1 DJH / PSR 02/19 Ver 21

Student and Staff VPN User Documentation This document is broken down into the following sections for your convenience.

Contents Student and Staff VPN User Documentation .................................................................................................................... 1

Introduction to VPN....................................................................................................................................................... 2

Process Overview .......................................................................................................................................................... 2

1) Quick Start Guide ...................................................................................................................................................... 2

2) Installing the VPN software (detailed version) ......................................................................................................... 4

You first need to check that your computer meets the minimum system and connection requirements: - ........... 4

3) Using the VPN Service ............................................................................................................................................. 10

4) Troubleshooting ...................................................................................................................................................... 11

2 DJH / PSR 02/19 Ver 21

Introduction to VPN

This document provides instructions on how to connect to the VPN solution for Staff and Students to gain access to various resources available on the Staffordshire University Network Infrastructure. Please note that the new VPN service is only available off Campus.

A VPN provides secure access to a private network using public network infrastructure to connect a remote computer to privileged University resources. Once connected to the VPN Staff and Student users will be able to access the following services:-

• Network share access such as H:\ drive • Surf the University Web site • Access to email via Microsoft Outlook and Web Outlook • Specialist Licence server applications from Faculties / Schools

Process Overview You will visit the URL https://vpn.staffs.ac.uk and you will be asked to enter your username and password. After successful authentication you will be asked to install the Cisco Anyconnect software which will then automatically make a connection to the University (Please note that this is a one-time process and any subsequent uses of the VPN can be made by using the Shortcut made on your Start Menu or Desktop). You can then map a shared drive or access other resources.

1) Quick Start Guide

This Quick Start Guide applies to most Microsoft Windows, Macintosh and Linux Operating Systems. More details can be found under the system requirements section below.

To Download and install the Cisco AnyConnect client.

1. Open your web browser.

2. Navigate to https://vpn.staffs.ac.uk

3. Select from the dropdown group box if you are a Student or Staff member.

4. Enter your Username (in the format of ab123456 for Student or ab123 for Staff).

5. Type your password in the password box

6. Click on the Login button.

7. You will have to agree to the Terms and Conditions presented on the next screen to proceed.

8. Click Continue to accept.

9. You will then be redirected to Cisco’s website to download the appropriate client.

3 DJH / PSR 02/19 Ver 21

10. Click Download.

11. If you are using Microsoft Internet Explorer or Edge, follow any on-screen prompts to install or run the

AnyConnect file, or run any browser controls. a. If you get any other error messages, or the installation fails, then please refer to the detailed

installation process in the next section of this document, or the Troubleshooting section at the end of this document.

12. If you do not have the option to download and install (as in point 10 above), locate the file and install it via the normal method for your Operating System. (e.g. locate the file in the download folder and run it to install following any on screen prompts.)

13. Your web browser (if using point 10 method) will now display a message stating that the installation was successful.

To connect to the University VPN Service

1. Open Cisco AnyConnect

2) Type in https://vpn.staffs.ac.uk to the connect box.

3) Click Connect

2. When presented with the password and username dialogue box enter

1) Group dropdown box: Student or Staff

2) Your student username or staff username av123456 or aa99

3) Your password

4) Click Connect

3. The VPN connection will now establish.

Further assistance

If you require further help can visit: -

http://www.staffs.ac.uk/about_us/university_departments/information_services/it/vpn/ contact 3800@staffs.ac.uk or visit an IT Helpdesk.

4 DJH / PSR 02/19 Ver 21

2) Installing the VPN software (detailed version)

System Requirements

You first need to check that your computer meets the minimum system and connection requirements: -

• Broadband or 4G Cellular Network Connection (If using BT Infinity check the Troubleshooting guide in section 4 first before proceeding)

Operating systems

Microsoft Windows

o Windows 10 x86(32-bit) and x64(64-bit) o Windows 8.1 x86(32-bit) and x64(64-bit) o Windows 8 x86(32-bit) and x64(64-bit) o Windows 7 SP1 x86(32-bit) and x64(64-bit) o Cisco no longer supports AnyConnect releases for Windows XP.

• General Microsoft Windows Requirements: - o Pentium class processor or greater. o 100 MB hard disk space. o Microsoft Installer, version 3.1. o Upgrading to Windows 8.1 from any previous Windows release requires you to uninstall

AnyConnect, and reinstall it after your Windows upgrade is complete. o Upgrading from Windows XP to any later Windows release requires a clean install since the Cisco

AnyConnect Virtual Adapter is not preserved during the upgrade. Manually uninstall AnyConnect, upgrade Windows, then reinstall AnyConnect manually or via Web launch.

o To start AnyConnect with Web launch, you must use the 32-bit version of Firefox 3.0+ and enable ActiveX or install Sun JRE 1.4+.

Apple MAC OS

o Mac OS X 10.x onwards. • General MAC OS X requirements: -

o AnyConnect requires 50MB of hard disk space. o To operate correctly with Mac OS X, AnyConnect requires a minimum display resolution of

1024 by 640 pixels. Linux

o Red Hat 6 (64-bit) o Ubuntu 12.04 (LTS) and 14.04 (LTS) 18.04 (LTS) (64-bit)

• General Linux Requirements o x86 instruction set. o 64-bit processor. o 32 MB RAM. o 20 MB hard disk space. o Dependency on network-manager and libnm library to support NVM.

5 DJH / PSR 02/19 Ver 21

o Superuser privileges are required for installation. o network-manager o libnm (libnm.so or libnm-glib.so) o libstdc++ users must have libstdc++.so.6(GLIBCXX_3.4) or higher, but below version 4. o Java 5 (1.5) or later. The only version that works for web installation is Sun Java. You must install Sun

Java and configure your browser to use that instead of the default package. o zlib - to support SSL deflate compression o xterm - only required if you're doing initial deployment of AnyConnect via Web launch from ASA

clientless portal. o gtk 2.0.0. o gdk 2.0.0. o libpango 1.0. o iptables 1.2.7a or later. o tun module supplied with kernel 2.4.21 or 2.6.

Connecting to the University via VPN

To gain access to resources via VPN users will need an internet connection from home or any other location. For reliability issues we would recommend a wired connection.

Once you have confirmed a usable internet connection you should open a web browser and go to https://vpn.staffs.ac.uk which will present you with the main VPN page.

NB We recommend using Internet Explorer or Edge (if using MS Windows) to install AnyConnect. Most other browsers are supported on MAC OSX and Linux but we would recommend Firefox.

1. Login page requesting users login credentials.

Select the either the Student or Staff group from the drop-down box and enter your username and password in the username and password boxes.

6 DJH / PSR 02/19 Ver 21

NB. Previously usernames were in the format of staff\username or student\username. This is no longer the case so staff \, student\ can be omitted and you can enter your username on its own (i.e. ab123456 for Students or ab12 for Staff).

After filling in the Group, Username and Password fields, select Login to proceed.

2. Once logged in you will be presented with the University Policy.

NB. It is mandatory that you agree to terms and conditions of access. If you are unsure please visit http://www.staffs.ac.uk/current/regulations/it/index.php for more information.

3. Select continue to go to the next step. 4. You will be redirected to the Cisco AnyConnect website to down load the client for your Operating System

(Windows, Mac, Linux).

7 DJH / PSR 02/19 Ver 21

5. If you are using Microsoft Internet Explorer or Edge, follow any on-screen prompts to install or run the AnyConnect file, or run any browser controls.

If you get any other error messages, or the installation fails, then please refer to the detailed installation process in the next section of this document, or the Troubleshooting section at the end of this document.

If you do not have the option to download and install (if not using MS Internet Explorer or Edge), locate the file and install it via the normal method for your Operating System and or Browser. (e.g. locate the file in the download folder and run it to install following any on screen prompts.)

The installation process should be similar on Microsoft Windows and MAC OS systems: -

You should have now installed will now display a message stating that the installation was successful.

>>

>>

8 DJH / PSR 02/19 Ver 21

NB This is a one-time process to install the Cisco software. There will be a Start Menu (Windows Only) shortcut on your system that should be used to start AnyConnect. Should you move computers then you will need to repeat the above process to reinstall the client to access the service.

To connect to the University VPN Service

6. Open Cisco AnyConnect

7. Type in https://vpn.staffs.ac.uk to the connect box.

8. Click Connect

9. When presented with the password and username dialogue box enter

10. Group dropdown box: Student or Staff

11. Your student username or staff username ab123456 or aa99

12. Your password

13. Click Connect

14. The VPN connection will now establish.

AnyConnect on a Client PC

1. Once the AnyConnect client has been downloaded it will remain on the PC unless the user decides to uninstall it. You do not need to go to https://vpn.staffs.ac.uk every time you wish to use the VPN.

2. Once again it is mandatory that the user agree to the terms of use and click ‘Accept’ to proceed. At this point the user client computer will establish a secure connection the University VPN server.

9 DJH / PSR 02/19 Ver 21

You are now connected to Staffordshire University VPN system and can now continue to use VPN services and should (for MS Windows users see the Cisco AnyConnect Icon on the taskbar like below.

Disconnecting

1. Left click on the AnyConnect icon in the taskbar or system tray which will bring up the AnyConnect client window as shown below and click Disconnect.

a. Once disconnected it may take a couple of minutes for network setting to take affect and the client PC may seem to freeze for a minute or so, this is normal and is expected.

2. You have now disconnected from the VPN system and can now resume normal network operation.

10 DJH / PSR 02/19 Ver 21

3) Using the VPN Service

Connecting to your student H: Drive

In preparation to connect to your H: drive, you will need to know the area of the student or staff server where your folder is located.

To make a connection to the H: drive you will be prompted for your Staff or Student folder name, your username and your password (i.e. exactly the same username and password as when you made the connection to the VPN service).

Note:

• Student folder name will be in the format studentX where X is the first letter of your surname followed by \ and then your username.

• Staff folder name is in the format staffX, where X is the first letter of your username followed by a \ and then your username.

Examples: -

• If the student user ab123456 wishes to connect to their H: drive • \\crwnstuh1.student.staffs.ac.uk\StudentA\ab123456 • Or the staff user vpn10 wishes to connect to their H: drive:- • \\crwnstah1.staff.staffs.ac.uk\staffV\vpn10

1 Press and hold the Windows Key and the E key which will bring up a file explorer window. 2 Along the menu bar, click Map Network Drive.

11 DJH / PSR 02/19 Ver 21

3 Refer to the examples section earlier in step 3 for information to fill in the Folder. Box. 1 For Students \\crwnstuh1\studentX\your_student_username 2 For Staff \\crwnstah1\staffX\your_staff_username

4 Click Finish to continue

The drive should now be mapped under Drive S (in this case).

4) Troubleshooting This section covers common issues with Operating Systems and Service Providers

• Windows 10, 8, 7 • General Windows issues • Linux • MAC OSX • BT Infinity

Microsoft Windows

If Digital Services have updated the Anyconnect client is is strongly advisable to uninstall the old client from your machine and reinstall over the web at https://vpn.staffs.ac.uk

Windows 10

• AnyConnect 4.3 has moved to the Visual Studio (VS) 2015 build environment and requires VS redistributable files for its Network Access Manager module functionality. These files are installed as part of the install package. You can use the.msi files to upgrade the Network Access Manager module to 4.3, but the AnyConnect Security Mobility Client must be upgraded first and running release 4.3.

• Also, with the addition of the AnyConnect Umbrella Roaming Security Module, Microsoft.NET 4.0 is required.

Issue: - Web-based Installation May Fail on 64-bit Windows

This issue applies to Internet Explorer versions 10 and 11, on Windows versions 7 and 8.

When the Windows registry entry HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\TabProcGrowth is set to 0, Active X has problems during AnyConnect web deployment.

See http://support.microsoft.com/kb/2716529 for more information.

Solution: - Run the 32-bit version of Internet Explorer.

Windows 8

Windows 8 support has some limitations:-

• Anyonnect does NOT work on Windows 8 RT (for mobile devices running ARM processors) • Anyconnect is incompatible with the following over WIRELESS networks • Wireshark (which installs the Win PCAP service). • Outdated wireless cards with no official supoprt for Windows 8. • Anyconnect is not written for the new Metro interface in Windows 8, however it does run in desktop mode

12 DJH / PSR 02/19 Ver 21

• Anyconnect 3.1.01065 does not provide “toast notifications” but versions from 3.0.10055 on do.

General Windows Issues

Issue: - Internet Explorer is asking me to run an activeX control, what should I do?

Solution: - This is part of the Cisco AnyConnect installation process and is safe to allow.

1. Click on the message at the top of the screen that says, ‘this message wants to install the following addon: ‘AnyConnect VPN Client’ and click on ‘Install ActiveX Control’.

Issue: - There is a problem with this Windows installer package.

13 DJH / PSR 02/19 Ver 21

Note the fix for this issue requires advanced knowledge of the Windows Registry, if you are in doubt, please visit a Helpdesk.

Solution: -

1. Press Windows Symbol Key and R together.

2. Type regedit and press enter or click on OK.

3. Click on the cross to the left of HKEY_LOCAL_MACHINE to expand that section.

a. Click on the cross to the left of SOFTWARE

b. Click on the cross to the left of Microsoft

c. Click on the cross to the left of Windows

d. Click on the cross to the left of CurrentVersion

4. Right click on CurrentVersion and select New and then select Key

a. A new section appears with the title New Key #1 rename this key to RunOnce and press enter.

You can now close the registry editor.

Re run the Cisco AnyConnect setup and the issue should now be solved. If it has not, please attend a local Helpdesk and seek further assistance.

• AnyConnect requires a clean install if you upgrade from Windows XP to Windows 7.

• If you upgrade from Windows Vista to Windows 7 you must manually uninstall AnyConnect first, then after the upgrade reinstall it manually or by establishing a web-based connection to https://vpn.staffs.ac.uk that is configured to install it. Uninstalling before the upgrade and reinstalling AnyConnect afterwards is necessary because the upgrade does not preserve the Cisco AnyConnect Virtual Adapter.

MAC OS

14 DJH / PSR 02/19 Ver 21

• If you upgrade from one major Mac OS X release to another (for example 10.5 to 10.6) you must manually uninstall AnyConnect first then after the upgrade reinstall it manually or by establishing a web-based connection to https://vpn.staffs.ac.uk that is configured to install it.

• The Anyconnect client resides in the Applications folder. To access it you will need to either go to the applications folder, or you can ‘drag’ it into your dock at the bottom of the screen.

Unix / Linux

• When connecting to the VPN service from the AnyConnect client you are presented with a message stating that the security certificate cannot be verified. The certificate should be accepted to continue to use the service.

• The AnyConnect client resides in the Applications folder on your system. If you want a shortcut on your desktop, the y ou will have to make one by ‘dragging’ it our of the Application folder.

BT Infinity 1/2 Issues

Some users have experienced issues with the Cisco AnyConnect client and the BT Infinity Broadband package. Users may see their VPN connection fail and get disconnected which has been identified as an MTU (Maximum Transmission Unit) size issue.

To resolve this you may wish to change the MTU setting on your Windows operating system.

Windows 8

1) Swipe / Scroll to the All Apps tile on from your Start screen. 2) Swipe / Scroll to the Windows System section. 3) Under the Windows System section press/click on Command Prompt 4) You will then see a box similar to the one below.

15 DJH / PSR 02/19 Ver 21

5) Select your network connection from the list. In this case we are using “Local Area Connection”, but you may be using a wireless connection and should substitute the entry under the “Interface” column appropriately.

6) To set the MTU for this network interface [Type] netsh interface ipv4 set subinterface "Local Area Connection 4" mtu=1300 store=persistent [enter]

7) [Type] netsh interface ipv4 interface show subinterfaces [enter] to check that the change has been made as seen in the picture below.

8) Restart your computer and retry the VPN connection process which should now work.

Windows 7 / Windows Vista

1) Go to Start and [Type] cmd.exe [enter] into the text box from the start menu. 2) The command prompt box opens.

3) [Type] netsh interface ipv4 interface show subinterfaces [enter] 4) You will then see a box similar to the one below.

16 DJH / PSR 02/19 Ver 21

5) Select your network connection from the list. In this case we are using “Local Area Connection”, but you may be using a wireless connection and should substitute the entry under the “Interface” column appropriately.

6) To set the MTU for this network interface [Type] netsh interface ipv4 set subinterface "Local Area Connection 4" mtu=1300 store=persistent [enter]

7) [Type] netsh interface ipv4 interface show subinterfaces [enter] to check that the change has been made as seen in the picture below.

8) Restart your computer and retry the VPN connection process which should now work.

Further assistance

If you require further help can visit: -

http://www.staffs.ac.uk/about_us/university_departments/information_services/it/vpn/ contact 3800@staffs.ac.uk or visit an IT Helpdesk.