Remote Access Services Microsoft Windows - Installation Guide

Transcription

1 Remote Access Services Microsoft Windows - Installation Guide Version 3.1 February 23, P age

2 Contents GETTING STARTED... 3 JAVA VERIFICATION, INSTALLATION, AND CONFIGURATION... 3 Windows XP... 3 Windows Vista and Installing Java... 7 CONNECTING TO VPN... 9 Microsoft Internet Explorer... 9 Mozilla Firefox Google Chrome P age

3 Getting Started CPS OWNED COMPUTER - Test your access from the CPS Network first: Users are expected to test the Remote Access install procedures on their CPS-owned computer during normal business hours from within the CPS network. You will need to connect your computer to the CPS network using a network cable or connect to the wireless network. If an issue arises, please call the IT Service Desk at , option 9. Minimum hardware and software requirements are listed on the Remote Access website ( You must have administrative rights on your computer to install the client or have at least Java version 1.6. Java is REQUIRED for all non-internet Explorer browsers, such as Firefox or Chrome. As such the user should first verify that Java is working correctly before attempting to connect to VPN. Java 32-bit is required. Unless otherwise noted, 64-bit Java is not supported. Unless otherwise noted, 64-bit Browsers are not supported. Internet Explorer supports Active X, thus Java is not required. If Java is installed and configured correctly, Internet Explorer will fall back to Java. You must have ActiveX enabled and accepting 1 st party cookies. Please close all the open applications before proceeding with CPS Remote Access Client Installation. Java Verification, Installation, and Configuration Java is a third-party program by Oracle and is supported by the Remote Access System at CPS. This section is required if you are using a browser other than Internet Explorer, such as Firefox or Chrome. Windows XP Step 1 click Start!click Control Panel!click Add or Remove Programs Step 2 In the Add or Remove Programs folder, look for Java program in the list. If you do not see it, you ll need to install it. See Installing Java on Windows section. 3 P age

4 Step 3 Verify that Java is configured correctly by opening up the browser you intend to use and going to Step 4 Click the link Do I have java? Step 5 Click the Verify Java version button Step 6 Window will appear asking to run application, go ahead and click Run 4 P age

5 Step 7 If you show that you have a compatible Java version, then proceed to the Connecting to VPN section in this document. If verification fails, you ll need to download and install Java, see Installing Java. Windows Vista and 7 Step 1 Click Start! click Control Panel! Click Programs and Features Step 2 - In the Uninstall or change a program folder, look for Java program in the list. If you do not see it, you ll need to install it. See Installing Java on Windows section. If you see Java XX Update XX (64-bit), you ll need to remove the 64-bit version by left-clicking on the entry then click Uninstall. Step 3 Verify that Java is configured correctly by opening up the browser you intend to use and going to Step 4 Click the link Do I have java? 5 P age

6 Step 5 Click the Verify Java version button Step 6 Window will appear asking to run application, go ahead and click Run Step 7 If you show that you have a compatible Java version, then proceed to the Connecting to VPN section in this document. If verification fails, you ll need to download and install Java, see Installing Java. 6 P age

7 Installing Java Step 1 Open a web browser and goto Step 2 To start the installation process, click Agree and Start Free Download. For detailed instructions pertaining to your browser click the Installation Instructions link on this page. Step 3 After the installation has finished, close all browsers for the installation to activate. Step 4 Click Start, then click Control Panel. Click (or double-click) on the Java icon. If you can t find it, try typing Java in the Control Panel search field. 7 P age

8 Step 5 Click the Security tab, then make sure that Enable Java content in the browser is enabled and that the security level is High. Step 6 Click the Advanced tab, and make sure you have a check next to all non-greyed out browsers in the Default Java for browsers section. 8 P age

9 Step 7 On the Advanced tab, make sure that Use SSL 2.0 compatible ClientHello format is NOT CHECKED in the Advanced Security Settings section. Step 8 Click OK. Step 9 Proceed to the instructions pertaining to the browser you are using in the Connecting to VPN section. Connecting to VPN This section assumes that you have Java successfully working if you are using a non- Internet Explorer browser or if you intend to use Java within Internet Explorer. If you are unsure or haven t performed the Java verification steps please do this first. Microsoft Internet Explorer Internet Explorer 8, 9, 10, and 11 are supported on the Remote Access System. Internet Explorer 7 is NO LONGER SUPPORTED. Step 1 Open Internet Explorer. Step 2 Click Help in the menu bar, the Tools button, or the blue circle with the question mark icon (located in the upper right-corner) Step 3 Click About Internet Explorer. 9 P age

10 Step 4 If you are running version or higher, proceed to the next step. If you are running version 7 or earlier you ll need to update to Internet Explorer 8 or higher. If this is a CPS provided machine, please contact CPS Tech 773/ to assist with this. Once the browser is up-to-date, you can proceed to next step. Alternatively, you can use Mozilla Firefox. Step 5 Click OK or close the About Internet Explorer window. Step 6 Click Tools or the Tools button. Step 7 Click Internet Options. Step 8 In the Internet Options window that opens up, click the Security tab. Next click Trusted Sites and finally Sites Step 9 - Under Add this website to the zone section, make sure there s an entry for If it doesn t exist, add it. 10 P age

11 1 2 Step 10 In the address bar, browse to Step 11 You may get a prompt to install the Active X control. You may be presented with a yellow bar across the top, in which case, right-click on the bar and then click Install or Run. On newer versions, you may see a yellow installation prompt at the bottom, if so click Install. If you are having trouble with and you have successfully installed Java you may opt to switch to Java by clicking click to run Sun Java Applet when presented, in which case proceed to the Java sub-section P age

12 Step 12 You may see another prompt to allow the Check Point Deployment Shell agent to run, click Yes or Install. If you are also prompted to enter credentials then your account doesn t have administrative privliges. Either log in with a privilieged user or you ll have to use Java (if its already installed). If Java is not installed, you ll have to contact your system administrator or tech support person. 12 P age

13 Step 13 Once installed, your computer will be scanned to ensure compliance with CPS remote access policies. After the scan is finished you will be presented with either a notification of the issues or the login screen. If you get the login screen, log in using your CPS username and password. ATTENTION: The scanner is designed to detect security compliance and assess the risk of your machine to the network. Some items MUST be resolved prior to being allowed to connect the CPS Network. In most cases, the scanner will provide useful information to help identify and resolve the problem. If your machine has failed the security scan please proceed with the following steps based on the machine type: 13 P age

14 If the machine is a CPS-owned laptop or desktop. If the security scan has failed on your CPS machine follow the instructions provided when the security scan failed. If you continue to have difficulty resolving the issues identified on the security scan, contact the IT Service Desk at , option 9. Be sure to include as much information from the scan details as possible within the ticket. If the machine is a personal machine or other machine not owned by Chicago Public Schools: If the security scan has failed on your personal machine follow the instructions provided when the security scan failed. If you continue to have difficulty resolving the issues identified on the security scan, please locate a technical support resource to assist you in finding a solution. Step 14 Depending on your preferences, the SSL Network Extender window may pop-up and automatically try to connect. If this happens, you may again be prompted to install some Active X controls (Check Point Deployment Agent and/or SSL Network Extender). If you are prompted, click Yes or Install for each prompt. If you are having trouble, you may also opt to use the Java-based client when presented with the link. The system will present you with the Java link only if it detects that you are having issues loading Active X. 14 P age

15 Step 15 You may be asked to trust the gateway s fingerprint or if you want to allow a secure connection, click Yes. 15 P age

16 Step 16 After a few minutes, the status field in the smaller SSL Network Extender window should now say Connected. If it does, you have successfully connected to the remote access system. If you are having issues, verify that Java is configured properly and try a different browser (Firefox or Chrome). Mozilla Firefox Step 1 If you don t have Firefox already you can obtain it by going to and clicking on Free Download. Finally, follow the installation instructions provided by Mozilla. Step 2 If you haven t already, ensure that Java is working properly on your system. See the Java Verification, Installation, and Configuration section for operating system specific instructions. Step 3 Click the Menu icon. Step 4 Click Add-Ons, then click Plugins. 16 P age

17 Step 5 Scroll through the Plugins list and find the Java Platform SE entry. Once found change to Always Activate. If you do not see this entry, then Java is not install and/or configured for Firefox, see the Java Verification, Installation, and Configuration section. Step 6 In the address bar, browse to Step 7 If prompted, click Do not show this again for apps from the publisher and location above, then click Run. Step 8 If prompted, click Do not show this again for apps from the publisher and location above, then click Allow. 17 P age

18 Step 9 Log in using your CPS username and password. Step 10 Unless you changed your preferences, the SSL Extender window will automatically start up and try to create a tunnel to CPS. This may also trigger another prompt to allow the site as shown below. If prompted, click Do not show this again for apps from the publisher and location above, then click Allow. 18 P age

19 Step 11 You should now get connected to CPS. 19 P age

20 Google Chrome Step 1 If you don t have Chrome already you can obtain it by going to and clicking on Download Now. Finally, follow the installation instructions provided by Google. 20 P age

21 Step 2 If you haven t already, ensure that Java is working properly on your system. See the Java Verification, Installation, and Configuration section for operating system specific instructions. Step 3 In the address bar, browse to Step 4 You may get a notification that the plugin has been blocked. If you do left click on the blocked plugin notification, then click Always allow plug-ins on portal.connect.cps.edu. Finally, click Done Step 5 Wait for the scan to complete. When it is done, you should be presented with a login screen. Step 6 Login using your CPS username and password. Step 7 Depending on your pop-up blocking settings, you may get a message indicating that a pop-up was blocked. Click OK, then click the window with the X in the top right of the browser. Finally click Always allow pop-ups from portal.connect.cps.edu, then click Done. 21 P age

22 2 1 3 Step 8 You are now connected to VPN P age