UCL Remote Access VPN Service Microsoft Windows XP User Guide

Transcription

1 INFORMATION SERVICES DIVISION (ISD) NETWORK SERVICES GROUP UCL Remote Access VPN Service Microsoft Windows XP User Guide Version 0.2 Date 27 th July 2011 Author MC Document Details N/A Last Updated 13 November 2012 Page 1 of 10

2 Table of Contents UCL Remote Access VPN Service Microsoft Windows XP... 1 User Guide... 1 Table of Contents... 2 Revision History... 2 Formatting Conventions Introduction Getting Connected Requirements Abiding by UCL Computing Regulations Prerequisites for the Remote Access VPN service... 4 Supported browsers: Install Cisco AnyConnect Secure Mobility Client Problems with automatic installation Subsequent connections to the UCL VPN service Help and Support Remote Access VPN Service help FIS Compatibility Revision History Date Version Author Purpose 6 th July MC Original draft version 27 th July 0.2 MC Updated to include standalone installation instructions Formatting Conventions Courier New Italic Underline or Bold Implies an action A variable which must be replaced or for emphasis Important note or action Page 2 of 10

3 0 Introduction The purpose of this document is to provide Microsoft Windows XP users with instructions for connecting to the UCL Remote Access VPN service using the Cisco AnyConnect Secure Mobility Client a web based client that is downloaded using a web browser. The UCL Remote Access VPN service provides a secure connection into the UCL corporate network to access restricted UCL resources. The user therefore will have oncampus -like access to services that are normally in-accessible from outside the UCL network. 1 Getting Connected 1.1 Requirements The following is required to use the UCL Remote Access VPN service. A network connection outside of the UCL corporate network e.g. eduroam, broadband connection from home, café hotspot wireless etc A UCL User ID and password. 1.2 Abiding by UCL Computing Regulations When connected to the UCL Remote Access VPN Service, ALL your traffic will be sent through the UCL network, regardless of whether the destination is a UCL address or an address on the Internet. All users must be aware of this fact and abide by the UCL Computing Regulations and the JANET Acceptable Use Policy when connecting to the Remote Access VPN Service. Page 3 of 10

4 1.3 Prerequisites for the Remote Access VPN service Supported browsers: The following browsers have been tested and are compatible with the UCL VPN Remote Access Service: Internet Explorer version: 6 Internet Explorer version: 7 Internet Explorer version: 8 Internet Explorer version: 9 Mozilla Firefox version: 5 Mozilla Firefox version: 4 Mozilla Firefox version: 3.6 Google Chrome It is recommended that you upgrade your browser to the latest version prior to installing the Cisco AnyConnect Secure Mobility Client to avoid any installation issues. At the time of writing, this is Firefox version 5.0 and Internet Explorer version 9.0. Firefox/Google Chrome users: If using Firefox or Google Chrome, you will need to update the Java Runtime Environment running on your machine to the latest version before you will be able to install the AnyConnect program successfully. To do this, go to and follow the instructions. Internet Explorer users: 1.) If using Internet Explorer version 8 or older, you will need to add the name of the Remote Access VPN server to the Trusted sites list. To find out which version you are using, go to Tools (the cog symbol) and then About Internet Explorer. To add the name of the Remote Access VPN server to the Trusted sites: Open Internet Explorer Click on Tools Select Internet Options Click the Security tab Select Trusted Sites Click the Sites button In the box Add this website to the zone:, enter Click Add Click Close followed by OK 2.) You will need to have Administrator privileges to Install Active X when prompted during the application install. Page 4 of 10

5 1.4 Install Cisco AnyConnect Secure Mobility Client IMPORTANT ensure you are connected to a network that is outside the UCL network i.e. eduroam, a home broadband connection, café wireless hotspot etc. The following steps were done using Firefox version 5. You would see exactly the same steps if using Internet Explorer version 9. 1.) Open a web browser and go to The Cisco Secure Desktop will begin to download and install the Cisco AnyConnect Secure Mobility client to your machine. Once the screen says your system has been validated the reloading process may take a few minutes. Page 5 of 10

6 When prompted at the Login screen, ensure the Group selected is RemoteAccess, then enter your IS username and password. You are required to have an active firewall and an active anti-virus program on your machine. If you do not, you will see the following Login denied dialog box. Click the More Info link Click the More Info link A message will be displayed informing you of the security criteria that your machine does not currently meet. You will need to rectify these issues, then close your browser, re-open and begin the install process again by going to Page 6 of 10

7 Once successfully logged in, the install progress will continue. The program will then begin to establish a VPN connection, at this stage a windows User Account Control screen may pop up asking you to verify the program, click Allow to continue. Once installed and automatically configured, the client will automatically connect you to the UCL VPN service. Client connected to UCL VPN service. Page 7 of 10

8 1.5 Problems with automatic installation. If you are unable to install the VPN client from the website for any reason, you can install a standalone AnyConnect VPN client and manually configure the service name to connect to. To do this, go to the Windows XP user guide webpage at Under the sub-title AnyConnect Standalone Client, click on the link : anyconnect-win-3.0.xxxx-pre-deploy-k9.msi (where xxxx is the most recent version available). Click Save, then double click on the file that has downloaded in the Downloads window that will have opened. Run this install file and follow the steps to install this client. When prompted, enter the server name: vpn.ucl.ac.uk Once installed and automatically configured, the client will automatically connect you to the UCL VPN service. 1.6 Subsequent connections to the UCL VPN service. Once the client is installed, the Cisco AnyConnect Secure Mobility client icon is located in the task tray. The client icon has two forms: VPN client connected VPN client NOT connected To open the Cisco AnyConnect Secure Mobility client, click on the client icon. Cisco AnyConnect Secure Mobility client Page 8 of 10

9 To disconnect from the VPN service, click on the Disconnect button Disconnect button To re-connect to the VPN service, click on the icon in the Task Tray to open the application (if not already open), then click the Connect button. Connect button Enter your IS userid and password when prompted Once authenticated, the client will connect to the UCL VPN service. The Cisco AnyConnect Secure Mobility client icon will show as connected in the task tray. Cisco AnyConnect Secure Mobility client icon showing as connected in the task tray. Page 9 of 10

10 2 Help and Support 2.1 Remote Access VPN Service help If you experience any problems, please contact the ISD Service Desk, who will be able to assist with basic support queries and will forward on other queries to the correct team. The Service Desk is located in the DMS Watson Science Library, Malet Place. The Service Desk web page provides details on opening times and a location map: FIS Compatibility FIS can be accessed and used through the Remote Access VPN Service. FIS is currently only supported on certain browsers. Please refer to the FIS browser support web page for further information on this at All queries relating to the use of FIS must be directed to the FIS Helpdesk by ing fis@ucl.ac.uk Page 10 of 10