Guidelines Remote Access Services User Guide

1 Section Guide : Hyperlink enabled: 1. Remote Access VPN. Guidelines 2. Before you call for help 3. The cisco anyconnect VPN. Client on your Government Remote Access Services User Guide Provisioned Workstation 4. How to connect using the VPN VIRTUAL PRIVATE NETWORK (VPN) OVERVIEW. Client 5. Using Start Before Login SBL Remote Access Services provide secure , cost-effective ways for mobile for Government Provisioned workers, telecommuters, and non-government customers on external Mobile Workstations networks to Access the Shared Provincial Access Network for British 6. Using Remote Desktop Columbia (SPAN/BC). Connection for a Secondary Government Provisioned Workstation 7. Using the Disconnect/Quit DEFINITIONS: from VPN. 8. Helpful Links Virtual Private Network (VPN) allows your Remote computer to connect 9. Frequently Asked Questions securely to SPAN/BC network over a wireless public or home network 10.

2 Version History and Access Government network resources that include your Exchange e-mail, applications, and shared data. Remote Desktop Connection (RDC) is an application that allows you to use your secondary government provisioned workstation to Access your primary government provisioned workstation over the Internet via a VPN enabled connection. Start Before Login (SBL) is for government provisioned mobile workstations to activate the VPN session as part of the login sequence connecting to Exchange e-mail, applications, shared data, printers and drives at initial login. 1 Remote Access VPN Guidelines . SECURITY AWARENESS! To ensure that Government security policies are not violated by any personal Internet activity, it is very important that you disconnect your VPN session as described in section 8 after you've completed your Government business.

3 If you do not disconnect your VPN session and proceed to do personal Internet activities, then be aware that your personal Internet data traffic will be traversing the Government data network, which may result in a Government policy violation, a security investigation and possible legal repercussions. The Information Security Branch of the Office of the Chief Information Officer has developed resources to help explain information security best practices. To ensure you are in compliance with policy and are aware of best practices, refer to the Information Management/Information Technology (IM/IT) Strategic Policy web site. An additional OCIO Best Practice Guide for working with personal and/or confidential information outside the workplace is the Appropriate Use Policy resource document. Page 2. policies-for-government/ Remote - 2 BEFORE YOU CALL FOR HELP.

4 1. Review the contents of this Guide ; it has a lot of detailed information that should help Guide you through most Remote Access VPN scenarios. Also refer to the available knowledge articles on the OCIO My Service Centre Portal 2. If you require assistance call the contact the 7-7000 Service Desk at 250-387-7000 or toll free 1-866- 660-0811 option 1 or email Make sure you have the following information ready it will help us resolve your problem quickly. What is your IDIR ID? If you are using Remote Desktop Connection, do you have Remote Access permissions to connect to your primary government provisioned workstation? What operating system are you using ( : Windows 7 or 10, MAC/OS)? What version of the cisco anyconnect Client are you using? What type of internet connection are you using (wired, wireless hot spot, public Wi-Fi)?

5 What is your workstation number? What exactly is the error or problem you are having? Write down the error, screen shots are very helpful. Contact information, phone number (an alternate contact will not be accepted). When was it working last? Have you made any recent changes to your device configuration, software or hardware updates? Page 3. policies-for-government/ Remote - 3 THE cisco anyconnect VPN CLIENT ON YOUR PRIMARY GOVERNMENT PROVISIONED WORKSTATION. If you are using a WINDOWS 10 government provisioned mobile workstation and the cisco anyconnect Mobility client is not installed follow these instructions: 1. Launch your Start button and open up Microsoft System Center. 2. Then click on Software Center. 3. Change the View to List. Page 4. policies-for-government/ Remote - 4. Type in the search bar, anyconnect (no spaces), press enter.

6 Then click on the Application to initiate a download. If you are using a MAC/OS government provisioned mobile workstation and the cisco anyconnect Mobility client is not installed follow these instructions: 1. Download the anyconnect application from the following link: https://ssbc- 2. Select the MAC anyconnect link to initiate download. Page 5. policies-for-government/ Remote - 3. Download the MAC anyconnect package, and run the If you have problems installing your software on your workstation contact the 7-7000 Service Desk at 250- 387-7000 or toll free 1-86-660-0811 option 1. NOTE: Periodically OCIO upgrades the cisco anyconnect secure mobility client through workstation Services expanded patch management program (EPM). The upgrades are a result of necessary security and or maintenance requirements and are communicated through Service Bulletins.

7 Upgrades are applied automatically for mobile workstations that have a full version of the software installed. All government provisioned workstation that do not have a full version installed must install through the Software Centre as noted above. 4 HOW TO CONNECT TO SPAN / BC USING cisco anyconnect VPN CL IENT. 1) Search cisco anyconnect 2) Enter your IDIR ID and password. 3) Click OK, The cisco anyconnect alert/dialogue box will open. 4) Sign in with your IDIR username and password. Click OK. 5) Read the message and click Connect. Messages often contain important information about upgrades, security information or relevant Service Bulletin information. 6) You are now connected to VPN. Page 6. policies-for-government/ Remote - Page 7. policies-for-government/ Remote - 5 U SING THE START BEFORE LOGIN FEATURE FOR A GOVERNMENT PROVISIONED WORKSTATION FULL.

8 FUNCTIONALITY TO INCLUDE MAPPED NETWORK DRIVES AND Access TO LOB APPLICATIONS. NOTE: The following process only works if you are connected to a network that you have previously accessed using this workstation. 1. Click the Network sign-in button at the bottom right of the screen. 2. Refer to section 4 for detailed anyconnect login instructions. Page 8. policies-for-government/ Remote - 6 USING Remote DESKTOP CONNECTION FOR A SECONDARY GOVERNMENT PROVISIONED WORKSTATION. NOTE: If you are unable to connect to your primary government provisioned workstation you may need to have the Power Management setting on the workstation changed to an always on state. When disconnecting from your Remote desktop use the disconnect option and not shut down. You may experience problems logging back in. Please refer to Knowledge Article KB0030308.

9 For WINDOWS. 1) Refer to Section 4 for detailed anyconnect login instructions. You must be connected to VPN. before using Remote Desktop Connection (RDC). 2) In your toolbar, search Remote Desktop Connection. 3) In the Computer field, type in workstation#. (ie. ). 4) Click Connect. 5) Enter your IDIR ID and password in the dialogue box that appears, click OK (this logs you on to your workstation). 6) Click OK at the security warning screen. 7) You are now connected to your workstation. Your primary workstation desktop appears on the screen. You can now Access your e-mail, applications, and data as though you were at the office. If it doesn't appear your desktop may have gone into Hibernation/Shutdown and must be woken up using the OCIO Wakeup as in Section 7. Page 9. policies-for-government/ Remote - For MAC/OS: 1.

10 Refer to Section 4 for detailed anyconnect login instructions. You must be connected to VPN. before using Remote Desktop Connection (RDC). 2. Click on Go in the toolbar to Access the Applications tab. Select Remote Desktop Connection application. 3. You will need to create a New My Desktop . You will only need to do this once. Subsequent connections will only require you to double click on the desktop you wish to connect to. 4. Fill out the required information for the desktop profile using below as a Guide . 5. Your desktop profile has now been created. You can now connect to your desktop as if you were at work (established internet and VPN session is needed prior to activating RDC). Page 10. policies-for-government/ Remote - 7 DISCONNECT / QUIT FROM cisco VPN CLIENT. NOTE: It is important that you disconnect after you've completed your session.