Remote Access This manual is divided into three main sections. If you already have Uninstalled SonicWALL Global VPN client, or never had it installed you can skip this step. Index Uninstall SonicWall Global VPN client... 2 Installing "Sophos SSL VPN Client"... 5 Windows... 5 Logging onto Portal to get Sophos VPN client... 5 Download the Sophos SSL VPN client... 6 Installing the Sophos VPN Client... 7 Using the Sophos SSL VPN Client and Connection K. LUND Offshore.... 9 Notes on the Sophos SSL VPN Client... 10 Connecting to a computer with Remote Desktop Protocol (RDP)... 11 MAC... 14 Viscosity: What To Do:... 14 Tunnelblick... 14 RDP... 15 ios/android (Not supported by KLO, but this should work for most users)... 16 Installing the OPEN VPN CLIENT.... 16 Installing Remote Desktop client (RDP)... 19 Using HTML5 VPN Portal... 22 First, some limitation of HTML5 VPN:... 22 Some benefits of HTML5 VPN:... 22 REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 1
Uninstall SonicWall Global VPN client We no longer need the Sonicwall Global VPN client Go to strart, Control Panel Depending on you view settings in the Control Panel, Select either Program and Features Or Uninstall a program : REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 2
Select Global VPN Client and click uninstall: Click yes: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 3
Preferably you should now do a restart: Sonicwall is now uninstalled. You can aslo safly now delte any remaing soncwall shortcuts. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 4
Installing "Sophos SSL VPN Client" Windows Logging onto Portal to get Sophos VPN client Start your browser (Internet Explorer) and go this URL: https://up.kl-offshore.no/ Currently you will see a warning that there is a problem with a certificate Click Continue to this website (not recommended). Type your username and password:!! use only lower case letters in username!! REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 5
Download the Sophos SSL VPN client Once you are logged in, you will need to download the VPN software; this is preconfigured to your username and our VPN hostname. If you have Windows OS, choose the first download link: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 6
Installing the Sophos VPN Client After clicking Run, the installation will start. If you see this prompt, select Install: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 7
You can now close the webpage (https://up.kl-offshore.no) REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 8
Using the Sophos SSL VPN Client and Connection K. LUND Offshore. Type your username and password.!! use only lower case letters in username!! The icon will show a red and orange light for a few seconds, while establishing the connection: When the connection is ready to use you will see this popup from the system tray: There should now be a green Icon. Now you can connect to the resource you want on the internal network. Typically a computer by Remote Desktop. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 9
Notes on the Sophos SSL VPN Client If you have issues with authentication, and/or have changed computer, you can re-download the client and reinstall it. That will give you a new connection. Just re-download and reinstall over the old one, you do not need to worry about uninstalling the previous version. The Sophos SSL VPN Client is by default running in the system tray : If install multiple VPN client s under the same windows user, you will also get multiple connections. This could happen on computers where one username is used to log on, but multiple other usernames are used to connect to VPN. Se the next section for how to connect to a computer by Remote Desktop (RDP) REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 10
Connecting to a computer with Remote Desktop Protocol (RDP) Now that you are connected to K. LUND Offshore with Sophos SSL VPN, you can connect to your personal computer/desktop. You need to know the name of your computer to connect to it. You need to make a note of this name in advance; there should be a label on the computer chassis. If you do not know it or see a label, please contact IT, we can help you find it. Now it is time to start your Remote Desktop Client. This manual will only show the built in RDP client for Windows 7. The basics are the same for other OS and versions of Windows. The RDP client is found under the Accessories folder in the startmenu. Click on it REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 11
You will then get the login dialogue. If you have been on the computer before it will suggest a login for you: Like this: Then just type your password and click OK. If the username is WRONG, you need to change it, then click Use another account. Type your username and password here:!! use only lower case letters in username!! Note; if the domain is not specified with Domain:KLOFFSHORE like in the picture above, you need to type kloffshore\xxxx in username, where xxxx is your username, and then the password Example: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 12
Then you click OK. You should then be presented with a desktop. When you are finished for the day, you can do a normal log- off, and the RDP seesion will close. Be aware! If you do a shutdown, (it is well hidden) you will not be able to log on to the computer remotely again, unless someone turns the computer back on again for you. If you just want to leave the RDP session open, you can just disconnect it by clicking the white X in the top banner of the RDP window: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 13
MAC We don t support MAC, but it is possible. You would need to get a VPN client, Viscosity is recommended, and costs currently $9, another free alternative is Tunnelblick. You can follow these instructions for either version. Instructinos are prodided AS IS. KLO is not suppuring the MAC client in any way: Viscosity: What To Do: Before you start, download the Viscosity client from http://www.thesparklabs.com/viscosity 1. User Portal https://up.kl-offshore.no/ and download the VPN package: select the download labelled "Click here to download a ZIP archive which contains all necessary files to set up SSL VPN on Linux, MacOS X, BSD or Solaris." 2. Install the Viscosity VPN Client on your computer. 3. Launch the Viscosity VPN Client and navigate to Viscosity Preferences Connections. Click the + and select Import Connection from File... 4. Navigate to the previously downloaded VPN configuration folder and select your configuration file with the extension.ovpn. Cick Open. Viscosity now imports the configuration and should display the successful import dialogue box. 5. Initiate your connection by selecting Connect from the Viscosity menu. Enter your User Name and Password when prompted, then click OK. Source: https://www.sophos.com/en-us/support/knowledgebase/115909.aspx Tunnelblick What To Do: You can download the client here: http://tunnelblick.net Installation / Configuration 1. Install the Tunnelblick vpn client on your machine. 2. After installation you get a dialogue to "Create and open configuration folder". This option creates an empty configuration folder. The configuration folder can be found at "Library > Application Support > Tunnelblick" 3. Download your Open-VPN configuration from the ASG/UTM User Portal 4. Copy your files to the "Configuration folder". 5. Start/Restart your Tunnelblick client 6. Click on the tray-icon to select the SSL VPN Profile and dial in with your username/password For further information see the Tunnelblick homepage: www.tunnelblick.net Source: https://www.sophos.com/en-us/support/knowledgebase/115646.aspx REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 14
RDP To connect to your own computer or a virtual computer you have been assigned, you would also need a Remote Desktop Client for MAC, you can find it on Appstore. Microsoft Remote Desktop is recommended. Since we don t support MAC we will not go into details on how to set up the VPN and Remote Desktop, but you can pick up the important parts from the Windows section of this manual. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 15
ios/android (Not supported by KLO, but this should work for most users) Scrrenshots below are from ios, but similar procedure can be used for Android devices. Installing the OPEN VPN CLIENT. First, go to Apps tore or Google play. Install the OpenVPN Connect client: When that one is installed. Go to https://up.kl-offshore.no from the browser on the device you are using. Log on with your username and password, select Remote Access then the Install option in the ios(app store) /Android /Google Play) section. This will open a new page witch allows you to import the settings needed to establish the connection: Click on Open in OpenVPN. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 16
This wil open this window, import the settings: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 17
Type your username and password and click the Connection button. Once that is done, you must answer yes on the following question: You will then see this: You are now connect to KLO, by VPN. Time to set up Remote Desktop connection. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 18
Installing Remote Desktop client (RDP) You need a computer to connect to, if you already connect to a computer, physical or virtual at KLO, you are all set, and can use that one. If not you need to contact IT. There are several RDP clients, but in this help file we are going to show Microsoft RDP client. Download it for Android or ios.. (App store, or Google Play): Start the RDP client and click the + sign in the top right corner and select Add PC or Server if prompted for it: Type the computer you are going to connect to, and add.kl-offshore.no as a suffix. (This could be your own computer or an virtual one assigned to you by IT), click done REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 19
Type username and password, please let it be default prompt for user name and password and click Save : You have now added the computer: Click on it to connect to the computer (Remember that you have to be connect to VPN for this to work, se the previous section for details on that. Log on with your username, prefix it with kloffshore\ and password, like this: TIP: You might be prompted to accept a certificate click accept on it: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 20
You should now be logged in and see the desktop of the computer you connected to. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 21
Using HTML5 VPN Portal First, some limitation of HTML5 VPN: 1. It needs to be preconfigured 2. Slow performance 3. Copy & Paste limitations 4. Keyboard layout issues Some benefits of HTML5 VPN: 1. Quick access, without VPN client 2. Less problems with firewalls and security settings at remote locations 3. Good enough for small workloads To summarize, if you have a dedicated computer it is always best to use the full Sophos VPN client as long as it works. HTML5 VPN is more of a spare tire /second option. HTML5 VPN is not enabled as default, please contact IT if you need HTML5 VPN. You go to the same webpage as where you would download the full Sophos SSL VPN Client: https://up.kl-offshore.no/, log on. Click on the HTML5 VPN Portal link: Here you will get access to the computer(s) you can access by HTML5 VPN Click Connect next to the computer you would like to access. REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 22
After clikcing the desktop is shown. You might already at this point want to change the keyboard layout. Se the next steps. After selection the propper keyboard. You can click the username that is shown: Type the password and log on: REMOTE ACCESS M:\IKT\A_VEILEDNINGER\REMOTEACCESS\RA.DOCX PAGE 23