Docstoc

ssl vpn 0415

Document Sample
ssl vpn 0415 Powered By Docstoc
					SSL VPN
                                         Contents


Overview                                            3

1.0 Installation and Configuration                  3

2.0 How to access iCan                              5

3.0 Adding Drive Mappings                           6

4.0 How to add department drive                     9

5.0 How to add RDP Connection                       10

6.0 SSL VPN Tunnel Mode for Windows XP              13

7.0 SSL VPN Tunnel Mode for Windows Vista           15




                                                         2
                                            SSL VPN
Overview

Information Technology Services have now implemented a new service for connecting to
Canadore College using Secure Virtual Private Networking (SSL VPN). This new service will
allow you secure access to authorized applications from any internet provider using your
Canadore network account. Remote users can work with files on network drives, email, Intranet
sites and client server applications just as if they were working from the office. This new service
will allow you to connect to the SSL VPN PORTAL using your web browser instead of having to
download and install a separate program.

This new service offers two modes of operation all from your Web Browser:

Web Mode Application: Secured access to the portal interface (Home drive, shared
Departmental drive, ICAN, Remote Desktop).

Tunnel Mode Application: Secured access to all client server applications such as (Native
Banner, Full Exchange Client, Argos)

1.0 Installation and Configuration

Open Internet Explorer and go to https:\\192.139.245.254:10443, you should see following screen:

Enter your Canadore network logon user name and password (same as webmail)




                                                                                                   3
To add to favorites, press ctrl-d, give it a name and click add.




                                                                   4
You will get the following screen the first time you login,




                                                              5
2.0 Accessing iCan

                                   How to Access iCan
Click the iCAN link under pre-defined bookmarks.




You should then get prompted for you user name and password.

User Name: canadore\username (Must have canadore\ in front of user name)
Password: your password




The iCan portal will then open.


                                                                           6
3.0 Adding drive mappings

                        How to add home folder
            (Your network folder commonly known as G-Drive)
Click add bookmark. For title enter G-Drive (or whatever description you wish), for application type
choose SMB/CIFS from drop down menu




Shared File Folder, enter //cluster/username/ (Must have the slashes at the beginning and end)




Click OK.




                                                                                                       7
You will be returned to the main screen and your G-Drive will be under My Bookmarks.




To access your G-Drive now, all you have to do is click on the link, and log in.

User Name: canadore\username (Must use canadore\ in front of user name),Password: your password
then click login.




                                                                                                  8
While navigating the G-Drive, DO NOT use your browsers back button, use the navigation buttons at the
top right.




When done using G-Drive click the logout button      .




                                                                                                    9
4.0 How to add department drive

                          How to add a department drive
Click add bookmark. For title enter a name such as Department Drive (can be anything you like), for
application type choose SMB/CIFS from drop down menu




Shared File Folder, enter //cluster/department/ (Must have the slashes at the beginning and end)
You can check the name of your department drive on your office computer, go to My Computer, the
drive will be name on ‘cluster’




Click OK.

To access you Department drive, it will be the same process as your G-Drive.




                                                                                                      10
5.0 How to add RDP Connection

                            How to add RDP connection
RDP stands for Remote Desktop Protocol. It is used to connect to your office computer from outside the
college.

Click add bookmark. For title enter RDP, for application type choose RDP from drop down menu.




For host name/IP, enter your computer name




Click OK




                                                                                                   11
The first time you access RDP you should get the following 2 screens , make sure Always trust content
from this publisher is checked. Then click Yes and Run.




                                                                                                        12
When you log into RDP you will also get this window, leave the default values and just click OK.




The windows log in screen should then appear and just log into the computer as if you were at the
college.




                                                                                                    13
6.0 SSL VPN Tunnel Mode for Windows XP

                                    SSL-VPN Tunnel mode
This requires Windows 2000/XP/2003/Vista (32 or 64 bit) and IE 6.0 or later. This VPN mode would be
used to access client-server applications. E.G. This would be used to access Native Banner at home.

Click Activate SSL-VPN Tunnel Mode




Click yellow bar to install sslvpn.cab




                                                                                                  14
Click install




The following screen will come up. Just minimize this window now (THIS WINDOW MUST STAY OPEN).




                                                                                            15
7.0 SSL VPN Tunnel Mode for Windows Vista

                            SSL VPN Tunnel Mode for Vista
This VPN mode would be used to access client-server applications such as Native Banner, Argos and full
Exchange client.

The steps for installing the client to use Tunnel mode in Vista are a bit different than those on XP. First,
UAC (User Account Control) must be disabled.

    1. Open Control Panel
    2. Click “User Accounts and Family Safety”
    3. Click “User Accounts”
    4. Click “Turn User Account Control On or Off”
    5. When prompted by Windows for permission to continue, choose “Continue”
    6. Uncheck “Use User Account Control (UAC) to help protect this computer”. After all of this, you
       can turn UAC back on.
    7. Click OK and choose Restart Now to restart your computer.

After your system restarts, we can go back into VPN. Log into VPN as you did before, up until you see the
link at the top of the window for “Activate SSL-VPN Tunnel Mode”

    1. Click on “Activate SSL-VPN Tunnel Mode”
    2. An error may come up in regards to you not having administrative rights. Click




       OK.
    3. Note the yellow information bar at the top of the window. Click on it and choose either “Run
       ActiveX Control” or “Install ActiveX Control”
    4. Nothing may happen at this point, in which case click on “Activate SSL-VPN Tunnel Mode” again




                                                                                                           16
5. Choose “Install” when prompted to install




   sslvpn.cab
6. Choose “Install this driver software anyway” at the Windows warning




   screen
7. This may take a few minutes, please be patient. The status in the client screen may read
   “FortiClient SSL VPN Offline” in which case you will need to close Internet Explorer and re-
   connect to VPN. Click on the Tunnel Mode once more




                                                                                                  17
   8. When the client has established a connection you may see a window to “Set Network Location”.
      Choose “Work” and proceed. When it says “Successfully set network settings” choose




      Close.
   9. Note the network status for “fortissl” in the client and in Windows (see screenshot) below.




  ** The internet window (or tab) you used to open the SSL VPN Tunnel mode must remain open in
                       order for you to remain connected in tunnel mode **

At this point you can re-enable UAC on your machine following the same UAC instructions above, but
putting a check beside “Use User Account Control (UAC) to help protect this computer”.

                                                                                                     18

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:48
posted:9/13/2012
language:English
pages:18