SSLVPN

Susan B. Pysher, Training Coordinator

College of Engineering

Electronic & Computer Services (ECS)

Training & Support

Penn State University

spysher@engr.psu.edu 863-1197

Using the College’s SSLVPN Instructions to Connect to and Access

Network Services https://sslvpn.engr.psu.edu

H:\NetworkOrientation\SSLVPN-Instructions.docx (06/08, rev 11/08)

2

Table of Contents

Using the College’s SSLVPN ........................................................................................................................... 4

Getting Started – What YOU need and What YOUR MACHINE needs...................................................... 5

Connecting to Services using SSLVPN – Information You Need About Your Office Computer or Other

Machines/Servers ..................................................................................................................................... 5

Steps to Logging Into SSLVPN Using Your Browser ................................................................................... 6

Receiving Errors on Login If Virus Software and Windows Isn’t Current .............................................. 8

Make Network Connections Once Logged Into SSLVPN ......................................................................... 12

Example – Connect to Network Share (College’s Transfer Share) ...................................................... 12

Optional Method to Connect to Network Share ................................................................................ 14

Login Screen appears – Login with College’s ENGR Username and Password ................................... 15

Bookmark Your Network Connections for Later Use .............................................................................. 16

Using the BookMarks that You Saved ................................................................................................. 19

Using ‘Network Connect’ ............................................................................................................................ 20

Terminal Sessions ........................................................................................................................................ 22

What you need to use Terminal Services Sessions ................................................................................. 22

How do you FIND your IP Address or Machine Name? ......................................................................... 23

ADD a Terminal Services Session ............................................................................................................ 26

Example – Using Terminal Services – Adding and Connecting to server called ‘engrterm’ ............... 26

CONNECT to a Terminal Services Session ............................................................................................... 29

EDITING a TERMINAL SERVICES SESSION’S PROPERTIES ........................................................................ 31

DELETE a TERMINAL SERVICES SESSION BOOKMARK ............................................................................. 33

WEB BOOKMARKS ....................................................................................................................................... 34

ADD BOOKMARKS to Personal Web Page .................................................................................................. 35

Using Saved Web Bookmarks ................................................................................................................. 37

Buttons ........................................................................................................................................................ 38

Home, Meetings, Preferences, Help, SignOut ........................................................................................ 38

MEETINGS Feature (equivalent to Adobe Connect/Breeze) ..................................................................... 39

Set up a New Web Meeting using SSLVPN .............................................................................................. 39

What an Invited Meeting Invitee Receives in an Email Notification Message ................................... 44

Change/Edit Meeting Details: ................................................................................................................. 45

3

Using Other Button Options ....................................................................................................................... 47

Preferences Button ................................................................................................................................. 48

User Home tab .................................................................................................................................... 48

General Tab ......................................................................................................................................... 49

Applications Tab .................................................................................................................................. 50

Advanced Tab ...................................................................................................................................... 51

HELP Button ............................................................................................................................................ 52

Sign Out Button ....................................................................................................................................... 53

Miscellaneous Information ......................................................................................................................... 54

Do You Have Another Session in Progress? ............................................................................................ 54

CONTACT INFORMATION – HELP ................................................................................................................ 55

4

Using the College’s SSLVPN

Instructions to Connect to and Access Network Services

https://sslvpn.engr.psu.edu

Using the College’s SSLVPN You can use the College’s secure SSLVPN (Secure Socket Layer Virtual Private Network) to remotely connect to Network Services (network shares, etc.) by simply using your WEB BROWSER!! This replaces the previous VPN client that was available to users.

NOTE: MAC Users must use Safari browser (not Firefox, etc.)

Using SSLVPN, you can:

Set Web Bookmarks

Connect to Files

Connect to specific network shares (drives)

Connect using Terminal Services Session

Connect using Network Connect and use all the capabilities of the machine you’re connecting to (as if you’re sitting at your office machine, for example)

Set up web conferencing meetings (equivalent to Adobe Connect (aka Breeze) with people (no audio capability—use phone conference call for audio, etc.)

SSLVPN is a work in progress

OFFICE

HOME

Remote

e

5

Getting Started – What YOU need and What YOUR MACHINE needs

YOU need a University Access ID and Password

YOUR MACHINE – needs to have updated virus definitions and current Windows updates (or you will receive errors)

Connecting to Services using SSLVPN – Information You Need About Your

Office Computer or Other Machines/Servers

To connect to network shares using SSLVPN, you need:

Server and Share name – the same information you would need to map a network drive on your

office machine

o To check the network server/share names:

Use MY COMPUTER (COMPUTER on Vista) or WINDOWS EXPLORER and see the

various network drives that are mapped on your office machine.

Sharename \\server (drive_letter_selected:) indicates the network

sharename, server name, and drive letter

o Example: In Vista, you’ll see: trgcomm (\\engrtrg) (N:)

o Example: In WinXP, you’ll see: trgcomm on ‘engrtrg (N:)

To connect to Terminal Services Sessions using SSLVPN, you will need the machine’s IP (Internet

Protocol) Address (example – 130.203.205.##) OR the machine ‘name’ (example:

jdoe.engr.psu.edu) when connecting remotely.

o To find your computer’s (or another machine’s) IP Address:

In Windows Vista

From the START button, using the Search line: type: cmd then touch

[ENTER], <a window will appear> Type: ipconfig and touch [ENTER]

<information about your computer appears on the screen including your IP

Address>

Close the window

In Windows XP:

From the START button, select Run, on the Run line: type: cmd then

touch [ENTER], <a window will appear> Type: ipconfig and touch

[ENTER] <information about your computer appears on the screen including

your IP Address>

Close the window

6

Steps to Logging Into SSLVPN Using Your Browser

1. Launch your Browser (Internet Explorer, Firefox, etc.) NOTE: Mac users MUST use Safari (no other browser will work)

2. On the Address line, type: https://sslvpn.engr.psu.edu

<Security alert window will appear> Click [OK]

<Security alert window will appear> Click [OK]

Launch your Browser (Internet Explorer, Firefox, etc.) NOTE: Mac users MUST use Safari (no other browser will work) On the Address line, type: https://sslvpn.engr.psu.edu

7

3. <the SSLVPN login screen appears>

4. Login with your University Access Account ID and Password, select the ‘Profile’ (COE Remote Access or Full Tunnel if located at an insecure location such as an Internet café, hotel, conference, etc.)

NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password.

5. Click [Sign in] when finished

<the SSLVPN login screen appears> Login with your University Access Account ID and Password, select the ‘Profile’ (COE Remote Access or Full Tunnel if located at an insecure location such as an Internet café, hotel, conference, etc.)

NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password.

Click [Sign in] when finished

8

<a ‘Loading Components’ window appears indicating that it will take a while>

NOTE: You may get a message window to install components.

Receiving Errors on Login If Virus Software and Windows Isn’t Current

At this point, you may receive an error if your Virus Software definitions are not up to date and/or your Windows operating system updates are not current. Example: If your virus protection software does not meet security requirements, the window will look like this. You would update your virus definitions and/or update Windows, then click [Try Again]

9

NOTE: If your virus definitions are not up to date, SSLVPN should launch LiveUpdate to automatically update your virus software. Once finished you can close the window and proceed with login.

Once your virus protection software and Windows are up to date, you can click [Try Again] – a ‘Launching application – Please wait…’ window appears’

Login with your University Access Account ID and Password again, select Profile, and click [Sign In].

Login with your University Access Account ID and Password again, select Profile, and click [Sign In]

10

Select the Profile(example below): On the Profile line, select either:

COE Remote Access – Select this option most times unless you’re currently in an insecure location (such as Internet Café, Conference, Hotel, etc.). COE Remote Access will only ‘tunnel’ data going to Penn State.

Full Tunnel Use this option if you are in an insecure location. All data will go through Penn State.

NOTE: If you’re going to access University systems such as IBIS/ISIS, etc., you can use COE Remote Access (for example, if you’re using you’re connecting from home) or you can select ‘Full Tunnel’ when logging into SSLVPN if you are in an insecure area (areas such as Starbucks, Internet Café, Conference, Hotel, etc.).

NOTE: When connected to COE Wireless, you will no longer need to select a profile. You will see only your PSU Access ID and password.

11

6. <Your ‘Personal webpage’ appears>

At this point you can begin making connections.

<Your ‘Personal webpage’ appears>

At this point you can begin making connections.

12

Make Network Connections Once Logged Into SSLVPN Once you’ve logged in and your personal webpage appears, at this point you can begin making connections.

Example – Connect to Network Share (College’s Transfer Share)

For example, if you would want to connect to the College of Engineering’s Transfer Share (drive) Under the FILES section, you can add a ‘Share’ to your Profile – click the ‘Add a Windows Directory’ icon located at right of Files section:

For example, if you would want to connect to the College of Engineering Network’s Transfer Share (drive) Under the FILES section, you can add a ‘Share’ to your Profile – click the ‘Add a Windows Directory’ icon located at right of Files section.

13

<a Windows Files window appears with a listing of workgroups/domains > Scroll through to find the workgroup/domain (network) you want – example: look for PSU_Engineering.

Example: Scroll down window and locate/select ‘PSU_ENGINEERING’ then continue to select the specific server and share you want to connect to.

Example: Scroll down window and locate/select ‘PSU_ENGINEERING’ then continue to select the specific server and share you want to connect to.

Example: Scroll down window and locate/select ‘PSU_ENGINEERING’ then select the server and share you want to connect to.

14

Optional Method to Connect to Network Share

OPTIONAL METHOD – You can also make a network connection to shares using the Browse line. In the Browse line (upper right), you can type the \\server\share then click [BROWSE] Example: To connect to Colleges ‘Transfer’ share - \\engrcdc\transfer

Login Screen appears for you to log in with your College ENGR username (yourusername@engr.psu.edu ) and password, then click [Continue].

Login Screen appears for you to log in with your College ENGR username (yourusername@engr.psu.edu ) and password, then click [Continue]

OPTIONAL METHOD – You can also make a network connection to shares using the Browse line. In the Browse line (upper right), you can type the \\server\share then click [BROWSE] Example: To connect to Colleges ‘Transfer’ share - \\engrcdc\transfer

15

Login Screen appears – Login with College’s ENGR Username and Password

Once you’ve identified the network share you want to connect to, a login screen appears. Enter your

College ENGR username (yourusername@engr.psu.edu) and password, then click [Continue].

Example show below:

<the network share appears – you are now connected>

Once you’ve identified the network share you want to connect to, a

login screen appears.

Enter your College ENGR username (yourusername@engr.psu.edu)

and password, then click [Continue].

<the network share appears – you are now connected>

You can access any files that appear

16

Bookmark Your Network Connections for Later Use The ‘shared’ appears – you can then BOOKMARK this connection for use later. Click the Bookmark Current Folder (upper right).

Once the share appears, you then

‘bookmark’ this connection for use

later.

Click the Bookmark Current Folder

(located in upper right of screen)

17

Give Bookmark a Name (the \\server\share will be the default bookmark name that appears unless you change it) and add a Description (optional), then click [Add Bookmark] when finished:

Give Bookmark a Name (the \\server\share will be the default bookmark name that appears unless you change it) and add a Description (optional), then click [Add Bookmark] when finished.

18

<your bookmark appears in your Profile>

<your bookmark appears in your Profile>

19

Using the BookMarks that You Saved

To use Bookmarks you save, simply click on the Bookmark name and it will connect you to the share, etc.:

NOTE: This is the same for terminal sessions and internal websites.

To use Bookmarks you save, simply click on the Bookmark name and it will connect you to the share, etc.

20

Using ‘Network Connect’ Under ‘Client Application Sessions,’ you can choose Network Connect and click [Start] if you want to connect to the network within COE similar to using the Cisco VPN client. Once connected, you can connect to your applications as you would at the office provided you have the software on the computer you’re using.. NOTE: If you’re going to access University systems such as IBIS/ISIS, etc., you can select COE Remote Access when logging in, or select ‘Full Tunnel’ if in an insecure area when logging into SSLVPN.

21

Network Connect window appears – click [Hide] to hide window.

In TaskBar (located at far right) you’ll see a ‘padlock’ icon that will indicate that you’re connected to the secure VPN.

At this point, you would perform any functions just as you would sitting at your office computer.

22

Terminal Sessions

Using SSLVPN you can connect to a server/machine using the Terminal Services Sessions feature.

NOTE: Mac users cannot use Terminal Services

What you need to use Terminal Services Sessions:

To connect to a machine using Terminal Services Session, you will need to have the following

information:

Your machine’s IP address OR the Machine Name

Example - IP Address: 130-203.205.##

Example - Machine Name jdoe.engr.psu.edu

A machine’s RDP ( Remote DeskTop) setting must be turned ON (enabled) to connect remotely

to it.

You can ask your technical contact/system administrator to check the Remote

Desktop setting to be sure that it is enabled.

23

How do you FIND your IP Address or Machine Name?

To find your IP address or a machine name, you can either check with your Technical Contact or System

Administrator OR do the following:

To find your computer’s (or another machine’s) IP Address:

In Windows Vista

From the START button, using the Search line: type: cmd then touch

[ENTER], <a window will appear> Type: ipconfig and touch [ENTER]

<information about your computer appears on the screen including your IP

Address>

Close the window

In Windows XP:

From the START button, select Run, on the Run line: type: cmd then

touch [ENTER], <a window will appear> Type: ipconfig and touch

[ENTER] <information about your computer appears on the screen including

your IP Address>

Close the window

24

o To find your machine name, you can check with your Technical Contact/System Admin to

obtain information OR from START button, go into MY COMPUTER (COMPUTER in Vista).

If you use VISTA, from START button, select COMPUTER, select System Properties (or

look at the bottom of the window (Option: Go into CONTROL PANEL>System &

Maintenance>System to get to the same window containing the Computer (Machine) Name.)

JDOE

Machine name can also be viewed here

Full computer name: jdoe.engr.psu.edu

Domain name

Full computer name:

jdoe.engr.psu.edu

JDOE.engr.psu.ed

u

RDP (Remote Desktop) setting information can be

found under Advanced System settings-Remote tab

25

If you use Windows XP, from START button, select MY COMPUTER, select View system

information under System Tasks at left. When the window appears, you can select

Computer Name tab to find the machine name, and Remote tab will show Remote

Desktop settings (Option: Go into CONTROL PANEL>System & Maintenance>System to get to

the same window containing the Computer (Machine) Name.)

JDOE.engr.psu.edu

26

ADD a Terminal Services Session

Example – Using Terminal Services – Adding and Connecting to server called ‘engrterm’

To ADD a new Terminal Session, under Terminal Sessions, click the Add a Terminal Session icon at far

right:

To add a new terminal session, under

Terminal Sessions, click the Add a Terminal

Session icon at far right:

27

<the Add Terminal Services Session screen appears>

28

EXAMPLE: We’ll add a ‘sample’ Terminal Services Session to a Server called ‘engrterm’

Enter a Bookmark a name

Enter a description

Type in IP address or Machine Name of machine you

want to connect to

You can leave the Client Port and Server Port areas blank

Select 32-Bit (True Color)

Check various options here

Click [Add] when finished

29

After you click [Add], the Personal Webpage appears again and should display the terminal session

that you just added.

CONNECT to a Terminal Services Session To CONNECT to the Terminal Services Session that you added, click the Session bookmark.

After you click [Add], the Personal

Webpage appears again and should display

the terminal session that you just added.

To connect to the Terminal Services

Session that you added, click the Session

bookmark.

30

<a screen should appear indicating ‘Connecting to server/machine’>

<a logon screen should appear for you to login>

Login with your username and password

[From that point on until you close the session, you can use any applications or perform

functions as you would normally]

Close the session when finished by clicking the X at top of screen and when the message appears that

you are going to disconnect, click [OK]

When you disconnect from the terminal services session, you’ll be taken back to the Personal

Webpage once again.

<a screen should appear indicating

‘Connecting to server/machine’>

31

EDITING a TERMINAL SERVICES SESSION’S PROPERTIES

You can edit Terminal Services Session properties at anytime.

From the Personal Webpage, to edit a Terminal Session bookmark, click the Item Properties icon

located at right of the bookmark.

From the Personal Webpage, to edit a Terminal

Session bookmark, click the Item Properties

icon located at right of the bookmark

32

<the Edit Terminal Services Session window appears – make any necessary changes, then click [Save

Changes] at bottom of screen.

<the Edit Terminal Services Session window

appears – make any necessary changes,

then click [Save Changes] at bottom of

screen.

Click [Save Changes] when finished

33

After you click [Save Changes], your Personal Webpage appears again.

DELETE a TERMINAL SERVICES SESSION BOOKMARK

You can DELETE a Terminal Services Session bookmark that you’ve added by clicking the Delete

Bookmark icon at far right of bookmark.

After you click [Save Changes], your Personal

Webpage appears again.

To DELETE a Terminal Services Session bookmark that

you’ve added, click the Delete Bookmark icon at far

right of bookmark.

34

WEB BOOKMARKS

You can add bookmarks to specified web pages on your Personal Webpage when you use SSLVPN.

You can add any bookmarks to web pages on

your Personal Webpage when you use SSLVPN.

35

ADD BOOKMARKS to Personal Web Page

To add a bookmark, click the ‘Add a Bookmark’ icon at far left of Bookmark area.

To add a bookmark, click the ‘Add a Bookmark’ icon

at far left of Bookmark area.

36

<the Add a New Bookmark window appears>

Enter the information for your bookmark and click [Add Bookmark] at bottom of screen when finished.

Example: Bookmark to Training Sharepoint site:

<the new bookmark appears under the Web Bookmarks section on the Personal Webpage>

<the Add a New Bookmark window appears>

Enter the information for your bookmark and click [Add

Bookmark] at bottom of screen when finished.

Example: Bookmark to Training Sharepoint site:

<the new bookmark appears under the Web Bookmarks

section on the Personal Webpage>

37

Using Saved Web Bookmarks

To use the bookmark, simply click on the bookmark you created to launch the web page.

Repeat the process adding other bookmarks you’d like to include.

<the new bookmark appears under the

Web Bookmarks section on the

Personal Webpage>

Repeat the process adding other

bookmarks you’d like to include

Use these buttons

to:

Open in a new

window

Item Properties –

go back into the

bookmark to

make any changes

Delete the

Bookmark

To use the bookmark, simply click on

the bookmark you created to launch

the web page.

38

Buttons

Home, Meetings, Preferences, Help, SignOut Use the Buttons in upper right of your screen select other options and to sign out:

HOME – takes you to your Personal Profiles Webpage MEETINGS – you can create online meetings (like Adobe Connect/Breeze) PREFERENCES – set your personal preferences HELP – provides you with online help concerning the use of SSLVPN SIGN OUT – Sign out of the SSLVPN

39

MEETINGS Feature (equivalent to Adobe Connect/Breeze) Using SSLVPN, you can use the Meetings feature to set up web conferences.

Audio must be conducted using the phone.

Set up a New Web Meeting using SSLVPN From your Personal Webpage, to create a new meeting, click [Meetings] button (upper right of your Personal Webpage window)

40

<Meetings windows appears>

If you click [NEW MEETING], a window appears:

41

Example: Complete the screen Add date/time, add users to invite, Identify a ‘Conductor’ (host) for meeting, check Display password checkbox so that users will have the password to enter the meeting (if unchecked, you would have to provide the password in some other way): ADD a user to be invited – at the User email: line, type in the email address of the user then click [ADD]: (repeat for other users)

42

Example: One user added:

43

Setting a ‘Conductor’ (host) of the meeting - You can identify a different user as the Conductor of the meeting . Only one Conductor can be identified Highlight the user on the list who is to be the Conductor, then click [Set as Conductor]

(Conductor must be an IVE user?) Tom to check this out

Click [FINISH] when all users for the meeting have been added and Conductor has been identified. <The meeting appears in the window the appears>

44

What an Invited Meeting Invitee Receives in an Email Notification Message

A person you’ve invited to a meeting you’ve created will receive an email invitation (example below):

45

Change/Edit Meeting Details: You can always go back into a Meeting to make changes – simply click Details next to the Meeting

46

Back in the Meeting Details area, make changes then scroll to bottom and click [UPDATE].

47

Using Other Button Options Use the Buttons in upper right of your screen select other options and to sign out:

HOME – takes you to your Personal Profiles Webpage MEETINGS – you can create online meetings (like Adobe Connect/Breeze) PREFERENCES – set your personal preferences HELP – provides you with online help concerning the use of SSLVPN SIGN OUT – Sign out of the SSLVPN

48

Preferences Button If you click [Preferences], a window appears – set your personal preferences. Click various tabs to set options.

User Home tab

If you select User Home:

49

General Tab

If you select General: Set Daylight Saving Time setting and set Secure Meeting Information – you can include a default email address and default teleconference info in this window, then click [Save Changes]

50

Applications Tab

If you select Applications:

51

Advanced Tab

If you select Advanced: Set Cookies preferences, Cached Passwords preferences, Host Checker Remediation, then click [Save Preferences] when finished.

52

HELP Button If you click the HELP button (upper right of window)

Access Online Help for your Secure Gateway Session:

53

Sign Out Button

If you click the [Sign Out] button, you will sign off and close your network connection.

<a window will appear indicating that you are about to leave a secure Internet connection. Indicate ‘Yes’

to continue disconnecting.

54

Miscellaneous Information

Do You Have Another Session in Progress?

You’ll receive a window indicating that there are already other user sessions in progress.

55

CONTACT INFORMATION – HELP

If you have specific questions or problems using SSLVPN, please contact:

Tom Long tlong@engr.psu.edu (863-6104).

Documentation is posted online at http://www.ecs.psu.edu/training/NetworkOrientation/SSLVPN-

Instructions.pdf .

A link to the SSLVPN instructions is also provided from the Training Sharepoint site

https://coespoint.ecs.psu.edu/training (log in with Access Account ID and password)