaccessible while working remotely.

SFU VPN enables:

  • Secure access to departmental file servers (shared drives, Y: drives, shared staff folders, etc.)
  • Remote access to on-campus printers.
  • An encrypted way to access other resources that require an on-campus network connection to use.

When should I use SFU VPN?

Unlike commercial VPN solutions, SFU VPN does not by-pass travel restrictions or re-route traffic to improve internet performance. Many SFU services (Canvas, SFU Mail, Zoom) also don't require SFU VPN to use. 

SFU VPN is only recommended if you need to:

  • Securely work with confidential SFU data while connected to an unsecured network (such as a Wi-Fi hotspot).
  • Remotely access resources on SFU's internal network (such as shared drives).

How do I access SFU VPN?

To access SFU VPN you will need:

  1. An SFU account (faculty or staff) that is enrolled in SFU's Multi-Factor Authentication.
  2. The free version of the FortiClient VPN app.
  3. The connection settings listed below.

For more detailed instructions, please see our how-to guides to get started.

For best practices while using SFU VPN, see our Information Security Remote Work page.


Available to: SFU Faculty and Staff
Connection Name: SFU VPN
Remote Gateway: vpn.its.sfu.ca
Port: 10443
Client Certificate: None

How to Guides

Frequently Asked Questions

Do I need to use the FortiClient VPN app if I already use another VPN app?

Yes, you will need to use the FortiClient VPN app to connect to SFU VPN. Other client connections will be rejected.

You can download a free version of the client on the FortiClient download page. 

Which resources will I have access to while using SFU VPN?

The SFU VPN service will connect you to most enterprise resources at the University. If you have resources managed by your department please reach out to your local support points to see if they can take advantage of SFU VPN. 

What's the difference between SFU VPN and remote desktop connections?

SFU VPN is a way for your own devices to securely connect with the SFU campus network without needing an on-campus workstation (such as an office PC). This lets your device directly connect to shared folders and other resources while off-campus.

With a remote desktop connection (also known as RDP), you remotely control an on-campus workstation by sending mouse clicks, movements and other desktop commands over the internet. RDP is a great way to access your on-campus desktop but comes with the technical overhead of maintaining an on-campus workstation. 

Does SFU's DUO authentication system work with SFU VPN?

SFU VPN will only work with SFU's Multi-Factor Authentication service. 

If you are using CAS-DUO at SFU, you will need to un-enroll by emailing its-help@sfu.ca. Once your un-enrollment has been confirmed you can then enroll for SFU Multi-factor Authentication.

I manage credit card information at SFU. Does SFU VPN meet PCI Data Security Standards? 

No, SFU VPN is not PCI compliant. If you manage credit card information at SFU and are using SFU VPN, please follow SFU's best practices. If you have questions or concerns, please email pci@sfu.ca

Can I log in to SFU VPN using a sponsored / departmental account?

At this time, SFU VPN is unavailable to sponsored accounts since it requires SFU's multi-factor authentication (MFA) service (which does not support sponsored accounts).  

We recommend signing in to SFU VPN using your personal SFU account and then accessing any sponsored accounts once connected. 


SFU Faculty and Staff 



Additional Questions

If you have further questions about SFU's VPN service please contact the IT Service Desk at its-servicedesk@sfu.ca or call 778-782-8888.