Access to hosted Systems at ERPsourcing AG using SSL-VPN

Size: px

Start display at page:

Download "Access to hosted Systems at ERPsourcing AG using SSL-VPN"

Bertram Bates
6 years ago
Views:

1 Access to hosted Systems at ERPsourcing AG using SSL-VPN 14th October 2016 ERPsourcing AG Businesspark Husacherstrasse 3 CH Wallisellen Tel Fax ERPsourcing AG Husacherstrasse 3 Tel info@erpsourcing.ch CH-8304 Wallisellen

2 Table of content 1 Information Author(s) Approval History of document Distribution list 4 2 General Information Fundamentals Requirements Compatibility Restrictions Options to SSL-VPN 6 3 Preparation Uninstall old Juniper VPN-Clients Setting an individual password 7 4 Initial SSL-VPN Login Important Requirements Installing components over web interface Installation and configuration Pulse Secure App 10 5 Regular SSL-VPN Login Important Login types Login with webbrowser Login with Pulse Secure Client 13 6 Appendix Status check Connect and disconnect with the status icon in the taskbar Troubleshooting 14 ERPsourcing AG, CH-8304 Wallisellen 14th October /14

3 1 Information Projektname Date of issue Wednesday, 14th May 2006 Review Date Version 4.0 Access to hosted systems at ERPsourcing AG using SSL- VPN Classification Status Template File location / name Confidential revised Schulungshandbuch_Konzept_Funktionskatalog_DE_EXTERN_V0.50.dotx G:\07Technologie\0702Netzwerk\Dokumentationen\Remote- Anbindungen\SSL-VPN Anbindung\MAG\SSL-VPN Zugriff ERPsourcing AG.docx 1.1 Author(s) Position Name Date Network administrator Josef Hertli Network administrator Michel Bachofen Approval Position Name Date 1.3 History of Document Version Date Description Author First draft Josef Hertli Revised and approved Josef Hertli Revised and approved Josef Hertli Restoration and customizations for SOP Michel Bachofen Revised and approved Josef Hertli Revised and approved Josef Hertli Revised and approved Josef Hertli ERPsourcing AG, CH-8304 Wallisellen 14th October /14

4 1.4 Distribution list Document is intended for All customers of ERPsourcing AG which using the SSL-VPN access. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

5 2 General Information 2.1 Fundamentals ERPsourcing AG is using the SSL-VPN solution from the company Pulse Secure for the mobile access. Generally the access occurs over the web portal If you logon to this portal, an Installer Service, the Pulse Secure Client and some browser extensions will be installed. This is not desired or possible in all cases. From Windows 8.0 you can also use the Pulse Secure Client from Windows App Store. But please note that over the Pulse Secure Client only Client-to-Server access as SAP GUI or similar is supported. All browser based services which are showed directly over cannot be used with Pulse Secure Client. It is also not possible to change the password by the Pulse Secure Client, nor you get a message of a possible expired password. 2.2 Requirements The client computer needs, in addition to an Internet connection, Microsoft Internet Explorer, Google Chrome, Mozilla Firefox or Safari also the current Java version. For the initial login, the user needs local administrative privileges to install the Pulse Secure Client and the browser plug-ins. On mobile devices the Pulse Secure App has to be installed, which is available free of charge in the Google Play Store respectively in the Apple App Store. 2.3 Compatibility The Pulse Secure Client is compatible with Windows Version 7 or higher. On Macintosh, OS X or higher is supported. On mobile devices we recommend to update to the latest Android or ios release. Generally the App is verifying the compatibility during installation and will indicate if there is a conflict. The Pulse Secure plug-in is a VPN Client. This is only very limited compatible with other coexist VPN Clients on the system. If you using more than one VPN Client, we recommend to solve it by using dedicated virtual machines. 2.4 Restrictions Locally installed virus scanners and personal firewalls can affect the functionality of our SSL-VPN solution or even prevent a connection completely. Missing installation permissions by the initial login or restrictive security policies of your browser or Java runtime environment can impact the functionality of our access solution too. In the network implemented firewalls, proxy-servers and ALGs can lead to problems with the SSL-VPN access. If you have any problems with our SSL-VPN access, please get in contact with your IT Support or open a ticket under ERPsourcing AG, CH-8304 Wallisellen 14th October /14

6 2.5 Options to SSL-VPN If several users from the same network, access resources by ERPsourcing AG, we recommend to use a Site-2-Site VPN connection. 3 Preparation Before your first login at our, per 18th October 2016, updated SSL-VPN Portal you have to do some preparation work. If you are using our SSL-VPN Portal for the first time, go to chapter Uninstall old Juniper VPN-Clients If you already have worked with our SSL-VPN platform before 18th October 2016, you should uninstall all old Juniper software components from you system before your first login at the new platform. Please proceed as follows: 1. Restart your computer 2. Login at your computer with a user which has administrative privileges 3. Open in the system control the applet to manage installed programs and uninstall all software components which refer to Juniper or Pulse Secure. 4. Please check in the start menu if any objects refer to Juniper or Pulse Secure uninstall them if necessary. 5. Restart your Computer. Your computer should now be ready for the first access to our new SSL-VPN platform ERPsourcing AG, CH-8304 Wallisellen 14th October /14

3.2 Setting an Individual Password In case you are using the SSL-VPN solution of ERPsourcing AG for your first time, you have to set an individual password. Open https://sslvpn.erpsourcing.

7 3.2 Setting an Individual Password In case you are using the SSL-VPN solution of ERPsourcing AG for your first time, you have to set an individual password. Open with Internet Explorer, Chrome Firefox or Safari; you will be automatically redirected to a generic URL. Important: Bookmarks or favorites must refer exactly to and should not refer to the dynamic generated URL. Fill in your username and password at the login screen. Click on Sign In. You will get prompted to set a new password. Please note that the new password consists at least seven characters and contain numbers, special characters and letters. After 64 days you have to set a new password. Click to Change Password to change the password. You will receive a message if the password change was successful. You can now login as described in the following chapter. Important: Please avoid saving your login data in your browser or in a password Manager Tool. This can lead to complications if you change your password. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

8 4 Initial SSL-VPN Login 4.1 Important If you have already worked with our old SSL-VPN platform before 18th October 2016, you should uninstall all old Juniper and Pulse Secure components from you system before your first login at the new platform. Please proceed as described in the previous chapter. 4.2 Requirements Please verify if your computer complies the requirements in chapter 2.2. Generally we recommend, before your first login on our SSL-VPN portal, to install all operating system updates, the current Java version and the latest version of your browser. Our SSL-VNP solution supports Microsoft Internet Explorer, Google Chrome, Mozilla Firefox and Safari. For best results use the Microsoft Internet Explorer. When you login for the first time at the SSL-VPN portal various software components will be installed on your computer. This is only possible in an administrative user context. Therefore you need a dedicated administrator account or your personal user account must have administrative privileges. 4.3 Installing Components over Web Interface As standard we recommend to use the web browser. Is this not possible or desired you can, from Windows 8.0, access to ERPsourcing AG with the Pulse Secure App from the Mircosoft App Store. If you are using the Pulse Secure App instead of the web interface, you cannot use the services which are available in the web interface. If you only want to work with Pulse Secure App, go to chapter 4.4. Login with a user account, which has permissions to install programs and plug-ins, on your computer. If you are using Windows 8.0 respectively 8.1, change to desktop mode. Start your web browser; for best results use the Microsoft Internet Explorer. The following instruction is based on this browser. Open Fill in your username and password at the login screen. Click on Sign In. Important: Bookmarks or favorites must refer exactly to and should not refer to the dynamic generated URL. Important: Please avoid saving your login data in your browser or in a password Manager Tool. This can lead to complications if you change your password all 64 days. Thereby you allow users (possibly unwanted) of your device the access on resources by ERPsourcing AG. All SSL-VPN accounts are personal and the owner is liable for any caused damages! ERPsourcing AG, CH-8304 Wallisellen 14th October /14

After your first login various software components will be installed.

After successful installation the Pulse Secure Client will be started.

It is no failure if you can only see the link to the Support Portal and

Important: For the SAP GUI access you need a local installed and

9 After your first login various software components will be installed. These dialogs are very individual, it depends which operating system, browser and java version you are using. Please confirm all dialogues positive, where possible choose the option always respectively do not ask again. Please be patient, it takes a while until all components are installed. After successful installation the Pulse Secure Client will be started. In the browser you can see now all enabled web based services. It is no failure if you can only see the link to the Support Portal and the Start-Button for manual start the Pulse Secure Client. Important: For the SAP GUI access you need a local installed and configured SAP Logon. SSL-VPN is only a secure communication channel, between your computer and our data centers. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

4.4 Installation and Configuration Pulse Secure App The following steps are only required, if you are not working over the web interface, otherwise you

The app will now be installed automatically. Afterwards configure the Pulse Secure Client as described below. 1. Open the Pulse Secure Client 2.

10 4.4 Installation and Configuration Pulse Secure App The following steps are only required, if you are not working over the web interface, otherwise you can skip this section. Connect with the Microsoft App store and search for Pulse Secure. Once you found the app choose install. The app will now be installed automatically. Afterwards configure the Pulse Secure Client as described below. 1. Open the Pulse Secure Client 2. Click on the + icon 3. Enter any name for the connection 4. Enter in field Server "sslvpn.erpsourcing.ch" and click on add ERPsourcing AG, CH-8304 Wallisellen 14th October /14

11 5. Click on connect 6. Enter your SSL-VPN login data and click on connect. We strongly recommend to NOT activate the flag save settings. This lead to problems after the password change and it is a serious security risk! The connection to ERPsourcing AG will be configured and saved. A green tick by the connection item for ERPsourcing AG shows, that the connection successfully completed. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

12 5 Regular SSL-VPN Login 5.1 Important If you never logged in at our new SSL-VPN portal you have to login as described in the chapter above. Otherwise you can get errors in the network part of your computer. 5.2 Login types You can access, as by the first login, through the browser based interface to ERPsourcing AG. This access method is mandatory if you want to work with content, which is provided on the web interface. If you only want to access by Client-Server Applications (e.g. SAP GUI) on our hosted resources, you can directly connect with Pulse Secure Client. 5.3 Login with Web Browser Login with your personal user account and start your web browser. We recommend to use Microsoft Internet Explorer, because our SSL-VPN portal is optimized for this browser. Open Fill in your username and password at the login screen. Click on Sign In". During the login you will be prompted to load Java Code, Active-X plug-ins and Pulse Secure. Please confirm all dialogues positive! After successfully loading the components, your browser will display the SSL- VPN navigation interface. Please check if you can see the Junos Pulse Client ( ) in the status area of your task bar. Is it inactiv ( ) or not started, you can start it over Start button on the SSL- VPN web interface. For detailed information please check chapter 6.1. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

5.4 Login with Pulse Secure Client Open the Pulse Secure Client.

Enter your login data, check if save settings is not set and click connect.

A green tick by the connection item for ERPsourcing AG shows, that the connection

13 5.4 Login with Pulse Secure Client Open the Pulse Secure Client. On the entry ERPsourcing AG click connect. Enter your login data, check if save settings is not set and click connect. The connection to ERPsourcing AG will be configured and saved. A green tick by the connection item for ERPsourcing AG shows, that the connection successfully completed. Click in the Pulse Secure Client on disconnect to disconnect the SSL- VPN connection to ERPsourcing AG. ERPsourcing AG, CH-8304 Wallisellen 14th October /14

2 Connect and disconnect with the Status Icon in the Taskbar With rightclick on Pulse Secure Icon in the taskbar you can access directly to App features.

14 6 Appendix 6.1 Status check Configure your taskbar that Pulse Secure will be displayed permanent in the notification section. If you see the Pulse Secure Icon with a green arrow, you are connected with ERPsourcing AG If there is the Pulse Secure Icon without a green arrow, there is no connection to ERPsourcing AG. 6.2 Connect and disconnect with the Status Icon in the Taskbar With rightclick on Pulse Secure Icon in the taskbar you can access directly to App features. If you are not already connected, click on ERPsourcing AG and connect to connect ERPsourcing AG. On this way you can also disconnect the connection to ERPsourcing AG. 6.3 Troubleshooting If the connection to ERPsourcing AG does not work suddenly, your password is possibly expired. Please set a new password as described in chapter 3.2 Does it still not working, please open a ticket under ERPsourcing AG, CH-8304 Wallisellen 14th October /14

Browser Checklist. Objective. Content. 1) Zurich recommended browser

Browser Checklist. Objective. Content. 1) Zurich recommended browser Browser Checklist Objective To ensure that agents have the fastest and best experience of Zurich einsurance portal. By checking that agents have the best browser on the computers. By creating a shortcut