VPN Network Access Principles and Restrictions
High Speed access via broadband Internet connections is available for the Agency network resources such as BBG Email, Shared and Home directories, and BBG FTP sites. This service is only available to BBG Employees with valid BBG Computer ID’s. Requests for VPN access should be submitted by your manger via the intranet VPN Request form at http://help.ibb.gov/indexVPN.cfm. Please note after you are issued a VPN token, the token will be disabled after thirty days of non use.
Access to other BBG applications such as DaletPlus, budget systems, personnel systems, engineering systems, and other administrative applications within the
Washington facility will be referred to the system administrator or contracting officer for access authorization.
Computer Security
Before you make a VPN connection to the agency, make certain you have "anti-virus" software installed and properly configured on the computer you are using, and that the virus "signature" files are up-to-date. Always check the manufacturer’s update site for new signatures immediately before making a VPN connection.
While you are connected to the Agency through a VPN connection—whether you are using a government or personal laptop, or a home computer—that computer temporarily becomes part of the agency’s computing internetwork. Therefore, all access to the public Internet from the computer is controlled by the agency’s perimeter security "firewall." VPN connections are subject to special firewall security controls in addition to those that apply to computers installed in the agency’s buildings.
Your Entrust security token uniquely identifies you to the agency’s access monitoring software. Your Entrust security token and your personal identification number, when used together, authenticate you to the agency’s firewall. Do not disclose your personal verification number (PVN) or lend your Entrust security token to anyone. If your personal security number is accidentally compromised or your Entrust security token is lost or stolen, contact our 24-hour IT Service Desk immediately at +1 202 382-7200. Collect calls will be accepted.
User ID and Passwords
VPN users will require a BBG User ID and Password. The User ID will be the BBG Computer ID used to access the standard Agency network. The Password consists of two parts, a six (6) digit PVN and an eight (8) digit number displayed by the token.
• Do not write your PVN on or near the token • Do not write your PVN on the computer • Do not repeat the PVN to friends or coworkers • Tokens will be disabled after 30 days of inactivity
Tokens
Users requesting VPN access to the BBG Network will be assigned a token for use when connecting to the Agency network. When the token is powered on it displays an eight digit number. This number is synchronized with the BBG Internal network to assure strong authentication of user identity and protect access of the BBG network from unauthorized users. The combination of PVN and token Number will be required for outside access to the BBG network.
Do not share your Token or PVN
DO NOT COMPROMISE YOUR PVN OR Token BY SHARING IT WITH OTHERS. Lost Tokens or forgotten PVN’s.
Forgotten PVNS or lost tokens should be immediately reported to the IT Directorate Service Desk at (202) 382-7200. Collect calls will be accepted for this purpose. Support Contact
IT Directorate Computer Systems Support -- Service Desk (202) 382-7200
Important Notice about the behavior of your workstation with the VPN SecureID Client installed!
Please note that the VPN client application will modify your local security policy as it applies to Internet communications, local networks, and some wireless routers, to comply with the BBG Security Policy when you are connected to the BBG network. To prevent BBG security policies from being affective during personal use of your
workstation you must disconnect from the BBG network. Note:
• Only printers attached directly to the VPN Client Workstation will be able to print. Locally attached network printers will not function from the VPN Client workstation while the VPN client is active.
VPN Software Installation and configuration
Procedures
For Installing the 32bit VPN Client on a
Remote Laptop or PC
Cisco Systems VPN Setup Procedures
1. Login as Administrator.
2. Select following link “Install VPN Drivers and Software Windows Vista, 2000, XP” on the opening page of the CD or execute
“\Release_4.9_5.0\vpnclient_setup.msi” on the CD to start VPN Driver installation.
Select “Run”.
3. If you get a window that says “Setup has detected an existing version of the Cisco Systems VPN Client.” Click yes at the bottom of this window to uninstall the previous version.
Note: If the uninstall does not start automatically you must first remove the old version of the VPN client through “Control Panel”, Add or Remove Programs to continue.
Delete all items including Profiles and Certificates if prompted.
4. Ensure the Yes button is marked and click Finish. Your machine will reboot. After rebooting you can proceed with the installation.
6. On the next screen click the Yes button to accept the license agreement.
8. On the next screen accept the default settings, hit Next.
10. Click Finish to reboot the machine
11. Click yes to restart workstation.
12. After your machine has started back up, go to Start, Programs, Cisco Systems VPN Client, VPN Client. Click on VPN Client to start the VPN Client.
Connecting to the VPN Network
When access to the BBG Network is desired you must start the VPN client and initiate the VPN connection. This process will allow access to BBG Network services such as internal email, Home and Shared directories, FTP access, and BBG internal printers if configured as if you were physically inside the BBG facility.
Please note that network resources such as printers and applications will not appear on your personal computer the same as on your workstation within the BBG building
because your workstation was not configured by The IT Directorate. The IT Directorate does not configure personal workstations.
When access to the BBG Network is no longer desired you should “Stop” the VPN Service and resume normal workstation operations.
Select from the tool bar. “Start | Cisco Systems VPN Client | VPN Client”
If the above dialog box does not appear proceed.
Enter your “BBG Computer User ID” in the Username: field.
Enter your “[PVN][Displayed Token Number]” in the Passcode: field. Select “OK”
Press Continue after you have read the Security Banner
Congratulations, you have successfully installed and configured the VPN client.
Enter your “BBG Computer User ID” in the Username: field.
Enter your “[6 digit PVN] plus [8 digit Displayed
Token Number]” in the Passcode: field.
DISCONNECT from the BBG Network by selecting “Disconnect” from the VPN Client dialog.
Home and Shared Directories
After a successful VPN connection, access to Home directories can be accomplished by opening windows explorer or clicking on start-run and typing "\\es_home\home\"first letter of your user
ID"\"user ID" and “Enter” for the URL or location.
If the above path does not connect you to your home directory use “\\152.75.72.215\home\\"first letter of your user ID"\"user ID ex. \\es_home\home\j\jdough.
Note: Only authorized directories will be accessible. If the above path does not connect try “\\152.75.72.215\shared”
When prompt for User ID and Password use the following format: User ID: "broadcasting\"BBG Computer User ID"
