|
|
| (34 intermediate revisions by 9 users not shown) |
| Line 1: |
Line 1: |
| '''Please note that this tutorial assumes you already have a network connection established.'''
| | #REDIRECT [[Network/VPN]] |
| '''If you have a UMIACS account, you already have access.'''
| |
| | |
| The UMIACS VPN is accessible through the Pulse Secure Client. Alternatively, you can establish a connection through a web browser.
| |
| | |
| '''As of May 10th 2019, MFA Authentication is mandatory.'''
| |
| ==Prerequisites==
| |
| * Device enrolled with [[Duo | UMIACS Duo]]
| |
| | |
| == Connecting through the Pulse Secure client ==
| |
| #'''Download the client:'''
| |
| #:[[Media:PulseSecure_9.1.1.607.dmg|macOS Pulse Secure Client]]<br style="clear:both"/>
| |
| #:''Upon starting the client for the first time it will ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.''
| |
| #'''Open the client and click 'Add' (+) under the connection section.'''
| |
| #:[[Image:JunosOSX.png|thumb|left|510px|[macOS] Click the 'Add' (+) button to create a new connection]]<br style="clear:both"/>
| |
| #'''In the 'Name' field, enter a descriptive name for this vpn Connection.'''
| |
| #'''In the 'Server URL' enter 'vpn.umiacs.umd.edu''''
| |
| #:[[Image:JunosOSXSettings.png|thumb|left|510px|[macOS] Enter the name of the vpn server]]<br style="clear:both"/>
| |
| #'''Enter your UMIACS credentials and hit connect.'''
| |
| #:[[Image:JunosOSXLogin.png|thumb|left|510px|[macOS] Enter UMIACS Credentials]]<br style="clear:both"/>
| |
| #'''Complete the [[Network/VPN/MFA | MFA]] Verification Step
| |
| #:[[Image:mac_mfa_step.png|thumb|left|510px|[macOS] Enter a secondary password.]]<br style="clear:both"/> | |
| ::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the [[Network/VPN/MFA | MFA]] requirement. As a result, you will be prompted for credentials twice.
| |
| | |
| ::{|class="wikitable"
| |
| !Second Credential Password Value:
| |
| ! Result
| |
| |-
| |
| | push
| |
| | Send a push verification to your Duo connected device
| |
| |-
| |
| | phone
| |
| | Send a call verification to your Duo connected device.
| |
| |-
| |
| | <press YubiKey>
| |
| | If you have a physical token then you would press the YubiKey for the one time password.
| |
| |}
| |
| | |
| ::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
| |
| | |
| | |
| {{Note|<b>Pro-tip:</b> Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}
| |
| | |
| <br style="clear:both"/>
| |
| | |
| You should now be connected to the UMIACS VPN. If you encounter an error, please refer to the "Setup Security Requirement" section bellow.
| |
| | |
| ==Checking VPN Status==
| |
| # In the top right hand corner, on your status bar, you should see an S icon in a black circle. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
| |
| #: [[Image:Check the Status of your ConnectionOSX1.png|thumb|left|610px|[macOS] The top image is connected, the bottom image is not.]]<br style="clear:both"/>
| |
| # You can click this icon, as well, and it will show you the status of your connection.
| |
| #:[[Image:AreYouConnected2.png|thumb|left|610px|[macOS] The Pulse drop down menu.]]<br style="clear:both"/>
| |
| # If the icon is not in the status bar, you can find Pulse Secure in your Applications folder. There you will see a list of connections.
| |
| | |
| | |
| ==Setup Security Requirement (Follow these steps if you encounter an error while connecting through the Pulse Secure client) ==
| |
| | |
| # '''Click the Apple logo at the top left of your desktop'''
| |
| #:[[Image:ClickApple.png|thumb|left|510px|[macOS] Click the apple logo to show menu]]<br style="clear:both"/>
| |
| # '''Click "System Preferences"'''
| |
| #:[[Image:SystemPreferences.png|thumb|left|510px|[macOS] Enter the system preferences]]<br style="clear:both"/>
| |
| # '''Click "Security & Privacy"'''
| |
| #:[[Image:SecurityPrivacy.png|thumb|left|510px|[macOS] Enter the security and privacy settings]]<br style="clear:both"/>
| |
| # '''Click the "lock" icon at the bottom left and Enter your credentials to enable changes.'''
| |
| #:[[Image:EnterCredentials.png|thumb|left|510px|[macOS] Enter credentials to allow changes]]<br style="clear:both"/>
| |
| # '''In the "General" tab, under "Allow Apps Downloaded From", select "Mac Apps Store and Identified developers"'''
| |
| #:[[Image:AppStoreIdentifier.png|thumb|left|510px|[macOS] Select Mac Apps Store and Identified developers]]<br style="clear:both"/>
| |
| # '''Click "Next" to the message "System Software From Developers "Pulse Secure LLC" was blocked from loading" if prompted.'''
| |
| # '''Click "Allow" to enable the extension.'''
| |
| #:[[Image:Allow.png|thumb|left|510px|[macOS] Click Allow]]<br style="clear:both"/>
| |
| # '''Close the "Security & Privacy" window.'''
| |