SSL VPN ACCESS AND FAQ

SAUDI ARABIAN AIRLINES

SSL VPN ACCESS AND FAQ

Prepared by

SSL VPN ACCESS AND FAQ

DOCUMENT:

Document ID: SV.VPN.1.0 Document Title: SSL VPN Access and FAQ Dated: 03,Sep 2008 Prepared By: Information Security Team Approved By: Mohammed A Siddiqu Version: 1

About: SSL VPN (Secure Sockets Layer Virtual Private Network) allows SV users to remotely access SV internal network resources via a secure and authenticated pathway by encrypting all network traffic and giving the appearance that the user is on the local network, regardless of geographic location. Web browser is used for connecting to SSL VPN. SSL VPN does not require the installation of specialized client software on end users' computers. Use of SSL VPN: The SSL VPN is a good choice for accessing corporate resources via unsecured network or a shared network like Internet. SSL VPN provides confidentiality, Authenticity and Integrity.

SSL VPN ACCESS AND FAQ

STEPS FOR ACCESSING SAUDI ARABIAN AIRLINES SSL VPN

System requirement: • Operating System: Windows XP with SP1 or above or Windows Vista with

Updated patches • Browser: Internet Explorer version 6.0 and above • AntiVirus (MacAfee, Symantec, Trend Micro, G-DATA) with Latest signature

update. • Your Browser should be Active-X and Java enabled. • Good Internet Connection. 1) Open Internet Explorer and type URL. https://vpn1.saudiairlines.com.sa 2) The Host checker will get installed and check the Security compliance of your

machine(Latest Patch Installation Status & Antivirus Update).

Note: a. Incase the desktop/laptop does not meet the Security criteria; users will not

be promoted for login. You need to update the latest Patches & Antivirus update. (Please refer the FAQ section)

b. If you are using Microsoft Vista, Run your Internet Explorer with Administrator privilege. (Right Click on Internet Explorer -> Run As Administrator) for the first time.

SSL VPN ACCESS AND FAQ

3) Once the Host checker is successful, you will be prompted for with login page.

4) Enter your valid SSL VPN login credentials.

5) Once Username and Password is Authenticated from the Authentication server,

VPN server starts installing network client software on the system.

6) Once network connect is successfully installed on your system, you will be assigned with Saudi Arabian Airlines Network IP address. A network client icon will be as shown in the figure below at the side of the system tray.

SSL VPN ACCESS AND FAQ

7) You can click on the network icon and check for sent and receive bytes.

8) You can then click and access the Applications links provided for your profile.

9) The Application will prompt for Authentication and user need to type in the AD user-name and password for accessing the application.

SSL VPN ACCESS AND FAQ

Note: For Accessing HostFront, do not use proxy settings

10) To Sign-out from VPN, first logout from the applications and then click on sign out given on the top right of the SSL VPN page and wait till you get the below screen.

SSL VPN ACCESS AND FAQ

Frequently Asked Questions (FAQ)

1. Not able to get the login screen. It prompts SV-AV Policy error.

• Please update your antivirus signatures. • Please update Microsoft patches from http://windowsupdate.microsoft.com. • User can update the latest signatures from the respective Antivirus websites.

2. Not able to install Host checker or network client. It prompts “you do not have sufficient privilege.

• If user is having Microsoft XP Operating system, then user needs to have

administrator privilege. • If user is having Microsoft Vista Operating system, then user need to login as

Administrator (INBUILT) for the first time or Run Internet Explorer with Admin Privilege (Right Click Internet Explorer -> Run as Administrator).

3. Host checker error or Network Connect did not install properly.

User needs to uninstalled the old Host checker or Network Connect of different version. To uninstall host checker, a. Click on Start—Programs—Juniper network—Host checker—uninstall Host

checker.

SSL VPN ACCESS AND FAQ

b. Delete all temporary files, History, cookies and web information’s. c. Open Internet explorer—tools—internet options—general tab—delete—delete all.

SSL VPN ACCESS AND FAQ

If your Brower has High security, it will not allow you to install host checker. Reduce the security level on the browser and try again.

d. Open Internet Explorer—Tools—Internet options—Privacy.

4. Invalid User name and Password.

SSL VPN ACCESS AND FAQ

Please key in the correct credentials. User need to call IT helpdesk to reset the SSL VPN password or else, user has to log a helpline call in AHD.

5. Not able to install network client. The secure gateway denied the connection request from this client.

User needs to uninstalled the old network client software.

To uninstall network

o Click on Start—Programs—Juniper network—Network client—Uninstall Network Client.

SSL VPN ACCESS AND FAQ

6. VPN disconnects automatically or VPN Timeout.

• If user Session is idle for 10 minutes, VPN will automatically gets disconnected. This is one of the security reasons. User has to access any one of the VPN services within 10 minutes to keep the VPN session alive.

• Please check your Internet connection stability.

7. VPN connected not able to access any applications. Click on the network connect icon in the below right side of the system tray and check for sent and receive bytes. If users not able to see any sent and receive bytes, request you to logout and login again.

8. After connected to VPN, Not able to browse internet or Local LAN.

Logically your system will be in Saudi Arabian network. Hence users will not be able to access their Local Area Network or internet. For browsing internet, user has to use proxy.sv.net on port 8080. The traffic will come via VPN tunnel and will be able to browse internet. To specify proxy.sv.net: Open Internet Explorer and click on Tools—Internet Options—Connection—LAN settings.

SSL VPN ACCESS AND FAQ

Note: While Accessing Host front, do not user proxy.

Network Connect Errors & Solutions

SSL VPN ACCESS AND FAQ

For Further clarifica on, please get in touch with 24/7 SV IT Helpdesk by the below means. 1) Please log an AHD request at h p://itcsdev.sv.net/. 2) Please call IT helpdesk at +966 (2) 686 4000 3) Please e-mail with the brief description of the issue to ithelpdesk@saudiairlines.com.sa