VPN Remote Access: Difference between revisions

From William Paterson University - Information Technology's Wiki
Jump to navigation Jump to search
No edit summary
 
(207 intermediate revisions by 7 users not shown)
Line 1: Line 1:
== Introduction ==


William Paterson University provides a VPN option for remote access into its computing and network environment. VPN access is available for '''faculty and staff only and must first be authorized by a Help Desk request'''.  <!-- add image/text about Fail/Deny -->


== Introduction to Remote Access (Faculty/Staff) ==
VPN stands for Virtual Private Network. A VPN allows you to use the ISP (Internet Service Provider) of your choice and connect to WPUNJ using services normally restricted to campus usage, such as the K:\ and U:\ drives. It does this by providing a "Virtual" network connection to WPUNJ. That is, even though you are connected to your ISP, it appears that you are actually connecting from WPUNJ. Providing that you have a fast enough connection to the University's network through an Internet service provider you can access any data and applications the same way you do from your office at the University.


===When should you use a VPN Connection?===


William Paterson University provides a VPN option for remote access into its computing and network environment.
The VPN connection should be used when you need to connect to a protected/firewalled WPUNJ network services. These include but are not limited to:
<ul>
<li>Logging into the administrative systems
<!-- <li>Connecting remotely to some of the University's Library resources (WebVPN) -->
<li>Accessing University File Services
</ul>
When connecting to unrestricted services, such as browsing the Web, you should use only your ISP connection and not the VPN connection. VPN is only required for access to protected services at WPUNJ.


'''VPN'''
==VPN Multifactor Authentication==
Virtual Private Network (VPN) access is a form of remote access. Providing that you have a fast enough connection to the University's network through a commercial ISP then you can access any data and applications the same way you do from your office at the University. The VPN software authenticates you as a valid WPUNJ node and in addition it will encrypt all your data enhancing your data transmission security. Check your local ISP for Cable or DLS modem services.


Multifactor Authentication is required for William Paterson University VPN Access.  If you have not signed up for Two-Factor Authentication, [http://www.wpunj.edu/help please request access using the ticket type Account -> VPN Access].


== Introduction to VPN ==
For information on using Multi Factor Authentication, including use of the Duo App, please see our [[Multifactor_Authentication|Multifactor Authentication article.]]


The [[#Second Password Field|secondary password field]] information can be found below, or on the [[Multifactor_Authentication#Additional_VPN_Authentication_for_Cisco_Any_Connect_Client|Multifactor Authentication article, and include push, sms and phone]].


'''What is a VPN?'''
{{#ev:youtube|pgrzRIQ9874|400}}
VPN stands for Virtual Private Network. A VPN allows you to use the ISP (Internet Service Provider) of your choice and connect to WPUNJ using services normally restricted to campus usage. It does this by providing a "Virtual" network connection to WPUNJ. That is, even though you are connected to your ISP, it appears that you are actually connecting from WPUNJ. 
When should you use a VPN Connection?


The VPN connection should be used when you need to connect to a protected/firewalled WPUNJ network services. These include but are not limited to:
<ul>
<li>Logging into the administrative systems
<li>Connecting remotely to some of the University's Library resources
<li>Retrieving E-Mail Using WPUNJ Discussion Groups</ul>


When connecting to unrestricted services, such as browsing the Web, you should use only your ISP connection and not the VPN connection. VPN is only required for access to protected services at WPUNJ.  
===Using VPN with Multifactor Authentication===
 
#After you have set up your account, you will continue to use the [[VPN_Remote_Access#Client_VPN_Application|Cisco AnyConnect client]] as you have in the past.      <!-- <p>[[File:2FA.gif]]</p> -->
#When you provide your login credentials you will now be provided with a [[#Second Password Field|secondary authentication]] box.  You can then either use an [[Multifactor_Authentication#Duo App for Mobile Devices|app]] on your android (or iphone) to generate a key OR type "push" in the [[#Second Password Field|secondary authentication]] box.  Using "push" will send a notification to the app on your phone.  (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)
#On University imaged Macs you can initiate a Cisco MultiFactor VPN connection via the wpuVPN menu item:<br>
{| style="text-align: left;"
|
<p>[[File:WpuVPN Menu.png|thumb|wpuVPN Menu]]</p>
|}
Select "Connect via Cisco AnyConnect" and the Cisco AnyConnect client will launch.
 
===Second Password Field=== 
[[File:Anyconnect3.PNG|thumb|left|alt=The second password field appears in the Cisco Anyconnect tool.|The second password field appears in the Cisco Anyconnect tool.]]
 
The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multifactor authentication you will be utilizing.
{|
! style="text-align:left;"|Authentication Method
!  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
! style="text-align:left;"|Second Password
|-
|Duo App Push Verification
| 
|'''push'''
|(See image 1. below)
|-
|Duo App to Generate Authentication Code
|     
|'''Enter Code displayed in App'''
|(See image 2. below)
|-
|Text Message
| 
|'''sms''' &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
|(You will receive a text message with a key that will expire after one hour)
|-
|Phone Call
| 
|'''phone''' &nbsp; &nbsp; &nbsp; &nbsp;
|(If you have registered multiple phone numbers, enter phone1, phone2, as needed)
|}
 
<br><br>
{|  style="text-align: center;"
| 1. Authorizing access through the Duo App 
<p>[[File:duo_iphone2.PNG|200px]]</p>
| &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
| 2. Generating a Key in the Duo App 
<p>[[File:duo_iphone1.PNG|200px]]</p>
|}


== VPN Services ==


'''Who do I contact for HELP?'''
The VPN server authenticates using WPU usernames and passwords ONLY. Faculty and staff users must have a valid WPUNJ account to use the VPN services.  VPN Services are available as a web or client application. 


Contact [https://help.wpunj.edu/helpdesk/ Help Desk Request]
=== Microsoft VPN (WPUNJ VPN or MS VPN) for University Imaged Machines ===
'''Please note:''' when using the Microsoft VPN, ALL internet traffic from your connected laptop/device will be securely routed through the university network. This includes any network traffic intended for non-WPUNJ services and, as result, this may result is slower response from outside resources.


====University Windows 10 Laptops====
This video demonstrates how to login to the WPUNJ VPN once the connection appears on your laptop. Once connected, you will be able to access to your network drives as though you were on campus.


'''How do I install and use the VPN software at WPUNJ?'''
The K: drive will be available upon connection, though you may need to ‘map’ your U: drive manually ([[Map a Network Drive|instructions on how to do so here]].)


In order to use the VPN software you must first obtain a valid WPUNJ Email/user account. The VPN software can be downloaded through the University portal WPCONNECT from the Employee tab and under the Available Application window frame.
{{#ev:youtube|AGHnq1jayhc|400}}


Click here for the [[Universal Anyconnect VPN installation]]  instructions.
====University Mac Laptops====


MS VPN is now located in your menu bar. The install the MS VPN can be found in the Managed Software Center
''**this may require that you first use the Cisco AnyConnect VPN client to install the MS VPN from off campus and run a Managed Software Center check for updates''


'''What are the most common problems associated with the usage of the VPN client? '''
[[File:WpuVPN Menu.png|300px]]


Using AOL, CompuServe, NetZero, etc. and any ISP providing a customized proprietary browser.
After selecting "Connect via MSVPN" you will be prompted for your WPUNJ password, once entered you will be sent an authentication to your primary [[Multifactor Authentication]] device.


[[File:MSVPN_Mac_3.png|400px]]


'''Disclaimer: William Paterson University is not responsible for any software/hardware failures due to the installation of the VPN software provided..'''
Once you are finished using VPN please Disconnect from the same menu you utilized to connect.


<div class="center" style="width:auto;margin-left:auto;color:red;margin-right:auto;">
[[File:MSVPN_Mac_2.png|250px]]
!!!WARNING!!!


The VPN software available on this page is for use in the United States and Canada ONLY. It is NOT to be placed on a computer system that will be subject to International Travel. Exporting this software is a Federal Crime. Click here to review the export compliance regulations.}</div>
<!-- === Web VPN  ===
{{#ev:youtube|zX50sdroyMk|400|right}}
The steps to sign-on to [http://www.wpunj.edu/webvpn WebVPN] and use are as follows:


<OL>


<LI> Simply navigate to [https://webvpn.wpunj.edu/+CSCOE+/logon.html Web VPN] and sign in with your university credentials.


[[:Category:Network Services|Network Services]]
<div class="toccolours mw-collapsible mw-collapsed" style="width:500px">
[[Image:Anyconnect4.PNG|center|500px]]
</div>


<LI> Click Login. Authenticate using your chosen two-factor authentication method.
<div class="toccolours mw-collapsible mw-collapsed" style="width:500px">
[[Image:Anyconnect9.PNG|center|500px]]
</div>


== Information ==
<LI> Once your university credentials are verified, you will be taken to the new user interface for the VPN.  The Home Tab will be the default view for your VPN session.  From this home Tab, you will be able to [[#Accessing files on your network shares (K and U drives) |view your U-Drive, K-Drive,]] as well as have direct links to both the [http://www.wpunj.edu university's home page] and the [http://www.wpunj.edu/library Library's home page].  Don't be alarmed if you don't see the words "U-drive" or "K-drive".  They are simple named differently.  Also, if you edit a file you will have to save it on your local drive and upload the way you would upload an e-mail attachment, drag and drop or direct saving to the network drive is not available.
<UL><UL><UL>
<LI> '''My Folder''' represents your User folder, or your U-Drive.
<LI> '''WPU Folders''' represents the K-Drive.
</UL></UL></UL>


The Cisco Anyconnect VPN client available for faculty/staff only !! Download it through the [http://wpconnect.wpunj.edu/cp/home/loginf WPCONNECT] portal from the "Employee" tab, and under the "Available Application" window frame.
<div class="toccolours mw-collapsible mw-collapsed" style="width:500px">
[[Image:Anyconnect5.PNG|center|500px]]
</div>


The VPN does not replace your ISP connectivity, it is intended only so your can access secure resources.
<LI> Don't forget to '''LOG OFF''' after you have completed your VPN session.
</OL>
-->


While the VPN is active your are still connected using your ISP profile. This means you MUST fully qualify your WPUNJ system names, including the wpunj.edu domain name. You must use <span style="color:red;">SYSTEM-NAME.wpunj.edu</span> to contact systems at WPU. For example, use www.wpunj.edu, when contacting www.
=== Cisco AnyConnect Client VPN Application ===


The VPN server authenticates using Windows/Email usernames and passwords ONLY. Faculty and staff users must have a valid WPUNJ Windows/Email account to use the VPN services.
'''Please note:''' when using the Cisco AnyConnect VPN from your connected laptop/device, only the network traffic for communicating with WPUNJ campus resources will be securely routed through the university network. Non-WPUNJ services will communicate directly to those services as if VPN was not connected. Note: one known exception is that home networks with IP addresses starting with 172.x, 10.x, or 192.x may encounter issues with connecting to local network resources when connected to the Cisco AnyConnect VPN.


Mac OS instructions are after the Windows directions.
Download the required software through WP Connect from the "Employee" tab, and under the "Information Technology" window frame. The VPN does not replace your ISP connectivity, it is intended only so your can access secure resources.


=== Microsoft Windows ===
==== Microsoft Windows ====


Download the Windows VPN client from the [http://wpconnect.wpunj.edu/cp/home/loginf WPCONNECT] portal. From the "Employee" tab, and under the "Available Applications" window frame you will see a link named "Download the Universal VPN Software". Click on it.
<!-- ===== Microsoft Windows Cisco AnyConnect VPN Client Installation =====
Full time employees will be able to download the Windows VPN client from the [http://wpconnect.wpunj.edu/cp/home/loginf WPCONNECT] portal. From the "Employee" tab, and under the "Information Technology" window frame you will see a link named "Web VPN". Click on it.


Install the AynConnect VPN Client
Part Time employees should visit [http://webvpn.wpunj.edu http://webvpn.wpunj.edu]


<ul>
<ul>
Line 77: Line 154:


<div class="toccolours mw-collapsible mw-collapsed" style="width:345px">
<div class="toccolours mw-collapsible mw-collapsed" style="width:345px">
[[Image:Uavpn-login-ssl-345w.gif|center|345px]]
[[Image:Anyconnect4.PNG|center|345px]]
</div>
</div>
Log in using University credentials
<li>Click on the "AnyConnect" link on the left hand column of the WEBVPN
<li>Install the AnyConnect VPN Client




Line 88: Line 171:




<li>At completion of the installation you will see a "Connection established" on your brrowser window as shown below. Now your VPN client is fully installed and running. Just close your browser.
<li>At completion of the installation you will see a "Connection established" on your browser window as shown below. Now your VPN client is fully installed and running. Just close your browser.


<div class="toccolours mw-collapsible mw-collapsed" style="width:480px">
<div class="toccolours mw-collapsible mw-collapsed" style="width:480px">
[[Image:Uavpn-complete-480w.gif|center|480px]]
[[Image:Anyconnect2.PNG|center|480px]]
</div>
</div>


<li>To disconnect the VPN client simply right click on the VPN icon on the right side of your task bar (it looks like a lock) and click on the 'Disconnect" button.
<li>To disconnect the VPN client simply right click on the VPN icon on the right side of your task bar (it looks like a lock) and click on the 'Disconnect" button.
 
<!--
<div class="toccolours mw-collapsible mw-collapsed" style="width:75px">
<div class="toccolours mw-collapsible mw-collapsed" style="width:75px">
[[Image:Uavpn-lock-75w.jpg|center|75px]]
[[Image:Uavpn-lock-75w.jpg|center|75px]]
</div>
</div>
-->


<div class="toccolours mw-collapsible mw-collapsed" style="width:400px">
[[Image:Anyconnect8.PNG|center|400px]]
</div>


<li>To reconnect click on the start windows button at the left bottom of your task bar and select "All Programs". There you will find a "Cisco" folder with the Anyconnect VPN program icon. Click on the icon to launch the AnyConnect VPN client.
<li>To reconnect click on the start windows button at the left bottom of your task bar and select "All Programs". There you will find a "Cisco" folder with the Anyconnect VPN program icon. Click on the icon to launch the AnyConnect VPN client.
-->


===== Using the Windows Cisco AnyConnect VPN Client =====
<li>Once launched you will be asked to enter your WPU user account and password. Please do so. If the "Connect to:" field is empty please enter vpn.wpunj.edu. That is the address of the VPN server. Now click on the "Connect' button to run the AnyConnect VPN client.
<li>Once launched you will be asked to enter your WPU user account and password. Please do so. If the "Connect to:" field is empty please enter vpn.wpunj.edu. That is the address of the VPN server. Now click on the "Connect' button to run the AnyConnect VPN client.
   
   
<div class="toccolours mw-collapsible mw-collapsed" style="width:330x">
[[Image:Anyconnect3.PNG|center|650px]]
[[Image:Uavpn-login-330w.jpg|center|330px]]
</div>
 


''Note'': The Cisco VPN Client will be minimized to the task bar, the icon looks like a lock. To disconnect, right click on the icon for the VPN client and select disconnect.
''Note'': The Cisco VPN Client will be minimized to the task bar, the icon looks like a lock. To disconnect, right click on the icon for the VPN client and select disconnect.


For technical support contact [https://help.wpunj.edu/helpdesk/ Help Desk Request]
[[Multifactor_Authentication#Second_Password_Field|For Second Password directions please see the Two Factor section of this article.]] For technical support contact [https://help.wpunj.edu/helpdesk/ Help Desk Request]


</ul>
</ul>
<li>To disconnect the VPN client simply right click on the VPN icon on the right side of your task bar (it looks like a lock) and click on the 'Disconnect" button.
<div class="toccolours mw-collapsible mw-collapsed" style="width:400px">
[[Image:Anyconnect8.PNG|center|400px]]
</div>
<li>To reconnect click on the start windows button at the left bottom of your task bar and select "All Programs". There you will find a "Cisco" folder with the Anyconnect VPN program icon. Click on the icon to launch the AnyConnect VPN client.




==== Mac OS X (10.7 or later) ====


=== Mac OS X (10.7 or later) ===
<!-- '''If you are using a university supplied MacBook or MacBook Pro you should skip to step 6.'''


1) Log into WPConnect. Go to the Employee Tab and select "Download Universal VPN Software. You will be prompted to log in. DO so.
===== Installing =====
1) Log into WPConnect. Go to the Employee Tab and then select the "Information technology" link. Click on the "WebVPN" link.


2) Once logged in click on the "any connect" button on the left of the page
2) Once logged in click on the "any connect" button on the left of the page


[[File:WebVPN1.png]]
[[File:WebVPN1.png|650px]]


3) Click on "start AnyConnect"
3) Click on "start AnyConnect"


[[File:WebVPN2.png]]
[[File:WebVPN2.png|650px]]


4) Wait for the installation to fail. When it does click on the "Mac OS X 10.4 +(intel)" link
4) Wait for the installation to fail. When it does click on the "Mac OS X 10.8 +(intel)" link


[[File:WebVPN4.png]]
[[File:WebVPN4.png|650px]]


5) it will download a file to your designated download location. This is usually your downloads folder but you may have changed it to somewhere else. Locate the file "vpnsetup.dmg" and double click on it. It will mount a disk image on your desktop.
5) it will download a file to your designated download location. This is usually your downloads folder but you may have changed it to somewhere else. Locate the file "vpnsetup.dmg" and double click on it. It will mount a disk image on your desktop.


[[File:Client_VPN1.png]]
[[File:Client_VPN1.png|300px]]


6) run the installer in the disk image. It will create a folder in your Applications folder called "Cisco".
6) Before you can run the installer package, you should temporarily disable [http://en.wikipedia.org/wiki/Gatekeeper_(OS_X) Gatekeeper] (This only applies to non university laptops). [http://kb.wordpress.depauw.edu/?page_id=3195 Refer to these instructions]. Once complete, run the installer in the disk image. It will create a folder in your Applications folder named "Cisco".


[[File:Client_VPN2.png]]
[[File:Client_VPN2.png|300px]]


7) In that folder you will see an application named "Cisco Any Connect VPN Client". Double click on it.
7) In that folder you will see an application named "Cisco Any Connect VPN Client". Double click on it.
Line 153: Line 246:
9) If the software can reach the university authentication server you will be asked for your university login credentials. Enter them and click the "connect" button.
9) If the software can reach the university authentication server you will be asked for your university login credentials. Enter them and click the "connect" button.


[[File:Client_VPN5.png]]
[[File:Client_VPN5.png |300px]]




Line 160: Line 253:


William Paterson University is not responsible for any software/hardware failures due to the installation of the VPN software provided by Cisco.
William Paterson University is not responsible for any software/hardware failures due to the installation of the VPN software provided by Cisco.
-->
1) There is a folder in your Applications folder named "Cisco".
[[File:Client_VPN2.png|300px]]
2) In that folder you will see an application named "Cisco Any Connect VPN Client". Double click on it.
[[File:Client_VPN3.png]]
3) when the program launches you will see a connect window. In the space next to "Connect to"  type "vpn.wpunj.edu" and click "connect"
[[File:Client_VPN4.png]]
4) If the software can reach the university authentication server you will be asked for your university login credentials. Enter them and click the "connect" button.
[[File:Client_VPN5.png |300px]]
You are now connected to the university network.
==== Mobile Devices (iPad, iPhone, Android) ====
Mobile devices have the ability to connect to the on campus network via VPN. Some helpful tips:
* VPN connections are only possible from off campus
* Your device must be connected to the Internet via wi-fi or cellular data.
* The below screen captures were created on an iPhone. The client can also be used on Android devices.
# Search for "cisco anyconnect" on the Apple App Store or Google PlayStore and download the app.<br clear=all>
{|
|[[image:Ios-cisco-anyconnect-1.PNG|left|250px]]
|[[image:Android-cisco-anyconnect-1.PNG|left|250px]]
|}
<br clear=all>
# When first launching the application, Cisco Anyconnect will display this prompt. Tap OK.<br clear=all>[[image:Ios-cisco-anyconnect-2.PNG|left|250px]]<br clear=all>
# Select "Connections"<br clear=all>[[image:Ios-cisco-anyconnect-3.PNG|left|250px]]<br clear=all>
# Enter <code>WPUNJ</code> as the description and <code>vpn.wpunj.edu</code> as the server address. Tap Save.<br clear=all>[[image:Ios-cisco-anyconnect-4.PNG|left|250px]]<br clear=all>
# Tap the on/off switch to On to connect.<br clear=all>[[image:Ios-cisco-anyconnect-5.PNG|left|250px]]<br clear=all>
# You will be prompted to enter your WPUNJ username and password.<br clear=all>[[image:Ios-cisco-anyconnect-6.PNG|left|250px]]<br clear=all>
# To confirm that you are connected, the VPN icon will be visible on the top of the screen.<br clear=all>[[image:Ios-cisco-anyconnect-7.PNG|left|250px]]<br clear=all>
# The Cisco Anyconnect VPN app will run in the background on your iOS device until the VPN connection is terminated. To terminate the connection, return to the app and toggle the on/off switch to Off.
<!-- == Accessing files on your network shares (K and U drives) ==
It is important to understand that accessing our network storage through the [https://vpn.wpunj.edu webvpn] is a bit different than using your office PC or laptop.  There is no "drag and drop."  To access and/or edit a file, it must first be downloaded locally.  If your file is edited or changed, you must UPLOAD it back to the folder it resided in.  If you fail to do so, all changes you made will only exist on the computer you made the changes on.
From the home tab, you must select the set of folders you wish to access.  As mentioned above, folders do not show up as "K" or "U."  Instead you see "My Folder," "Groups Folder" and "WPU Folders."  See the circled area below:
<li>[[Image:Folderlist.png|600px]]
<li> '''My Folder''' - This is your "U Drive" which is commonly mapped on your University computer to "Documents" in Windows 7 or "My Documents" in Windows XP.
<li> '''Groups''' - This is a direct link to K:\Groups.  All of your departmental folders should be in here.
<li> '''WPU-Folders''' - This is the root of the "K Drive."  If you store and access all of your files from the Groups folder or your User folder, you will not need to use this option.
=== Navigating Shared and User Folders ===
Once you have chosen which set of folders you want to use, click on the link to display the list.  In the example below, I have clicked on "Groups."
<li>[[Image:Groupsfolder.png|600px]]
<li>By default, the list is sorted in alphabetical order.  Just like on the K drive, you can change the sorting to sort by Name, Size, Type or Date Modified by clicking on that heading.  You should still have the menu on the left (Home, Web Applications, Browse Networks and AnyConnect) as well as a sequence of icons above the folder list:
[[Image:Webvpn-files-icons.png|600px]]
Hovering over the icons should tell you what each one does.  For navigating, the important ones are:
<li>'''Level Up''' - [[Image:Webvpn-levelup.png]] This is like the back button on your web browser.  This will go "up" one level in your list of folders.
<li>'''Previous & Next''' - [[Image:Webvpn-prevnext.png]]  The page will only display the number of files or folders that fit on that particular page.  Use these buttons to find the page containing the resource you need.
=== Opening, Downloading & Editing Files ===
Once you've found the file you want to use, it's almost as simple as clicking on the file.  In most browsers, this will prompt you to open or save the document.  If you only need to read the file, it is OK to go ahead and click "open."  This will save the document in your temporary internet files and allow you to read the document.  '''BE CAREFUL'''  If you decide to edit this document, clicking "save" might just save it in your temporary internet files only to be lost at some point.  It's important that, if you are going to edit the file, you '''save it to your local computer''' and then open it from there.
=== Uploading Changed, Edited or New File ===
This step would apply to:
<li> Any document you downloaded and edited
<li> New documents you would like to add to a network folder
Once you have edited your file (or have a new one), you '''must''' upload it to the server.  If you do not, '''it will only reside on your local machine.'''  If you have been editing a document for a decent amount of time, the WebVPN may have timed out.  If this is the case, log back in and browse to the folder you wish to upload your document to.  Once in that folder, click on the icon to upload files: [[Image:Webvpnupload.png]]
You should now be presented with a box to upload your file:
<br>[[Image:Webvpn-uploadfiles.png]]
<br>Click on "browse" and browse (on your local computer) to the location you saved your new or edited file.  Once selected, click OK.
If this file already exists on the server, it will warn you and as you if you wish to overwrite.  If you are sure you want to upload the file, click OK:<br>
[[Image:Webvpn-overwrite.png]]
<br>You should now be able to browse to, download, edit and upload files through use of the [http://www.wpunj.edu/webvpn WebVPN].
-->
''The VPN software available on this page is for use in the United States and Canada ONLY. It is NOT to be placed on a computer system that will be subject to International Travel. Exporting this software is a Federal Crime.''




Line 166: Line 339:
[[Category:Apple]]
[[Category:Apple]]
[[Category:Windows]]
[[Category:Windows]]
[[Category:Mobile]]
[[Category:Help Desk]]

Latest revision as of 09:44, 18 September 2024

Introduction

William Paterson University provides a VPN option for remote access into its computing and network environment. VPN access is available for faculty and staff only and must first be authorized by a Help Desk request.

VPN stands for Virtual Private Network. A VPN allows you to use the ISP (Internet Service Provider) of your choice and connect to WPUNJ using services normally restricted to campus usage, such as the K:\ and U:\ drives. It does this by providing a "Virtual" network connection to WPUNJ. That is, even though you are connected to your ISP, it appears that you are actually connecting from WPUNJ. Providing that you have a fast enough connection to the University's network through an Internet service provider you can access any data and applications the same way you do from your office at the University.

When should you use a VPN Connection?

The VPN connection should be used when you need to connect to a protected/firewalled WPUNJ network services. These include but are not limited to:

  • Logging into the administrative systems
  • Accessing University File Services

When connecting to unrestricted services, such as browsing the Web, you should use only your ISP connection and not the VPN connection. VPN is only required for access to protected services at WPUNJ.

VPN Multifactor Authentication

Multifactor Authentication is required for William Paterson University VPN Access. If you have not signed up for Two-Factor Authentication, please request access using the ticket type Account -> VPN Access.

For information on using Multi Factor Authentication, including use of the Duo App, please see our Multifactor Authentication article.

The secondary password field information can be found below, or on the Multifactor Authentication article, and include push, sms and phone.


Using VPN with Multifactor Authentication

  1. After you have set up your account, you will continue to use the Cisco AnyConnect client as you have in the past.
  2. When you provide your login credentials you will now be provided with a secondary authentication box. You can then either use an app on your android (or iphone) to generate a key OR type "push" in the secondary authentication box. Using "push" will send a notification to the app on your phone. (Using "sms" will initiate a text with an authentication key that will expire after one hour, or "phone" if you have signed up for a phone call.)
  3. On University imaged Macs you can initiate a Cisco MultiFactor VPN connection via the wpuVPN menu item:

wpuVPN Menu

Select "Connect via Cisco AnyConnect" and the Cisco AnyConnect client will launch.

Second Password Field

The second password field appears in the Cisco Anyconnect tool.
The second password field appears in the Cisco Anyconnect tool.

The following is utilized when using the Cisco Any Connect Client for VPN. The second password field is where you define the method of multifactor authentication you will be utilizing.

Authentication Method             Second Password
Duo App Push Verification push (See image 1. below)
Duo App to Generate Authentication Code Enter Code displayed in App (See image 2. below)
Text Message sms             (You will receive a text message with a key that will expire after one hour)
Phone Call phone         (If you have registered multiple phone numbers, enter phone1, phone2, as needed)



1. Authorizing access through the Duo App

Duo iphone2.PNG

             2. Generating a Key in the Duo App

Duo iphone1.PNG

VPN Services

The VPN server authenticates using WPU usernames and passwords ONLY. Faculty and staff users must have a valid WPUNJ account to use the VPN services. VPN Services are available as a web or client application.

Microsoft VPN (WPUNJ VPN or MS VPN) for University Imaged Machines

Please note: when using the Microsoft VPN, ALL internet traffic from your connected laptop/device will be securely routed through the university network. This includes any network traffic intended for non-WPUNJ services and, as result, this may result is slower response from outside resources.

University Windows 10 Laptops

This video demonstrates how to login to the WPUNJ VPN once the connection appears on your laptop. Once connected, you will be able to access to your network drives as though you were on campus.

The K: drive will be available upon connection, though you may need to ‘map’ your U: drive manually (instructions on how to do so here.)

University Mac Laptops

MS VPN is now located in your menu bar. The install the MS VPN can be found in the Managed Software Center **this may require that you first use the Cisco AnyConnect VPN client to install the MS VPN from off campus and run a Managed Software Center check for updates

WpuVPN Menu.png

After selecting "Connect via MSVPN" you will be prompted for your WPUNJ password, once entered you will be sent an authentication to your primary Multifactor Authentication device.

MSVPN Mac 3.png

Once you are finished using VPN please Disconnect from the same menu you utilized to connect.

MSVPN Mac 2.png


Cisco AnyConnect Client VPN Application

Please note: when using the Cisco AnyConnect VPN from your connected laptop/device, only the network traffic for communicating with WPUNJ campus resources will be securely routed through the university network. Non-WPUNJ services will communicate directly to those services as if VPN was not connected. Note: one known exception is that home networks with IP addresses starting with 172.x, 10.x, or 192.x may encounter issues with connecting to local network resources when connected to the Cisco AnyConnect VPN.

Download the required software through WP Connect from the "Employee" tab, and under the "Information Technology" window frame. The VPN does not replace your ISP connectivity, it is intended only so your can access secure resources.

Microsoft Windows

Anyconnect8.PNG
  • To reconnect click on the start windows button at the left bottom of your task bar and select "All Programs". There you will find a "Cisco" folder with the Anyconnect VPN program icon. Click on the icon to launch the AnyConnect VPN client. -->
    Using the Windows Cisco AnyConnect VPN Client
  • Once launched you will be asked to enter your WPU user account and password. Please do so. If the "Connect to:" field is empty please enter vpn.wpunj.edu. That is the address of the VPN server. Now click on the "Connect' button to run the AnyConnect VPN client.
    Anyconnect3.PNG

    Note: The Cisco VPN Client will be minimized to the task bar, the icon looks like a lock. To disconnect, right click on the icon for the VPN client and select disconnect.

    For Second Password directions please see the Two Factor section of this article. For technical support contact Help Desk Request

  • To disconnect the VPN client simply right click on the VPN icon on the right side of your task bar (it looks like a lock) and click on the 'Disconnect" button.
    Anyconnect8.PNG
  • To reconnect click on the start windows button at the left bottom of your task bar and select "All Programs". There you will find a "Cisco" folder with the Anyconnect VPN program icon. Click on the icon to launch the AnyConnect VPN client.

    Mac OS X (10.7 or later)

    1) There is a folder in your Applications folder named "Cisco".

    Client VPN2.png

    2) In that folder you will see an application named "Cisco Any Connect VPN Client". Double click on it.

    Client VPN3.png

    3) when the program launches you will see a connect window. In the space next to "Connect to" type "vpn.wpunj.edu" and click "connect"

    Client VPN4.png

    4) If the software can reach the university authentication server you will be asked for your university login credentials. Enter them and click the "connect" button.

    Client VPN5.png


    You are now connected to the university network.

    Mobile Devices (iPad, iPhone, Android)

    Mobile devices have the ability to connect to the on campus network via VPN. Some helpful tips:

    • VPN connections are only possible from off campus
    • Your device must be connected to the Internet via wi-fi or cellular data.
    • The below screen captures were created on an iPhone. The client can also be used on Android devices.
    1. Search for "cisco anyconnect" on the Apple App Store or Google PlayStore and download the app.
    Ios-cisco-anyconnect-1.PNG
    Android-cisco-anyconnect-1.PNG


    1. When first launching the application, Cisco Anyconnect will display this prompt. Tap OK.
      Ios-cisco-anyconnect-2.PNG

    2. Select "Connections"
      Ios-cisco-anyconnect-3.PNG

    3. Enter WPUNJ as the description and vpn.wpunj.edu as the server address. Tap Save.
      Ios-cisco-anyconnect-4.PNG

    4. Tap the on/off switch to On to connect.
      Ios-cisco-anyconnect-5.PNG

    5. You will be prompted to enter your WPUNJ username and password.
      Ios-cisco-anyconnect-6.PNG

    6. To confirm that you are connected, the VPN icon will be visible on the top of the screen.
      Ios-cisco-anyconnect-7.PNG

    7. The Cisco Anyconnect VPN app will run in the background on your iOS device until the VPN connection is terminated. To terminate the connection, return to the app and toggle the on/off switch to Off.


    The VPN software available on this page is for use in the United States and Canada ONLY. It is NOT to be placed on a computer system that will be subject to International Travel. Exporting this software is a Federal Crime.

    • Retrieved from "https://itwiki.wpunj.edu/index.php?title=VPN_Remote_Access&oldid=12501"