2011 Connecting Remotely via the Citrix Access Gateway (CAG) Version 2.0 *** The CAG is intended for users with OE equipment only. Users with GFE must still use RESCUE as their VPN solution. *** All VISN 11 staff currently using their own computer equipment (OE) to access the One VA VPN will gain access to the Citrix Access Gateway through the VISN 11 CAG. Beginning June 30, 2011, you will no longer be able to access VA resources via One VA VPN. VISN 11 staff with issued Government furnished computers (GFE) must utilize VA RESCUE to access VA resources. Original document created by Region 3 \\ VISN 7 Veterans Affairs 3/28/2011 Modified for use in Region 3 \\ VISN 11 5/17/2011
Table of Contents IMPORTANT NOTICE:... 3 Installation:... 3 Prerequisites... 3 Connecting to the Citrix Access Gateway (CAG):... 4 Troubleshooting... 7 Accessing the CAG for VISN 10... 8 Connection to VA resources:... 8 Connection to the CAG can be accomplished in two ways... 8 Logging Off... 12 Printing:... 13 Saving files:... 13 PKI... 14 CAG Support:... 14 Appendix A... 15 Supported Operating Systems for Citrix Access Gateway:... 15 To utilize the Citrix Online Plug- in for Windows v12.1... 15 To utilize the Citrix Online Plug- in for Macintosh v11.1 and v11.2... 15 Appendix B... 16 Creating a Shortcut to the Citrix CAG on your desktop:... 16 2
IMPORTANT NOTICE: All VISN 11 staff currently using their own computer equipment (OE) to access the ONE VA VPN will now gain access to VA resources through the VISN 11 CAG (Citrix Access Gateway). Beginning June 30, 2011, you will no longer be able to access VA resources via ONE VA VPN. VISN 11 staff with issued Government furnished computers (GFE) must utilize VA RESCUE to access VA resources. Installation: Prerequisites See Supported Operating Systems in Appendix A below prior to connecting. Verify TLS 1.0 is enabled in your web browser o For Internet Explorer Open Internet Explorer > Go to Tools > Internet Options > select the Advanced Tab > In the Settings box, under the Security section, you should see 'Use TLS 1.0' > verify the option is checked Add *.va.gov to trusted sites (required for Internet Explorer 9) ***NOTE: If you are using GFE (government furnished equipment) this step should be skipped. o Open Internet Explorer. Click on Tools (Menu bar) OR Gear icon (in Internet Explorer 9) Click on Internet Options > click the Security tab > select Trusted Sites > click Sites > 3
In Add this website to the zone: type *.va.gov > select Add > select close > select OK Connecting to the Citrix Access Gateway (CAG): https://vareast.vpn.va.gov Type one of the following URL's into your web browser: https://varnorth.vpn.va.gov https://varwest.vpn.va.gov https://vareast.vpn.va.gov https://varsouth.vpn.va.gov Enter your DomainName\UserName (i.e. vha11\vhadayxxxxxx) and password > select 'Logon' The 1st time you connect, you will be prompted to install the Citrix Client. If prompted > check 'I agree' > select 'Install' (NOTE: this Add- on does not require administrative privileges to run. If you are not prompted to install and this is your first time connecting, you may have to manually install the Citrix plug- in. Manual installation instructions can be found in the Troubleshooting section of this document). 4
When prompted, select 'RUN'. Once complete you will see 'Installation complete successfully' > select 'OK' "Once the software is installed, the Internet Explorer informational bar may appear at the top. Click on the bar and select Run ActiveX Control" (Note: If your web browser locks up, restart your web browser) Select a folder with the application to execute > once you select an application you will be presented with the 'VA Security Warning' logon banner > select 'OK' When prompted for "An online application is attempting " > select 'Permit use' 5
6
Troubleshooting ERROR 1: An error occurred while trying to access the requested resource is displayed when attempting to launch an application. Resolution 1: Manually download and install the latest Citrix plug- in for your operating system. Manually install the Citrix Online Plug- in: Go to https://media.vpn.va.gov > in the Left navigation pane, mouse over 'Media' > select 'Citrix Media' > select the plug- in compatible with your Operating System OR Got to www.citrix.com/downloads > select Client Center > select your Operating System > download and install the 'Citrix Online plug- in - web' Error 2: General connection issues. Resolution 2: (a) See Supported Operating Systems for Citrix Access Gateway in Appendix A (b) Uninstall the current version of the Citrix online plug- in and re- install. Error 3: You receive The page cannot be displayed when attempting to connect to the site (i.e. https://vareast.vpn.va.gov) Resolution 3: Enable TLS version 1.0. Click here for instructions. Error 4: Application Launch Fails after Upgrading to Internet Explorer 9 Resolution 4: see http://support.citrix.com/article/ctx129082 7
Need more help? Accessing the CAG for VISN 11 Connection to VA resources: Connection to the CAG can be accomplished in two ways. 1. Typing one of the following URL s into your browser: https://vareast.vpn.va.gov https://varsouth.vpn.va.gov https://varwest.vpn.va.gov https://varnorth.vpn.va.gov 2. Via a shortcut on your desktop. You can create a shortcut on your desktop directing you to the most frequently used connection site which would be, for VISN 11, https://vareast.vpn.va.gov. Instructions for creating a desktop shortcut are included in Appendix B. You will be prompted for your login credentials. 8
Enter your DomainName\UserName (i.e. vha10\vhadayxxxxxx) and password > select 'Logon' The following will display while connection is in progress: You will be directed to the Main Menu: 9
There are common items on the Main Menu, which are available to all users. These are MS Communicator Web Link, MS Office applications, including Outlook, VISN 11 VistA (Attachmate Reflections for each site in VISN 11), Visio, Adobe Acrobat, and ProClarity. We have also added published connections to your main mapped drives. Also included on the desktop are subfolders for each facility in VISN 10. Each folder contains site Specific connection to CPRS, as well as a link to the facility intranet homepage. 10
Once you select an application to use, like MS Word, for example you will be presented with the 'VA Security Warning' logon banner ***NOTE*** You will see the following four screens each time you open a new application on the CAG. > select 'OK' If prompted for "An online application is attempting " > select 'Permit use' A Citrix MesageBox will display for the application you are running: 11
Your logon Script will now execute. your application will now start: Logging Off When finished with your session, you must log off. Please click the Log Off icon in the upper right corner: You will then see the following screen. At this point you are logged off of the CAG: 12
Printing: Printing is not currently permitted while connected to the CAG. You will not be able to print to your local home printer or VA printers at this time. VA is currently reviewing policy on this matter. Saving files: You will be able to save files to your home drive from CAG based applications. To save, select FILE/SAVE AS You will see the following: Click Yes. The Save As screen will appear: 13
You will select your home drive, and type in the file name and click Save You may also select your Service drive (S) or your public drive (P). PKI At this time the use of PKI certificates is not supported on the CAG. Information will be forwarded when this function is available. CAG Support: As with the old One VA VPN, Support is not available for problems on your personal PC, If you encounter problems with logging in to the CAG, you must contact the National VPN Help desk at 1-800- 877-4328. For issues with launching applications, please contact your local Site help desk for support. 14
Appendix A Supported Operating Systems for Citrix Access Gateway: (Pasted from <https://media.vpn.va.gov/imagestream.aspx?docid=249> ) FOR FURTHER INFORMATION REFERENCE: Citrix Receivers & Plug- ins To utilize the Citrix Online Plug- in for Windows v12.1 Supported Windows Operating Systems: Windows 7, 32- bit and 64- bit editions (including Embedded Edition) Windows XP Professional, 32- bit and 64- bit editions Windows XP Embedded Windows Vista, 32- bit and 64- bit editions Windows Server 2008 R1, 32- bit and 64- bit editions (not supported by XenDesktop connections) Windows Server 2008 R2, 64- bit edition (not supported by XenDesktop connections) Windows Server 2003, 32- bit and 64- bit editions (not supported by XenDesktop connections) Supported Browsers: Internet Explorer Version 6.0 through 8.0 (NOTE: As of March 11, 2011 Citrix has not released an official supportability statement for Internet Explorer 9 scheduled for release on March 14, 2011) Mozilla Firefox Version 1.x through 3.x.NET Framework Requirements (XenDesktop Connections Only) To use the Desktop Viewer,.NET 2.0 Service Pack 1 or later is required. Hardware Requirements: VGA or SVGA video adapter with color monitor Windows- compatible sound card for sound support (optional) For network connections to the server farm, a network interface card (NIC) and the appropriate network transport software To utilize the Citrix Online Plug- in for Macintosh v11.1 and v11.2 Supported Macintosh Operating Systems: Mac OS X Version 10.4 (Intel and PowerPC) 32- bit and 64- bit with Safari Browser Mac OS X Version 10.5 (Intel and PowerPC) 32- bit and 64- bit with Safari Browser Mac OS X Version 10.6 (Intel only) 32- bit and 64- bit with Safari Browser Hardware Requirements The computer on which you intend to install the plug- in must meet the following minimum requirements: At least 256 MB of RAM 29 MB of free disk space A working network or Internet connection to connect to servers 15
Appendix B Creating a Shortcut to the Citrix CAG on your desktop: Right- click anywhere on your d esktop and s elect New Followed b y Shortcut The following will appear: Type in the URL for the CAG gateway you wish to add. (Normally VISN 11 will utilize the EAST gateway). 16
Click Next. The following will appear: Type in Citrix Access Gateway or, any other name which has meaning for you to describe this shortcut. Click Finish. 17
18