Difference between revisions of "Remote Access & VPN"
From Systems Group
Systemswiki (Talk | contribs) |
|||
| (43 intermediate revisions by 7 users not shown) | |||
| Line 1: | Line 1: | ||
| − | In | + | In the interest of security, Remote Desktop Protocol (RDP) and Secure SHell (SSH) connections made to our resources from outside of the campus network are blocked, with a couple exceptions noted below. Such connections can still be established by being on our VPN. This page is intended to provide information on how to connect to the VPN. |
| − | == Remote Access Policy | + | == Remote Access Policy == |
| − | Inbound RDP and SSH access | + | Inbound RDP and SSH access are restricted to all resources. |
| − | + | ||
| − | + | RDP/ SSH connections will not be blocked if they originate anywhere on campus. | |
| − | + | ||
| − | + | ||
Besides the caveats mentioned above, remote access to all servers/workstations will require that a connection be established to our VPN first. | Besides the caveats mentioned above, remote access to all servers/workstations will require that a connection be established to our VPN first. | ||
== VPN == | == VPN == | ||
| − | Our VPN is available to Students, Faculty, and Staff. | + | Our VPN is available to Students, Faculty, and Staff. Some guest accounts are not initially granted VPN access. If such guest access is required, send an email to [mailto:root@cs.odu.edu root@cs.odu.edu] and CC the head of the research group you are associated with for confirmation. |
| − | + | ||
| + | '''Windows, MacOS, and Linux Users''' | ||
| + | |||
| + | [https://systems.cs.odu.edu/images/6/6c/CS_Forticlient_VPN.pdf Instructions for connecting to the VPN] | ||
| + | |||
| + | ==Connecting Printers (MacOS)== | ||
| + | Below is a guide for setting up connection to printers once connected through a VPN connection. | ||
| + | |||
| + | [https://systems.cs.odu.edu/images/4/47/Mac_Printing.pdf Instructions for connecting a printer while using MacOS and connected to VPN] | ||
== FAQ == | == FAQ == | ||
| − | "After establishing a connection to the GlobalProtect VPN on Windows, the new network shows up as | + | "After establishing a connection to the GlobalProtect VPN on Windows, the new VPN network shows up as unidentified/unknown. Why?" |
| − | *The | + | *The GlobalProtect VPN doesn't assign a default gateway as it isn't needed. Windows determines networks with no default gateway set to be unidentified/unknown by default. This is expected behavior. |
*https://blogs.technet.microsoft.com/networking/2009/02/20/why-is-my-network-detected-as-unknown-by-windows-vista-or-windows-server-2008/ | *https://blogs.technet.microsoft.com/networking/2009/02/20/why-is-my-network-detected-as-unknown-by-windows-vista-or-windows-server-2008/ | ||
| + | |||
| + | <!-- | ||
| + | |||
| + | Out of date information | ||
| + | |||
| + | == Known GlobalProtect Issue on MacOS 10.13.x (High Sierra)== | ||
| + | There is a known issue with using GlobalProtect 4.1.x on MacOS. | ||
| + | |||
| + | === The Issue === | ||
| + | After installing the current GlobalProtect client application on MacOS High Sierra, GlobalProtect will prompt for a portal address. After entering the address, it will automatically attempt to connect to the specified address without ever prompting for credentials first, causing the connection to never complete. | ||
| + | |||
| + | The reason this happens is because GlobalProtect uses unsigned kernel extensions, and MacOS does not allow kernel extensions from untrusted sources. | ||
| + | |||
| + | === The Fix === | ||
| + | To fix this issue, please follow the steps below, or send an email to root@cs.odu.edu. | ||
| + | |||
| + | 1) Uninstall GlobalProtect using the installer | ||
| + | |||
| + | 2) Reboot the Mac into recovery mode by pressing "Command + R" when it is powering back on | ||
| + | |||
| + | 3) Open a terminal from the menu at the top, under the "Utilities" tab, and enter this command: | ||
| + | |||
| + | $ spctl kext-consent add PXPZ95SK77 | ||
| + | |||
| + | 4) Boot regularly into MacOS | ||
| + | |||
| + | 5) Re-install GlobalProtect | ||
| + | --> | ||
Latest revision as of 17:47, 5 February 2024
In the interest of security, Remote Desktop Protocol (RDP) and Secure SHell (SSH) connections made to our resources from outside of the campus network are blocked, with a couple exceptions noted below. Such connections can still be established by being on our VPN. This page is intended to provide information on how to connect to the VPN.
Remote Access Policy
Inbound RDP and SSH access are restricted to all resources.
RDP/ SSH connections will not be blocked if they originate anywhere on campus. Besides the caveats mentioned above, remote access to all servers/workstations will require that a connection be established to our VPN first.
VPN
Our VPN is available to Students, Faculty, and Staff. Some guest accounts are not initially granted VPN access. If such guest access is required, send an email to root@cs.odu.edu and CC the head of the research group you are associated with for confirmation.
Windows, MacOS, and Linux Users
Instructions for connecting to the VPN
Connecting Printers (MacOS)
Below is a guide for setting up connection to printers once connected through a VPN connection.
Instructions for connecting a printer while using MacOS and connected to VPN
FAQ
"After establishing a connection to the GlobalProtect VPN on Windows, the new VPN network shows up as unidentified/unknown. Why?"
- The GlobalProtect VPN doesn't assign a default gateway as it isn't needed. Windows determines networks with no default gateway set to be unidentified/unknown by default. This is expected behavior.
- https://blogs.technet.microsoft.com/networking/2009/02/20/why-is-my-network-detected-as-unknown-by-windows-vista-or-windows-server-2008/
