~I lisa. Remote Access via Virtual Private Network (VPN) Customer SeN~e Branch. Offico of lnformotlon Tochnology

Transcription

1 Offico of lnformotlon Tochnology Customer SeN~e Branch Remote Access via Virtual Private Network (VPN) Help Desk HELP (4357) User's Manual 14 ~I lisa ~~ ~...

2 Table of Contents What is VPN?... 1 There are three connectivity methods to VPN Website connection method Tray connection method Start-up connection method Disconnecting from the VPN Frequently asked questions Do I need my P.I.V card to use V.P.N? Yes. You will need your P.I. V card and pin number every time you login. 2. Can I access V.P.N using non-government furnished equipment? No, only Government Furnished Laptops. 3. Do I need Citrix to access the V.P.N? No. You do not need Citrix access V.P.N however, It is recommended you have a Citrix account as a backup method to telework incase of network problems. 4. What operating systems support V.P.N? We currently only support V.P.N. on Windows Who can I contact if problems occur while using V.P.N? Please contact the help desk at (301) or submit a web request at citnih.gov. 13

3 No matter which VPN connection method you use, the disconnect method is always the same. It is important to always disconnect your VPN session when you are completed with work. Locate the Cisco AnyConnect Icon in the lower right hand corner of your computer, right click and choose VPN Disconnect A Virtual Private Network (VPN) is a network that uses the internet to provide remote offices and/or employees on travel network access. HRSA's VPN requires remote users to be authenticated (PIV enabled) to prevent disclosure of private information to unauthorized parties. -=- I I OL ~ (I ti ll fi w t:j fsj ~!I].d ~ :J' ~ (~ Customize... VPN serves as a tunnel to network functionality that is found on HRSA's network, such as sharing of data, access to network resources, databases, and websites. NOTE: You must have an internet connection in order to connect to VPN. S.gneling- - # Comments: The Cisco AnyConnect icon displays a gold lock when you are connected. Then lock disappears from the icon when you are disconnected. 12

4 Step 6. Click the Accept button at the Cisco AnyConnect disclaimer. First Method -Web site connection Step 1. Insert your PIV card into the card reader then open your web browser. Enter access.hrsa.gov into the web address bar. "Click" the Launch Cisco SSL VPN button. tt -- Downloaclto Home I!'P\.. '-E./ :. '. ',"'. F This WOII!Iaion system is provided for U.S. Govemner1-dlorized use " orly. UaAhonzed or in1lfoper used lt1s sytem may red il ~ adlon. as wei as em and amal penaties. ~ usi1g!tis WOIT11l&n system, you lllderdld and consert to the folowilg: You have no reasonable ~and IXivatY ~ lnf COfllll.ricalio or dala trnli1g or stored on this ncllt!bion system. k'f ni al WOITTIMlon may be dlclosed or used for lnf lawfla govemnert pupose. -E>dt A«- 10 CiocO \lpn-... PtV Cerd J Note: Notice in the lower right hand corner. you have a "Disconnect" button. You are now connected to VPN. Step 7. Click the icon with your name on it. You will be prompted to log in with your smart card again. --- Step 2. Agree to the Government Warning disclaimer. " -waaning-warhjng-w~ TWsio o ~dh..,ond-s.mcacotllfl'*'~. ~d-ond_semca_..,oysle!m.,. prowldod lor 11M p!ocftlingdoiic:lol US. c ,fdt AJ dro ~on ~ol- lftcihlmon SeMca_,...OV*fMIIownodbyllt~of- lftcihumonsemca lftcl moy IDflltpu'pOH ol prolecllng lit 1 ltglllln"'-" ollho Oop.lnwltot-lftd--. ~~e-~ lid, O>flllld.., aop~~nc~"'.,.,- lftcl dildomdln.,., _.,.,.USE OF THIS SYSlal BY Nlt USER. AI.ITliORIZ DOR utw.jthorized. CONSTllUT S CONSaiT TO THIS MOICTORING. INTERCEPTION, RfCORDING. READING, COPYING OR CAP'T1JRING AHO DISCLOSURE -waaning-w.aanjng-w~ THERE IS NO RIGHT OF PRIVACY IN THIS SYSTEM. 5,-.,.._..., p.. 10 lew...,. In- ollcielo.,., polonllol.-.c. olcrtmelcmldon~ol- lftci HumonSeMca--~~- or -o(.._...spllm...,n>jtd vtoiolnloafmni. em...---utw.jthorizedaccess To.. u..d SUteo c- CompMr~ lftcl...,.,.~by r. 18 Unhcl 51-. Code S«<lon tole, hudlftclr-lldmiy ~USAGE. The-ola.b!C-Iofllt~ol... e-:ufft~ (SCFR263610C) clo notponn!iit-oi~jx-'y ~~ IDf-tblft--SENSITM INFORMATION Ro<olndor clonot.. _inlonulon(e.g.-...rngen...,ln--ln wrtrfllt...-;.ec~ _.. _... - RfTEHTl(»>OF RfCORDS ~...._...,.,..,, ~-mail naoybe..,... Fodoral ~AQ(r..U UnhciS1-.Code 33t )Juol H hat<klopy NCCrda Cllllbe Do... ~- ---NijocllolltAa...,....._ cllepooilon~ -warning'"warning"'waamhg- Ills.- I 2 II

5 Step 4. Enter the VPN server name (vpn.hrsa.gov) in the box with the drop down arrow and click the Connect button. Step 3. Select your certificate. (The correct certificate is the top item with your name and valid data range) and then "click" OK. ' Windows Security ~ ~ Step 5. Enter your PIV card pin number and click OK. Select a Certificate rn Issuer. rn - ' Issuer HHS-SSP-CA-87 Valid From: 5/15/2011 to 1118/2013 'lis;~ b= lq :tim s;mifis;~l~ IUSUI~ I --~---- HHS-SSP-CA-87 Valid From: 5/ to 11/8/2013 I OK )[ Cancel ] - i Step 4. Enter your PIN If prompted. Note: Users may or may not be prompted using this method. ActivCiient login w ~ Pit~ , Actlvldenttty ActivCiient Canal Please enter ycu PIN. PIN ac 1 c:anc

6 Step 5. Once you reach this screen, please wait. (There is no action necessary.) Third method- Start Before Login dlelll CISCO Cisco Secure Desktop Note: This method only works if you are connected to an existing WiFi connection prior to windows login. This method will not work if you are traveling and trying to use the mobile 4G dell broadband card t!l Weblaunch Platform Detection - ActiveX Syste m Va lidated Cisco Secure Desktop successfuhy validated your system. Success. Reloading. Please wait Step2. DO NOT put your PIN in- click the switch user button. - Succ.ess Step 6. Click "continue" to accept the Government disclaimer. Step 3. Click the double monitor button located in the lower right hand corner of the screen. This Information system is provtded for u.s. Govemment-authoriz.ed use only. UnauthoriZed or improper use of this system may result in disciplinary action. as well as Civil and criminal penalties. By using this Information system. you understand and consent to the following: You have no reasonable expectation of privacy regarding any communications or data transiting or stored on this Information system. Any and all Information may be dlsdosed or used for any lawful government purpose. [ Cancel I [ Continue J 4 9

7 Step 4.Right click the icon and choose "Open AnyConnect".. ActiYCiient Login Activldent1ty ActivCiient 'Y ~ Step 7. In the center of the page, "click" Start AnyConnect. (--~~-. ~.:HISA.. ~E - -"..._.... ~ SSl VPN semce Please enter Y1U PIN. PIN Step 5. Click "Accept" at the disclaimer. ~ cancel r - AnyComecl 1 t' SIIIIAIJ( oodVIIIIUsol1 A-,ooeaKiy...,.IDaolltoi--II""'*"ID!-~UO<-ae Cisco AnyConnect This itormation system is provided for U.S. Govemmert~rized use _.. oriy. lkuuhorized or improper use d ttis system may red in disciplinary adion. as wei as civil and airrinal penalies. ~using this iriooncmn system, you l.l'ldenltand and consert to the folowing: You have no reasonable expectation r:j privacy regarding 1!lllf COI'IYIU'lications or d~a transilng or stored on this rionn5jon system. kry and al irioit'i'ich>n may be disclosed or used for arrt lawful goverrmert PlfPOIIe. [ Accept ] ~J I I ~ Step 8. In the center of the page, "click" Start AnyConnect..eh.ele. CISCO Comments about the Tray Method: The Tray Method is a fast way to connect to VPN. You have to know the VPN server name (vpn.hrsa.gov) The Tray Method will ask you for your PIN every time. ~ Weblaunch Platform Detection - ActiveX COnnection Established Th~ Ci.sco AnyConnect Secure Mobility Client has successfully connected. The connection can be controlled from the tnly icon, circled in the image below: ~... ' & 1 ~... _ : I ' ~ - Connected [Help J 8 5

8 The below popup will appear; it is a notification that the connection has been established. (There is no action necessary.) Close window and begin working as if you were at the office. Your outlook will function normally and you will be able to access the I,H drive and H RSA websites. Second Method -Tray Connection Step1. Locate the Cisco AnyConnect icon in the lower right hand corner of your PC, by clicking the up arrow to show all the hidden icons. r AnyConn«t Secure Mobility Client Oownloader Please wait whle the VPN ca~ ledo is est211:1lshed ~ 0 fjj id fi w r;j IS) 00 d lui..:. ~ ~ Customize Step 2. Right click the icon and choose "Open AnyConnect". L " Comments about the "Website Method": The Website Method takes about 2 minutes to connect to VPN. The Website method automatically resolves the VPN server name for you. The Website Method is accessed by using Access.hrsa.gov lq] VPN Conned About Quit... ~--~------nr----- ~ Customize... ~ 4 P.~fl Step 3. Right click the icon and choose "Open AnyConnect". 6 7