Access to Webmail services via a Non Trust Computer
Aintree Outlook Web Access has been provided via the AppGate SSL Portal, this service can be accessed from any computer on the Internet. Two factor SMS authentication will be required to gain access to the OWA system.
To gain access to the OWA service through the AppGate SSL Portal the required actions will need to be taken, please note that if Windows Vista is used the actioned required are the same:
1. Browse to http://www.aintreehospitals.nhs.uk with your web browser. NB If using a Trust computer/Laptop for this service, first untick the proxy server from within the web browser via Tools – Internet Options – Connections tab – Lan Settings button and untick “Use a proxy server for your LAN”.
2. From the “Site Contents” list on the left hand side of the Aintree Website select “About Us”, then “Appgate at Aintree”. At this point you will be presented with the following web page:
4. Accept the certificate notification message. Once the certificate has been accepted the following authentication screen is displayed:
5. Log into the AppGate SSL Portal with your Active Directory username and password and then click the “Login” button. At this point a SMS notification text message is sent to your mobile phone and the following screen is shown within the browser. Enter the six digit One Time Passcode into the “Enter Password” field and click the “Login” button.
7. Once the OWA initial authentication page has loaded (as show below), enter your Active Directory username and password to gain access to your email. Please note that Single Sign On will be possible after the POC if required.
9. When you have finished with the Aintree Webmail system, log off your session with the OWA application (top right) and close the browser window.
10. At AppGate SSL Portal webpage click the “Logout” button, at which point you will be displayed with the following webpage.
Access to Aintree Terminal Services System via a Non Trust Computer
In order to access the Aintree Terminal Services system via a non trust computer you must connect to the Aintree AppGate system via the AppGate Java based Client, in order to run this AppGate Client software Sun Java runtime is required.
If Java is not installed on your computer you can download it at www.java.com/en
N.B. The screenshots below show a Windows Vista Operating System although the process for Windows XP systems is the same.
Once you have installed Java please browse to http://www.aintreehospitals.nhs.uk with your web browser:
2. Click on the Link “Click here to download the Webstart Appgate Client”. After a few seconds you should be presented with the following screen, click Run and the Webstart client will install.
4. You will be faced with the following Screen where you enter your trust Active Directory trust domain login and password.
6. You should now be taken to the following Terminal server screen where you login using your Active Directory trust logon username and password
7. Once you have finished your Terminal Services session and have logged off you should click on to the X in the top right hand connect of the Webstart client window to close communications.
Access to services via a Trust Computer/Laptop using Full Client
In order to gain access to Aintree applications and services the Full AppGate Client and IP Tunnelling Driver software will need to be installed onto the Trust computer. NB you can only do this for a trust computer. Please note that the Trust computer must be a member of the AINTREE Active Directory domain of access to be granted into the Aintree network.
The following actions will need to be carried out to install and load the AppGate session on the Trust computer:
9. Untick proxy server from browser if the URL of “remote.aintreehospitals.nhs.uk” has not been added into proxy bypass list within browser.
10. Confirm Sun Java software is installed onto the computer.
11. Browse to http://remote.aintreehospitals.nhs.uk, the following page will be displayed
12.
14. Once the AppGate IP Tunnelling driver has been installed go back the AppGate webpage and click on the “Click to Connect” icon within the Java Web Start area of the webpage.
15. Once asked, add an AppGate Client shortcut to the desktop of the computer by selecting “Yes”. This will allow the user to load the AppGate client from the desktop of the computer without having to visit the AppGate webpage every time a connection to Aintree resources is required. Please note that the proxy server might need to be unticked (due to the lack of a proxy bypass entry within the browser) before the desktop shortcut can be selected.
16. Once the AppGate Client has loaded tick, go back the proxy server within the browser and tick, this will allow access to the Aintree web based resources like the Aintree Intranet. Please note this is not required if the proxy server setting has not been unticked in the first instance.
17. Upon first connection to the AppGate system a notification will popup asking you to ensure the system which you are connecting to is the true Aintree AppGate appliance. To verify this is the correct system which your establishing an initial contact to click the “Details>>>” button within this new host notification window and confirm that the host key of the AppGate system which you are connecting to is “49:27:8d:f7:69:2d:dd:e5:d4:22:f5:48:c4:82:26:12”. Once you have verified the client is communicating with the correct AppGate appliance click “OK”. Below is an example of this New Host notification window:
19. Once you have clicked OK to the Open Connection window a text message will be sent to your mobile phone containing the NordicEdge One Time Passcode. Enter the six digit code into the RADIUS Authentication popup window and click OK. An example of this RADIUS Authentication window is shown below:
20. Upon completion of authentication and the AppGate Client has checked the device used is a member of the AINTREE Active Directory domain the Aintree AppGate POC services will be shown allowing you to select the required service. An example of this view is shown below:
