ITSC’s SSL VPN ( Secure Sockets Layer Virtual Private Network ) Service allows HKUST users to access restricted services on the University network from home or from any other off-campus location with an Internet connection by:

• Creating a private encrypted connection over the Internet between user’s off-campus devices and VPN gateway.

• Split-Tunneling is configured in VPN client so that traffic destined for the HKUST Network flows through the encrypted tunnel and all other traffic goes through user’s Internet Service Providers directly. This makes the VPN connection more efficient by only encrypting what is necessary and reduces bandwidth waste.

A simplified network schematic diagram of the SSL VPN Service is illustrated below: