Access to Webmail services via a Non Trust Computer

Transcription

1 Access to Webmail services via a Non Trust Computer Aintree Outlook Web Access has been provided via the AppGate SSL Portal, this service can be accessed from any computer on the Internet. Two factor SMS authentication will be required to gain access to the OWA system. To gain access to the OWA service through the AppGate SSL Portal the required actions will need to be taken, please note that if Windows Vista is used the actioned required are the same: 1. Browse to with your web browser. NB If using a Trust computer/laptop for this service, first untick the proxy server from within the web browser via Tools Internet Options Connections tab Lan Settings button and untick Use a proxy server for your LAN. 2. From the Site Contents list on the left hand side of the Aintree Website select About Us, then Appgate at Aintree. At this point you will be presented with the following web page: 3. In order to load the AppGate SSL portal for access to Aintree Webmail system select the APPGATE (Webmail) link. This will load the AppGate SSL Portal webpage within a new window.

2 4. Accept the certificate notification message. Once the certificate has been accepted the following authentication screen is displayed: 5. Log into the AppGate SSL Portal with your Active Directory username and password and then click the Login button. At this point a SMS notification text message is sent to your mobile phone and the following screen is shown within the browser. Enter the six digit One Time Passcode into the Enter Password field and click the Login button. 6. Once you have successfully authenticated to the AppGate SSL Portal using your Active Directory username and password with the NordicEdge One Time Passcode the following screen will be shown, click on the Click here for Webmail link for the Outlook Web Access application to be loaded. This OWA web application will be loaded within a new browser session.

3 7. Once the OWA initial authentication page has loaded (as show below), enter your Active Directory username and password to gain access to your . Please note that Single Sign On will be possible after the POC if required. 8. Once you have successfully authenticated to the OWA login page your Inbox will be displayed (as shown below):

4 9. When you have finished with the Aintree Webmail system, log off your session with the OWA application (top right) and close the browser window. 10. At AppGate SSL Portal webpage click the Logout button, at which point you will be displayed with the following webpage. 11. Close browser window to finish your AppGate session.

5 Access to Aintree Terminal Services System via a Non Trust Computer In order to access the Aintree Terminal Services system via a non trust computer you must connect to the Aintree AppGate system via the AppGate Java based Client, in order to run this AppGate Client software Sun Java runtime is required. If Java is not installed on your computer you can download it at N.B. The screenshots below show a Windows Vista Operating System although the process for Windows XP systems is the same. Once you have installed Java please browse to with your web browser: 1. From the Site Contents list on the left hand side of the Aintree Website select About Us, then Appgate at Aintree. At this point you will be presented with the following webpage:

6 2. Click on the Link Click here to download the Webstart Appgate Client. After a few seconds you should be presented with the following screen, click Run and the Webstart client will install. 3. Next click OK

7 4. You will be faced with the following Screen where you enter your trust Active Directory trust domain login and password. 5. Once you have entered the details and clicked ok, after a few seconds you should be sent a text to your phone with a one time passowrd of 6 digits. Enter this password in the following box.

8 6. You should now be taken to the following Terminal server screen where you login using your Active Directory trust logon username and password 7. Once you have finished your Terminal Services session and have logged off you should click on to the X in the top right hand connect of the Webstart client window to close communications. 8. You will now have an icon like the one below on you Home PC desktop. For all future connections click on this icon and enter your Active Directory trust logon username and password, and the one time password when authenticated to connect to the terminal Server.

9

10 Access to services via a Trust Computer/Laptop using Full Client In order to gain access to Aintree applications and services the Full AppGate Client and IP Tunnelling Driver software will need to be installed onto the Trust computer. NB you can only do this for a trust computer. Please note that the Trust computer must be a member of the AINTREE Active Directory domain of access to be granted into the Aintree network. The following actions will need to be carried out to install and load the AppGate session on the Trust computer: 9. Untick proxy server from browser if the URL of remote.aintreehospitals.nhs.uk has not been added into proxy bypass list within browser. 10. Confirm Sun Java software is installed onto the computer. 11. Browse to the following page will be displayed Install the AppGate IP Tunnelling driver by clicking on the IP Tunnelling Driver link. Download the exe file to the computer and launch, follow the on screen installation wizard prompt and agree to the driver notification window. Please note that administrative rights will be required to install this driver software but only during this single installation procedure.

11 14. Once the AppGate IP Tunnelling driver has been installed go back the AppGate webpage and click on the Click to Connect icon within the Java Web Start area of the webpage. 15. Once asked, add an AppGate Client shortcut to the desktop of the computer by selecting Yes. This will allow the user to load the AppGate client from the desktop of the computer without having to visit the AppGate webpage every time a connection to Aintree resources is required. Please note that the proxy server might need to be unticked (due to the lack of a proxy bypass entry within the browser) before the desktop shortcut can be selected. 16. Once the AppGate Client has loaded tick, go back the proxy server within the browser and tick, this will allow access to the Aintree web based resources like the Aintree Intranet. Please note this is not required if the proxy server setting has not been unticked in the first instance. 17. Upon first connection to the AppGate system a notification will popup asking you to ensure the system which you are connecting to is the true Aintree AppGate appliance. To verify this is the correct system which your establishing an initial contact to click the Details>>> button within this new host notification window and confirm that the host key of the AppGate system which you are connecting to is 49:27:8d:f7:69:2d:dd:e5:d4:22:f5:48:c4:82:26:12. Once you have verified the client is communicating with the correct AppGate appliance click OK. Below is an example of this New Host notification window: 18. Once the New Host notification has been agreed to, the client will load with the following Open Connection window each time the AppGate Client software is loaded. Confirm the Method of authentication is Nordic Edge and enter your Active Directory username and password into the applicable boxes then click OK. An example of this Open Connection window has been shown below:

12 19. Once you have clicked OK to the Open Connection window a text message will be sent to your mobile phone containing the NordicEdge One Time Passcode. Enter the six digit code into the RADIUS Authentication popup window and click OK. An example of this RADIUS Authentication window is shown below: 20. Upon completion of authentication and the AppGate Client has checked the device used is a member of the AINTREE Active Directory domain the Aintree AppGate POC services will be shown allowing you to select the required service. An example of this view is shown below: 21. To close the AppGate session down, close all applications which have been launched and select Connection, Close Connection.