Remote Access VPN Setup

Transcription

1 Remote Access VPN Setup MWI Animal Health provides remote access to the MWI network using a VPN (virtual private network). Use the information on this site to setup and connect to the MWI VPN. Before You Get Started: You need everything on the list below to setup your VPN access. If you don't have one or more of the items below, contact the Help Desk ( or helpdesk2@mwivet.com) for assistance before you proceed. I have a business need for MWI remote access and have security access for it. I have an MWI Windows/network username and password. I have a mobile device (smartphone or tablet) with cellular/internet access that I can access on. I know the password to install a new app on my mobile device. I have received an from the Helpdesk with the subject line 'Your New MWI VPN Security Token'. I know my ABC associate/employee number. Steps to Connect: There are three major steps to set up your VPN remote access that will take approximately 15 minutes. Follow the directions for each step carefully to successfully complete the setup.

2 Step 1: Install Security Software In this step, you will setup the security software you need on both your laptop and your mobile device. Follow the directions below to (1) confirm you have the MWI AnyConnect VPN software installed on your MWI laptop and (2) install the RSA SecurID app on your mobile device. Allow ~5 minutes to complete this step. Confirm security software on your MWI laptop: 1. Your MWI laptop was scheduled to have MWI AnyConnect VPN software automatically installed when you are connected to the MWI network. Confirm you have the software by locating the MWI AnyConnect VPN icon on your desktop or by going to Start > All Programs > Cisco > Cisco AnyConnect Secure Mobility Client. Desktop icon: Start menu: 2. Open the program. NOTE: You do NOT need to click Connect yet. 3. If the program opens successfully, your laptop is ready. Now let's get your mobile device ready. IMPORTANT: If you cannot locate the MWI AnyConnect VPN program or it will not open, contact the Help Desk ( or x2940). You need this program to proceed.

3 Install security software on your mobile device: 1) Determine if you have AirWatch installed on your mobile device and use the appropriate A-B steps below. NOTE: AirWatch is an ABC/MWI information security app that manages connectivity to the MWI network including and VPN connections. If you have AirWatch installed, you will see an Agent and/or Managed Apps app on your device. If you HAVE AirWatch: A. Go to the AirWatch Managed Apps app on your device. Apple device: Tap Managed Apps Android device: Tap Agent, then Managed Apps B. Locate the RSA SecurID icon and tap the Install button. Follow the prompts and confirmation messages to install the app. NOTE: The status in Managed Apps does not always update from Processing. After a few minutes, go to the home screen of your device and locate the RSA SecurID app to confirm it has installed.

4 If you DO NOT HAVE AirWatch: A. Go to the App Store on your Apple device or the Google Play Store on your Android device and search for rsa securid. App Store: Google Play Store: B. Install the 'RSA SecurID Software Token' app on your mobile device. NOTE: While the app is free, you may need to enter the password for your mobile device in order to download it. 2) When the RSA SecurID app installation has completed, tap the icon to open it. NOTE: The RSA app will typically display on your home screen, but you may need to scroll through your screens to locate it.

5 3) The RSA License Agreement will display. Tap Accept. 4) A Welcome screen will display. You are done with the app for now. CONGRATULATIONS! You have completed Step 1. Proceed to Step 2 - Setup for the directions to setup your personal security token and PIN you will need to connect to the MWI VPN.

6 Step 2: Setup Security Token and PIN In this step, you will install your security token on your mobile device and create a personal PIN which you will use every time you connect to the VPN. You will need to synchronize information between your mobile device and your laptop and go back and forth between the two, so have both devices ready for use before you get started. Follow the directions below closely, as this is the most detailed part of the process. Allow ~10 minutes to complete this step. 1. On your mobile device, open the from the Help Desk with the subject line Your New MWI VPN Security Token. NOTE: You can forward the (including the attached file) to another account if necessary to access it from your mobile device. 2. Locate the file attachment in the , which is your personal security token file you will import into the RSA SecurID app on your phone. NOTE: The file will start with your username and end with.sdtid (i.e. username_ sdtid). 3. Tap the file attachment to open it. 4. You will be prompted with actions for the file. Tap the RSA SecurID icon. The RSA SecurID app will open to import the token. Apple device: Android device:

7 5. At the 'Token Import' step, you will be prompted to enter your token password. The password is your ABC associate/employee number. NOTE: This is your employee number that begins with '9'. Enter your ABC/MWI associate number and tap Return. 6. A 'Token successfully imported.' notification will display. Tap OK. 7. You will now be prompted to enter a PIN. IMPORTANT! You will need to setup your PIN in the MWI AnyConnect VPN software on your laptop before you can enter a PIN on your mobile device.

8 8. Leave the Token field blank and tap the arrow. Apple device: Android device: 9. A 'Tokencode' screen will display with the passcode you will need to create your PIN. 10. Now go to your MWI laptop and open the MWI AnyConnect VPN software using the desktop icon or by going to Start > All Programs > Cisco > Cisco AnyConnect Secure Mobility Client.

9 11. Click Connect. 12. You will be prompted to enter a passcode. Go to your mobile device and enter the 8-digit code that is currently displaying. NOTE: If there are 15 seconds or less remaining on the Passcode currently displaying, we recommend you wait until the next passcode displays (every 60 seconds) so there is time for the code to authenticate correctly. 13. Click OK. 14. You will be prompted to create a new personal PIN that you will enter every time you connect to the VPN. Your PIN must (1) contain numbers only, (2) be between 4-8 digits long, and (3) not start with the number 0. Enter your new PIN in the Answer: field and click Continue. 15. You will be prompted to re-enter your new PIN to confirm the digits. Enter your new PIN in the Answer: field again and click Continue.

10 16. If you entered your new PIN correctly, you will see Your new PIN has been successfully created! in the Authentication Message. IMPORTANT! Now you need to go back to your mobile device to synchronize your PIN with the RSA SecurID app to get the Passcode you need to proceed. 17. Go to the the RSA SecurID app on your mobile device. 18. Wait for the 8-digit code that is currently displaying on your mobile device to change to the next code (within 60 seconds). NOTE: If you try to re-use the code you entered before you created your new PIN, you will get an error. Waiting for the code to change is important!

11 19. Tap < PIN in the upper left corner to go back to the 'Enter PIN' screen. NOTE: If several minutes have gone by or your mobile device has locked, you will already be at the 'Enter PIN' screen and you can proceed to the next step. 20. On the 'Enter PIN' screen, enter the new PIN you just created and tap the arrow.

12 21. The 8-digit Passcode you need to connect to the MWI VPN will display. 22. Go to your MWI laptop and enter the Passcode from your mobile device in the Answer: field in the MWI AnyConnect VPN software. NOTE: If there are 15 seconds or less remaining on the Passcode currently displaying, we recommend you wait until the next passcode displays (every 60 seconds) so there is time for the code to authenticate correctly. 23. Click Continue. IMPORTANT! If a Login Failed or any other error message displays at any point, something went wrong. Contact the Help Desk ( or x2940) for assistance.

13 24. A security banner will display. Click Accept. 25. You are now temporarily connected to the MWI VPN. 26. Click Disconnect. You have successfully configured your VPN access and will learn how to quickly and securely connect to the VPN next. CONGRATULATIONS! You have completed Step 2. Proceed to Step 3 - Connect for the directions you will follow to access the MWI VPN from this point forward.

14 Step 3: Connect to MWI VPN Securely After you have successfully setup your security token and PIN, you can connect to the MWI VPN using your RSA SecurID and laptop at any time. Follow the directions below to connect in a few short steps. Allow ~1 minute to complete this step. 1. On your mobile device, tap the RSA SecurID icon to open the app. 2. Enter your PIN and tap the arrow. 3. The Passcode you will need to enter into the MWI AnyConnect VPN software on your laptop will display.

15 4. On your laptop, open the AnyConnect program and click Connect. 5. Enter the Passcode displaying on your mobile device into the Passcode field on your laptop and click OK. NOTE: If there are 15 seconds or less remaining on the Passcode currently displaying, we recommend you wait until the next passcode displays (every 60 seconds) so there is time for the code to authenticate correctly. Otherwise, you may be asked to enter the next Passcode again. 6. An MWI security banner will display. Click Accept 7. You are now connected to the MWI VPN until you choose to Disconnect, close your laptop, or your connection expires after a long period of inactivity. IMPORTANT: Use the RSA SecurID/MWI AnyConnect VPN authentication process to connect to the MWI VPN from this point forward. STOP using the previous MWI Network Connection software as it will no longer work when it is retired. You can delete the desktop icon if you prefer (single-click the icon and press Delete on your keyboard). Please contact the Help Desk ( or x2940) if you have any questions or need support.