Set up the NetOz VPN on Windows with WireGuard
Install the official WireGuard app on Windows 10 or 11, import your NetOz VPN configuration file from your setup link, connect and check it is working.
On this page
This guide walks you through connecting a Windows 10 or Windows 11 computer to your organisation's NetOz managed VPN. It takes about five minutes. You will install the free WireGuard app, download your personal configuration file and switch the tunnel on.
Before you start
- You need the setup email sent to you by NetOz on behalf of your organisation. Its subject starts with the name of your VPN, followed by "set up" and the name of this device.
- You need permission to install software on the computer. If your workplace manages your PC, you may need your IT team to install WireGuard for you.
- Use the link for this computer. Each device has its own link, and using one link on two devices stops both from connecting.
Step 1 Install WireGuard for Windows
Go to the official download page at wireguard.com/install and download the Windows installer. Run it and accept the Windows prompt asking whether to allow the app to make changes.
When installation finishes, WireGuard opens and adds a small icon to the system tray near the clock.
Only download WireGuard from the official site. You do not need any other VPN app.
Step 2 Open your setup link
Open the setup email on the Windows computer and select the link. Your browser opens a page showing:
- The name of your VPN and the device you are setting up.
- An On a phone section with a QR code. You can ignore this on a computer.
- An On a computer section with a download button.
- A What you'll be able to reach section listing the networks the VPN carries.
If the page says This link is no longer valid, the device or your access has been removed or replaced. Ask your administrator to send a new link.
Step 3 Download the configuration file
In the On a computer section, select the Download button. It is labelled with the file name, which ends in .conf and is named after your VPN and device.
Save it somewhere easy to find, such as your Downloads folder.
This file contains the private key for your device. Do not email it, copy it to another computer or share it with anyone.
Step 4 Import the tunnel into WireGuard
Open WireGuard from the Start menu or the tray icon. Select Import tunnel(s) from file in the bottom-left corner, browse to the .conf file you downloaded and choose Open.
The tunnel appears in the list on the left, using the name of the file. Selecting it shows its details, including the server endpoint and the Allowed IPs, which are the networks routed through the VPN.
You can delete the downloaded .conf file once it has been imported. If you ever need it again, you can download it from the same setup link.
Step 5 Activate the tunnel
Select the tunnel and choose Activate. The status changes to Active.
Within a few seconds, the details panel shows a Latest handshake time and the Transfer counters start to increase. A recent handshake means your computer is talking to the NetOz VPN server.
To disconnect, choose Deactivate. You can also switch the tunnel on and off from the WireGuard icon in the system tray.
Step 6 Check you can reach work systems
Open the internal system your organisation gave you access to, such as an intranet site, file share or remote desktop, using the address your administrator provided. If it loads, you are all set.
How the NetOz VPN behaves on Windows
Only work traffic uses the VPN. NetOz configurations are split tunnels. Only traffic to the networks listed under What you'll be able to reach goes through the tunnel. Normal browsing, Teams or Zoom calls and streaming still use your own internet connection, so you will not notice a slowdown and your public IP address does not change.
Leaving it on is fine. Because only work traffic is routed, you can leave the tunnel active all day. Switching it off when you do not need it is also fine. Nothing else breaks either way.
Your DNS does not change. The configuration does not set DNS servers, so Windows keeps using your normal DNS. If your administrator gave you a hostname that only works inside your organisation and it does not load, try the IP address instead and let your administrator know.
Do not edit the configuration. Settings such as the MTU are chosen by NetOz so the tunnel works reliably. Editing the tunnel in WireGuard can stop it working.
If something does not work
- No handshake time appears: the network you are on may be blocking WireGuard. Try a different network, such as a phone hotspot, to confirm. See Troubleshooting the NetOz WireGuard VPN.
- The setup page says the network changed: your organisation updated the VPN. Download the file again, remove the old tunnel in WireGuard and import the new file.
- You used the same link on another device: both will drop in and out. Ask your administrator to add a separate device for the second one.
Next steps
Was this guide helpful?
Your answer helps us keep these guides accurate.