SSL VPN INSTALLATION, UPGRADE, USAGE INSTRUCTIONS Windows XP

Transcription

1 PURPOSE This document provides installation guidelines and instructions to install, upgrade and use UM s SSL VPN client using an Internet Explorer browser or FireFox browser on a Windows Vista operating system. CONTENTS BEFORE YOU BEGIN INSTALLATION INSTRUCTIONS USAGE INSTRUCTIONS FOR ADDITIONAL HELP SSL VPN Installation, Upgrade, Usage Instructions for Page 1 of 11

2 BEFORE YOU BEGIN General VPN Information UM s SSL VPN (Virtual Private Network) Service provides a secure access tunnel from your off-campus computer to the UM campus network. Use of this tunnel provides secure communications from your computer to the UM campus Intranet, but it does NOT provide a secure path to your target systems. It is highly recommended that you use SSL or other secure end-to-end communications protocols when transferring sensitive data across the network. Accessing Files Stored on the Campus Network You can use the VPN tunnel from off-campus to access files stored in any UM network space. Your access must be authorized via your CGCENT CaneID login credentials just like if your computer is physically on the UM campus. Availability UM s SSL VPN Service is available without charge to UM faculty, staff and students. The service is accessible through the CGCENT CaneID account and login credentials. File/folder access control rights are enforced the same as if your computer is on campus. Ensure that your CaneID account and password are active before attempting to use the SSL VPN Service. Security Requirements A new security feature, Host Checker, will check for specific security requirements before your computer is allowed to make an SSL VPN connection. Make sure your Microsoft operating system is current with the latest Service Pack and patches before you begin the installation process. If the security checks fail, you will be provided with steps to address problems found before you retry to make the connection. You may choose to continue without fixing the problems, but your access to data and services within the UM Intranet may be limited. To ensure full access (i.e. all access privileges granted to your CGCENT CaneID account), make sure your Microsoft operating system is current with the latest Service Pack and patches before you begin the installation process. Acceptable Use This system falls under the same restrictions as systems that are on campus. All client machines that connect to the system are subject to UM s Acceptable Use (A060) policy, as if the computing device making a connection is physically located on the UM campus. SSL VPN Installation, Upgrade, Usage Instructions for Page 2 of 11

3 INSTALLATION INSTRUCTIONS PLEASE NOTE! If Service Pack 2 (SP2) and Windows KB have not been applied prior to installation of the SSL VPN application, your system s network services will be adversely affected Be sure that SP2 and KB have been installed before continuing! 1. Launch Internet Explorer or FireFox, then browse to 2. Respond to the prompts as indicated: PROMPT RESPONSE The Host Checker is a new security feature that reviews your system for specific security settings to ensure conformance to our security requirements. If the security checks fail, you will be provided with steps to address problems found before you retry to make the connection. You may choose to continue without fixing the problems, but you will have limited access to data and services within the UM Intranet. To ensure full access (i.e. all access privileges granted to your CGCENT CaneID account), make sure your Microsoft operating system is current with the latest Service Pack and patches before you begin the installation process. SSL VPN Installation, Upgrade, Usage Instructions for Page 3 of 11

4 If you are using Internet Explorer: A yellow information bar will display to warn you that an ActiveX control will be installed. Click on the yellow bar, then click Install to proceed with the installation. If you are using FireFox: Screens will display to warn you that additional software will be installed. Answer as necessary to proceed with the installation. SSL VPN Installation, Upgrade, Usage Instructions for Page 4 of 11

5 A series of pop-up dialog boxes will display briefly as various security settings are checked and the necessary VPN components are loaded. SSL VPN Installation, Upgrade, Usage Instructions for Page 5 of 11

6 If the security checks fail, you will be provided with steps to address problems found before you retry to make the connection. You may choose to continue without fixing the problems, but you will have limited access to data and services within the UM Intranet. To ensure full access (i.e. all access privileges granted to your CGCENT CaneID account), make sure your Microsoft operating system is current with the latest Service Pack and patches before you make a connection. PLEASE NOTE! If Service Pack 2 (SP2) and Windows KB have not been applied prior to installation of the SSL VPN application, your system s network services will be adversely affected Be sure that SP2 and KB have been installed before continuing! Enter your CGCENT Username and Password. Be sure that Realm #1 is selected. Click Sign In. SSL VPN Installation, Upgrade, Usage Instructions for Page 6 of 11

7 A series of pop-up dialog boxes will display briefly as various security settings are checked and the necessary VPN components are loaded. Click OK to reboot your system. After your system restarts, you will be able to utilize UM s SSL VPN Service by following the Usage Instructions provided in this manual. SSL VPN Installation, Upgrade, Usage Instructions for Page 7 of 11

8 USAGE INSTRUCTIONS 1. Launch Internet Explorer or FireFox, then browse to 2. Respond to the prompts as indicated: PLEASE NOTE! If Service Pack 2 (SP2) and Windows KB have not been applied prior to use of the SSL VPN application, your system s network services will be adversely affected Be sure that SP2 and KB have been installed before continuing! Enter your CGCENT Username and Password. Be sure that Realm #1 is selected. Click Sign In. The Host Checker is a new security feature that reviews your system for specific security settings to ensure conformance to our security requirements. A series of pop-up dialog boxes will display briefly as various security settings are checked and the necessary VPN components are loaded. SSL VPN Installation, Upgrade, Usage Instructions for Page 8 of 11

9 If the security checks fail, you will be provided with steps to address problems found before you retry to make the connection. You may choose to continue without fixing the problems, but you will have limited access to data and services within the UM Intranet. To ensure full access (i.e. all access privileges granted to your CGCENT CaneID account), make sure your Microsoft operating system is current with the latest Service Pack and patches before you make a connection. SSL VPN Installation, Upgrade, Usage Instructions for Page 9 of 11

10 The SSL VPN connection has been successfully established. Secure access is provided to websites listed as Web Bookmarks. SSL VPN Installation, Upgrade, Usage Instructions for Page 10 of 11

11 FOR ADDITIONAL HELP To obtain additional assistance, SSL VPN Installation, Upgrade, Usage Instructions for Page 11 of 11