WebVPN

VCU provides a secure remote access method for faculty and staff who need to connect to certain secure servers and applications from outside of the VCU network. The Virtual Private Network (VPN) technology discussed here is web based and can be used from any remote location and is required for accessing certain servers and applications. VPN is not necessary for access to systems such as VCU’s email system or to Blackboard since these systems have their own security safeguards.

WebVPN will work on Windows Vista, Windows XP, Windows 2003 Server and Windows 2000 Pro. It will also work on i386 MAC OSX 10.4+ and Power PC. Linux Distributions such as Red Hat/Fedora/CentOS/Ubuntu have also been tested and work.

How to Use the VCU VPN

VPN Frequently Asked Questions

Troubleshooting Common VPN Problems

How to use VCU VPN

Whenever secure remote access to resources on the VCU network is needed, the VPN client should be launched before attempting to connect. When you connect to the VPN web site, client software will load on your computer. This software uses a Java or Active X helper application depending upon your browser and operating system platform. The enabling of the helper application is automatic and is part of the process of establishing an encrypted tunnel between your computer and the VCU network. Once the VPN client has loaded, you will then be able to access resources on the VCU Network for which you are authorized.

Steps for using the WebVPN:

Enter this address in your browser address window: https://webvpn.vcu.edu
You will be presented with a WebVPN login box in which you enter your VCU eID username and password. The helper application will load on your computer.

Enter this address in your browser address window: https://webvpn.vcu.edu
You will be presented with a WebVPN login box in which you enter your VCU eID username and password. The helper application will load on your computer.

After logging in, you will see a VCU VPN Access window. Click on “Connect” which means that you agree to the terms of the VCU Network Usage Policy and applicable VCU Security Standards.
The Cisco AnyConnect VPN Client will then install. Depending on your operating system and browser, the client will attempt to use either Java or Active X in order to install and establish the SSL connection:

After installation is complete, you will see a window indicating that the client has successfully connected. Note the icon that has appeared in the system tray as you will need it later. You can now access any VCU resources for which you are authorized.

When you have completed your work, you can disconnect by clicking on your icon and selecting the "Disconnect" option under the Connection Tab:

VPN FAQs

Q1. What is VCU’s VPN?

A1. Virtual Private Networking (VPN) is a technology for establishing a secure connection over public infrastructure using encryption between the remote computer and the VCU network - the contents of the communication are protected and cannot be viewed by other devices on the public network. The VCU WebVPN client uses SSL encryption and is accessible via a web browser connection.

Q2. Who Should Use the VPN?

A2. VPN is enabled for faculty and staff and select vendors to use when there is a need for secure remote access to resources on the VCU network. For example, if a VCU system administrator needs to connect to a server remotely for administration, the VPN must be used to ensure that data cannot be intercepted during transmission. If a staff or faculty member needs to connect remotely in order to access sensitive data that is located on VCU server, the VPN must be used.

Q3. What is my VPN username and password?

A 3.The VPN uses your VCU eID username and password for authentication.

Q 4. If I have a problem with the VPN, what should I do?

A 4. Information about a few common problems is provided after the FAQ section. If these steps do not help, please contact the Help Desk at 828-2227 for assistance.

Q5. Is there a preferred browser to use with the WebVPN?

A 5. You can use any web browser, and depending upon which one you use, the WebVPN will automatically use either Java or ActiveX.

Q 6. Once I launch the WebVPN, how do I know I have a secure connection?

A 6. There will be a tray icon with a lock on your computer’s desktop. When you access this icon, you will be able to see the details of your secure connection.

Q 7. How can I learn more about my VPN connection?

A 7. To learn more about your SSL VPN Status, click on the "AnyConnect" Icon on the taskbar tray next to your Date/Time.

Q 8. I need to access my files stored on a VCU Windows file server while I am away on business. Can I use the VPN from a hotel room or from a wireless network at the airport or at a conference?

A 8. Yes. This is one of the main reasons that VCU has provided the VPN. When you are using an untrusted wireless network such as one available at an airport or at a hotel, you must use VCU’s VPN when accessing resources on the VCU network to ensure that your communication is protected and that the resources on the VCU network are protected.

Q 9. Should I use the VPN when I want to access my VCU Lotus Notes email from home?

A 9. VCU systems such as email and Blackboard have their own security safeguards and it is not necessary to use the VPN when accessing these systems remotely.

Q 10. Now that VCU has provided the VPN for secure remote connection to resources on the VCU network, do I still need to be as diligent about the security of my remote computer?

A 10. The security of your remote computer is still extremely important, and you need to keep up-to-date with all patches and security fixes, especially for your operating system and web browser. If your computer becomes infected or compromised, it could jeopardize resources on the VCU network that you access using VCU’s VPN access.

Q1 1. Should I use the VPN when I accessing sensitive data while using the VCU wireless network?

A 11. Yes. You should use the VPN for accessing sensitive data while use the VCU wireless network. The future plan for wireless security at VCU is to provide another method for secure wireless access. In the meantime, you should use the VPN when accessing sensitive data on the VCU wireless network. If your system requires VPN access while on the VCU network, you will need to use the VPN while using the VCU wireless network. For example, certain servers and applications require VPN for access regardless if the access is remote or local.

Q 12. What is the IPSec VPN I've heard about?

A 12. The IPSec VPN is another type of VPN connection in use at VCU. It is intended for use primarily by IT staff since the client software installation and setup is much more complicated than the WebVPN. Using the IPSec Client is similar to the WebVPN, but having to load and manually update the client software makes the IPSec VPN less convenient than the WebVPN. The IPSec VPN uses a different type of encryption and has a bit more flexibility needed for special applications, but for most users the WebVPN will meet all connection requirements.

Troubleshooting Common Problems

Issue 1: Network/Firewall Issues

Problem: You might see the message below, which may be due to a misconfiguration or to network issues with the SSL client.

Solution: Allow AnyConnect application through your firewall by adjusting your security settings. You can also run the AnyConnect Client that has been installed on your computer by using Start > Program Files > Cisco > AnyConnect Client. Then type in "webvpn.vcu.edu" in the box along with your eID / Password. If unsuccessful, reboot your PC and try again.

Issue 2: Active X error message (Internet Explorer Users Only)

Problem: The IE browser will display an "Internet Explorer Information Bar" Error message stating that ActiveX control has been blocked.

Solution: This is okay and normal browser behavior. You do not need to accept or install ActiveX to use WebVPN. The Cisco AnyConnect VPN Client will automatically try Java. After Java is installed, the installation of the WebVPN client will continue and finish.

Issue 3: VPN client fails to launch
Problem: The WebVPN client will fail to launch and you will be presented with an error message about a problem with the security certificate.

Solution: Depending upon your browser, the WebVPN will attempt to use a helper application which is either Java or Active X. If you are getting errors, make sure that your version of the helper application is up-to-date. Also, if you have used a previous version of the VPN, try removing this software from your computer (e.g., use the Windows Add/Remove Programs applet in the Control Panel).

Issue 4: Access to specific hosts or applications blocked

Problem: The WebVPN client loads correctly and connects to the VCU network, but you still cannot access a particular server or application.

Solution: All VCU faculty and staff eIDs are enabled for VPN access, but connection to servers and applications must be specifically requested by the system administrator. If the VPN connection process completes successfully but you are unable to access a specific VCU resource, please contact your local IT support person.
Note for local IT Support staff: In order to request remote access to specific VCU resources, log into the IT Professionals website and select VPN Request under Security Resources in the left panel of the screen. A form will be presented to enter information about the request. Using the same form, remote access for non-VCU users (e.g., a vendor who provides application support) who have temporary eIDs and VCU students may be requested.

This page was updated on Wednesday, October 28, 2009