SSLVPN. Using the College s SSLVPN Instructions to Connect to and Access Network Services

Transcription

1 SSLVPN Using the College s SSLVPN Instructions to Connect to and Access Network Services Susan B. Pysher, Training Coordinator College of Engineering Electronic & Computer Services (ECS) Training & Support Penn State University spysher@engr.psu.edu H:\NetworkOrientation\SSLVPN-Instructions.docx (06/08, rev 11/08)

2 Table of Contents Using the College s SSLVPN... 4 Getting Started What YOU need and What YOUR MACHINE needs... 5 Connecting to Services using SSLVPN Information You Need About Your Office Computer or Other Machines/Servers... 5 Steps to Logging Into SSLVPN Using Your Browser... 6 Receiving Errors on Login If Virus Software and Windows Isn t Current... 8 Make Network Connections Once Logged Into SSLVPN Example Connect to Network Share (College s Transfer Share) Optional Method to Connect to Network Share Login Screen appears Login with College s ENGR Username and Password Bookmark Your Network Connections for Later Use Using the BookMarks that You Saved Using Network Connect Terminal Sessions What you need to use Terminal Services Sessions How do you FIND your IP Address or Machine Name? ADD a Terminal Services Session Example Using Terminal Services Adding and Connecting to server called engrterm CONNECT to a Terminal Services Session EDITING a TERMINAL SERVICES SESSION S PROPERTIES DELETE a TERMINAL SERVICES SESSION BOOKMARK WEB BOOKMARKS ADD BOOKMARKS to Personal Web Page Using Saved Web Bookmarks Buttons Home, Meetings, Preferences, Help, SignOut MEETINGS Feature (equivalent to Adobe Connect/Breeze) Set up a New Web Meeting using SSLVPN What an Invited Meeting Invitee Receives in an Notification Message Change/Edit Meeting Details:

3 Using Other Button Options Preferences Button User Home tab General Tab Applications Tab Advanced Tab HELP Button Sign Out Button Miscellaneous Information Do You Have Another Session in Progress? CONTACT INFORMATION HELP

4 Using the College s SSLVPN Instructions to Connect to and Access Network Services Using the College s SSLVPN You can use the College s secure SSLVPN (Secure Socket Layer Virtual Private Network) to remotely connect to Network Services (network shares, etc.) by simply using your WEB BROWSER!! This replaces the previous VPN client that was available to users. NOTE: MAC Users must use Safari browser (not Firefox, etc.) Using SSLVPN, you can: Set Web Bookmarks Connect to Files Connect to specific network shares (drives) Connect using Terminal Services Session Connect using Network Connect and use all the capabilities of the machine you re connecting to (as if you re sitting at your office machine, for example) Set up web conferencing meetings (equivalent to Adobe Connect (aka Breeze) with people (no audio capability use phone conference call for audio, etc.) SSLVPN is a work in progress HOME Remote OFFICE 4

5 Getting Started What YOU need and What YOUR MACHINE needs YOU need a University Access ID and Password YOUR MACHINE needs to have updated virus definitions and current Windows updates (or you will receive errors) Connecting to Services using SSLVPN Information You Need About Your Office Computer or Other Machines/Servers To connect to network shares using SSLVPN, you need: Server and Share name the same information you would need to map a network drive on your office machine o To check the network server/share names: Use MY COMPUTER (COMPUTER on Vista) or WINDOWS EXPLORER and see the various network drives that are mapped on your office machine. Sharename \\server (drive_letter_selected:) indicates the network sharename, server name, and drive letter o Example: In Vista, you ll see: trgcomm (\\engrtrg) (N:) o Example: In WinXP, you ll see: trgcomm on engrtrg (N:) To connect to Terminal Services Sessions using SSLVPN, you will need the machine s IP (Internet Protocol) Address (example ##) OR the machine name (example: jdoe.engr.psu.edu) when connecting remotely. o To find your computer s (or another machine s) IP Address: In Windows Vista From the START button, using the Search line: type: cmd then touch [ENTER], <a window will appear> Type: ipconfig and touch [ENTER] <information about your computer appears on the screen including your IP Address> Close the window In Windows XP: From the START button, select Run, on the Run line: type: cmd then touch [ENTER], <a window will appear> Type: ipconfig and touch [ENTER] <information about your computer appears on the screen including your IP Address> Close the window 5

6 Steps to Logging Into SSLVPN Using Your Browser 1. Launch your Browser (Internet Explorer, Firefox, etc.) NOTE: Mac users MUST use Safari (no other browser will work) 2. On the Address line, type: Launch your Browser (Internet Explorer, Firefox, etc.) NOTE: Mac users MUST use Safari (no other browser will work) On the Address line, type: <Security alert window will appear> Click [OK] <Security alert window will appear> Click [OK] 6

7 3. <the SSLVPN login screen appears> 4. Login with your University Access Account ID and Password, select the Profile (COE Remote Access or Full Tunnel if located at an insecure location such as an Internet café, hotel, conference, etc.) NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password. 5. Click [Sign in] when finished <the SSLVPN login screen appears> Login with your University Access Account ID and Password, select the Profile (COE Remote Access or Full Tunnel if located at an insecure location such as an Internet café, hotel, conference, etc.) NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password. Click [Sign in] when finished 7

8 <a Loading Components window appears indicating that it will take a while> NOTE: You may get a message window to install components. Receiving Errors on Login If Virus Software and Windows Isn t Current At this point, you may receive an error if your Virus Software definitions are not up to date and/or your Windows operating system updates are not current. Example: If your virus protection software does not meet security requirements, the window will look like this. You would update your virus definitions and/or update Windows, then click [Try Again] 8

9 NOTE: If your virus definitions are not up to date, SSLVPN should launch LiveUpdate to automatically update your virus software. Once finished you can close the window and proceed with login. Once your virus protection software and Windows are up to date, you can click [Try Again] a Launching application Please wait window appears Login with your University Access Account ID and Password again, select Profile, and click [Sign In]. Login with your University Access Account ID and Password again, select Profile, and click [Sign In] 9

10 Select the Profile(example below): On the Profile line, select either: COE Remote Access Select this option most times unless you re currently in an insecure location (such as Internet Café, Conference, Hotel, etc.). COE Remote Access will only tunnel data going to Penn State. Full Tunnel Use this option if you are in an insecure location. All data will go through Penn State. NOTE: If you re going to access University systems such as IBIS/ISIS, etc., you can use COE Remote Access (for example, if you re using you re connecting from home) or you can select Full Tunnel when logging into SSLVPN if you are in an insecure area (areas such as Starbucks, Internet Café, Conference, Hotel, etc.). NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password. 10

11 6. <Your Personal webpage appears> <Your Personal webpage appears> At this point you can begin making connections. At this point you can begin making connections. 11

12 Make Network Connections Once Logged Into SSLVPN Once you ve logged in and your personal webpage appears, at this point you can begin making connections. Example Connect to Network Share (College s Transfer Share) For example, if you would want to connect to the College of Engineering s Transfer Share (drive) Under the FILES section, you can add a Share to your Profile click the Add a Windows Directory icon located at right of Files section: For example, if you would want to connect to the College of Engineering Network s Transfer Share (drive) Under the FILES section, you can add a Share to your Profile click the Add a Windows Directory icon located at right of Files section. 12

13 <a Windows Files window appears with a listing of workgroups/domains > Scroll through to find the workgroup/domain (network) you want example: look for PSU_Engineering. Example: Scroll down window and locate/select PSU_ENGINEERING then select the server and share you want to connect to. Example: Scroll down window and locate/select PSU_ENGINEERING then continue to select the specific server and share you want to connect to. Example: Scroll down window and locate/select PSU_ENGINEERING then continue to select the specific server and share you want to connect to. 13

14 Optional Method to Connect to Network Share OPTIONAL METHOD You can also make a network connection to shares using the Browse line. In the Browse line (upper right), you can type the \\server\share then click [BROWSE] Example: To connect to Colleges Transfer share - \\engrcdc\transfer OPTIONAL METHOD You can also make a network connection to shares using the Browse line. In the Browse line (upper right), you can type the \\server\share then click [BROWSE] Example: To connect to Colleges Transfer share - \\engrcdc\transfer Login Screen appears for you to log in with your College ENGR username (yourusername@engr.psu.edu ) and password, then click [Continue]. Login Screen appears for you to log in with your College ENGR username (yourusername@engr.psu.edu ) and password, then click [Continue] 14

15 Login Screen appears Login with College s ENGR Username and Password Once you ve identified the network share you want to connect to, a login screen appears. Enter your College ENGR username (yourusername@engr.psu.edu) and password, then click [Continue]. Example show below: Once you ve identified the network share you want to connect to, a login screen appears. Enter your College ENGR username (yourusername@engr.psu.edu) and password, then click [Continue]. <the network share appears you are now connected> <the network share appears you are now connected> You can access any files that appear 15

16 Bookmark Your Network Connections for Later Use The shared appears you can then BOOKMARK this connection for use later. Click the Bookmark Current Folder (upper right). Once the share appears, you then bookmark this connection for use later. Click the Bookmark Current Folder (located in upper right of screen) 16

17 Give Bookmark a Name (the \\server\share will be the default bookmark name that appears unless you change it) and add a Description (optional), then click [Add Bookmark] when finished: Give Bookmark a Name (the \\server\share will be the default bookmark name that appears unless you change it) and add a Description (optional), then click [Add Bookmark] when finished. 17

18 <your bookmark appears in your Profile> <your bookmark appears in your Profile> 18

19 Using the BookMarks that You Saved To use Bookmarks you save, simply click on the Bookmark name and it will connect you to the share, etc.: To use Bookmarks you save, simply click on the Bookmark name and it will connect you to the share, etc. NOTE: This is the same for terminal sessions and internal websites. 19

20 Using Network Connect Under Client Application Sessions, you can choose Network Connect and click [Start] if you want to connect to the network within COE similar to using the Cisco VPN client. Once connected, you can connect to your applications as you would at the office provided you have the software on the computer you re using.. NOTE: If you re going to access University systems such as IBIS/ISIS, etc., you can select COE Remote Access when logging in, or select Full Tunnel if in an insecure area when logging into SSLVPN. 20

21 Network Connect window appears click [Hide] to hide window. In TaskBar (located at far right) you ll see a padlock icon connected to the secure VPN. that will indicate that you re At this point, you would perform any functions just as you would sitting at your office computer. 21

22 Terminal Sessions Using SSLVPN you can connect to a server/machine using the Terminal Services Sessions feature. NOTE: Mac users cannot use Terminal Services What you need to use Terminal Services Sessions: To connect to a machine using Terminal Services Session, you will need to have the following information: Your machine s IP address OR the Machine Name Example - IP Address: ## Example - Machine Name jdoe.engr.psu.edu A machine s RDP ( Remote DeskTop) setting must be turned ON (enabled) to connect remotely to it. You can ask your technical contact/system administrator to check the Remote Desktop setting to be sure that it is enabled. 22

23 How do you FIND your IP Address or Machine Name? To find your IP address or a machine name, you can either check with your Technical Contact or System Administrator OR do the following: To find your computer s (or another machine s) IP Address: In Windows Vista From the START button, using the Search line: type: cmd then touch [ENTER], <a window will appear> Type: ipconfig and touch [ENTER] <information about your computer appears on the screen including your IP Address> Close the window In Windows XP: From the START button, select Run, on the Run line: type: cmd then touch [ENTER], <a window will appear> Type: ipconfig and touch [ENTER] <information about your computer appears on the screen including your IP Address> Close the window 23

24 o To find your machine name, you can check with your Technical Contact/System Admin to obtain information OR from START button, go into MY COMPUTER (COMPUTER in Vista). If you use VISTA, from START button, select COMPUTER, select System Properties (or look at the bottom of the window (Option: Go into CONTROL PANEL>System & Maintenance>System to get to the same window containing the Computer (Machine) Name.) Machine name can also be viewed here Full computer name: jdoe.engr.psu.edu JDOE Domain name RDP (Remote Desktop) setting information can be found under Advanced System settings-remote tab JDOE.engr.psu.ed Full computer name: jdoe.engr.psu.edu 24

25 If you use Windows XP, from START button, select MY COMPUTER, select View system information under System Tasks at left. When the window appears, you can select Computer Name tab to find the machine name, and Remote tab will show Remote Desktop settings (Option: Go into CONTROL PANEL>System & Maintenance>System to get to the same window containing the Computer (Machine) Name.) JDOE.engr.psu.edu 25

26 ADD a Terminal Services Session Example Using Terminal Services Adding and Connecting to server called engrterm To ADD a new Terminal Session, under Terminal Sessions, click the Add a Terminal Session icon at far right: To add a new terminal session, under Terminal Sessions, click the Add a Terminal Session icon at far right: 26

27 <the Add Terminal Services Session screen appears> 27

28 EXAMPLE: We ll add a sample Terminal Services Session to a Server called engrterm Enter a Bookmark a name Enter a description Type in IP address or Machine Name of machine you want to connect to You can leave the Client Port and Server Port areas blank Select 32-Bit (True Color) Check various options here Click [Add] when finished 28

29 After you click [Add], the Personal Webpage appears again and should display the terminal session that you just added. After you click [Add], the Personal Webpage appears again and should display the terminal session that you just added. CONNECT to a Terminal Services Session To CONNECT to the Terminal Services Session that you added, click the Session bookmark. To connect to the Terminal Services Session that you added, click the Session bookmark. 29

30 <a screen should appear indicating Connecting to server/machine > <a screen should appear indicating Connecting to server/machine > <a logon screen should appear for you to login> Login with your username and password [From that point on until you close the session, you can use any applications or perform functions as you would normally] Close the session when finished by clicking the X at top of screen and when the message appears that you are going to disconnect, click [OK] When you disconnect from the terminal services session, you ll be taken back to the Personal Webpage once again. 30

31 EDITING a TERMINAL SERVICES SESSION S PROPERTIES You can edit Terminal Services Session properties at anytime. From the Personal Webpage, to edit a Terminal Session bookmark, click the Item Properties icon located at right of the bookmark. From the Personal Webpage, to edit a Terminal Session bookmark, click the Item Properties icon located at right of the bookmark 31

32 <the Edit Terminal Services Session window appears make any necessary changes, then click [Save Changes] at bottom of screen. <the Edit Terminal Services Session window appears make any necessary changes, then click [Save Changes] at bottom of screen. Click [Save Changes] when finished 32

33 After you click [Save Changes], your Personal Webpage appears again. After you click [Save Changes], your Personal Webpage appears again. DELETE a TERMINAL SERVICES SESSION BOOKMARK You can DELETE a Terminal Services Session bookmark that you ve added by clicking the Delete Bookmark icon at far right of bookmark. To DELETE a Terminal Services Session bookmark that you ve added, click the Delete Bookmark icon at far right of bookmark. 33

34 WEB BOOKMARKS You can add bookmarks to specified web pages on your Personal Webpage when you use SSLVPN. You can add any bookmarks to web pages on your Personal Webpage when you use SSLVPN. 34

35 ADD BOOKMARKS to Personal Web Page To add a bookmark, click the Add a Bookmark icon at far left of Bookmark area. To add a bookmark, click the Add a Bookmark icon at far left of Bookmark area. 35

36 <the Add a New Bookmark window appears> Enter the information for your bookmark and click [Add Bookmark] at bottom of screen when finished. Example: Bookmark to Training Sharepoint site: <the Add a New Bookmark window appears> Enter the information for your bookmark and click [Add Bookmark] at bottom of screen when finished. Example: Bookmark to Training Sharepoint site: <the new bookmark appears under the Web Bookmarks section on the Personal Webpage> <the new bookmark appears under the Web Bookmarks section on the Personal Webpage> 36

37 Using Saved Web Bookmarks To use the bookmark, simply click on the bookmark you created to launch the web page. Repeat the process adding other bookmarks you d like to include. To use the bookmark, simply click on the bookmark you created to launch the web page. <the new bookmark appears under the Web Bookmarks section on the Personal Webpage> Use these buttons to: Repeat the process adding other bookmarks you d like to include Open in a new window Item Properties go back into the bookmark to make any changes 37

38 Buttons Home, Meetings, Preferences, Help, SignOut Use the Buttons in upper right of your screen select other options and to sign out: HOME takes you to your Personal Profiles Webpage MEETINGS you can create online meetings (like Adobe Connect/Breeze) PREFERENCES set your personal preferences HELP provides you with online help concerning the use of SSLVPN SIGN OUT Sign out of the SSLVPN 38

39 MEETINGS Feature (equivalent to Adobe Connect/Breeze) Using SSLVPN, you can use the Meetings feature to set up web conferences. Audio must be conducted using the phone. Set up a New Web Meeting using SSLVPN From your Personal Webpage, to create a new meeting, click [Meetings] button (upper right of your Personal Webpage window) 39

40 <Meetings windows appears> If you click [NEW MEETING], a window appears: 40

41 Example: Complete the screen Add date/time, add users to invite, Identify a Conductor (host) for meeting, check Display password checkbox so that users will have the password to enter the meeting (if unchecked, you would have to provide the password in some other way): ADD a user to be invited at the User line, type in the address of the user then click [ADD]: (repeat for other users) 41

42 Example: One user added: 42

43 Setting a Conductor (host) of the meeting - You can identify a different user as the Conductor of the meeting. Only one Conductor can be identified Highlight the user on the list who is to be the Conductor, then click [Set as Conductor] (Conductor must be an IVE user?) Tom to check this out Click [FINISH] when all users for the meeting have been added and Conductor has been identified. <The meeting appears in the window the appears> 43

44 What an Invited Meeting Invitee Receives in an Notification Message A person you ve invited to a meeting you ve created will receive an invitation (example below): 44

45 Change/Edit Meeting Details: You can always go back into a Meeting to make changes simply click Details next to the Meeting 45

46 Back in the Meeting Details area, make changes then scroll to bottom and click [UPDATE]. 46

47 Using Other Button Options Use the Buttons in upper right of your screen select other options and to sign out: HOME takes you to your Personal Profiles Webpage MEETINGS you can create online meetings (like Adobe Connect/Breeze) PREFERENCES set your personal preferences HELP provides you with online help concerning the use of SSLVPN SIGN OUT Sign out of the SSLVPN 47

48 Preferences Button If you click [Preferences], a window appears set your personal preferences. Click various tabs to set options. User Home tab If you select User Home: 48

49 General Tab If you select General: Set Daylight Saving Time setting and set Secure Meeting Information you can include a default address and default teleconference info in this window, then click [Save Changes] 49

50 Applications Tab If you select Applications: 50

51 Advanced Tab If you select Advanced: Set Cookies preferences, Cached Passwords preferences, Host Checker Remediation, then click [Save Preferences] when finished. 51

52 HELP Button If you click the HELP button (upper right of window) Access Online Help for your Secure Gateway Session: 52

53 Sign Out Button If you click the [Sign Out] button, you will sign off and close your network connection. <a window will appear indicating that you are about to leave a secure Internet connection. Indicate Yes to continue disconnecting. 53

54 Miscellaneous Information Do You Have Another Session in Progress? You ll receive a window indicating that there are already other user sessions in progress. 54

55 CONTACT INFORMATION HELP If you have specific questions or problems using SSLVPN, please contact: Tom Long ( ). Documentation is posted online at Instructions.pdf. A link to the SSLVPN instructions is also provided from the Training Sharepoint site (log in with Access Account ID and password) 55