Connecting  Remotely  via  the  Citrix  Access  Gateway  (CAG)  Version  2.0    ***  The  CAG  is  intended  for  users  with  OE  equipment  only.    Users  with  GFE  must  still  use  RESCUE  as  their  VPN  solution.  ***  

All  VISN  11  staff  currently  using  their  own  computer  equipment  (OE)  to  access  the  One  VA  VPN  will  gain  access  to  the  Citrix  Access  Gateway  through  the  VISN  11  

CAG.    Beginning  June  30,  2011,  you  will  no  longer  be  able  to  access  VA  resources  via  One  VA  VPN.  

VISN  11  staff  with  issued  Government  furnished  computers  (GFE)  must  utilize  VA  RESCUE  to  access  VA  resources.    

2011  

Original  document  created  by  Region  3  \\  VISN  7  Veterans  Affairs  

3/28/2011  Modified  for  use  in  Region  3  \\  VISN  11    

5/17/2011  

2    

 

Table  of  Contents  IMPORTANT  NOTICE: .......................................................................................................................................... 3  

Installation:.......................................................................................................................................................... 3  

Prerequisites........................................................................................................................................................ 3  

Connecting  to  the  Citrix  Access  Gateway  (CAG): .............................................................................................. 4  

Troubleshooting .................................................................................................................................................. 7  

Accessing  the  CAG  for  VISN  10........................................................................................................................... 8  

Connection  to  VA  resources:.......................................................................................................................... 8  

Connection  to  the  CAG  can  be  accomplished  in  two  ways.......................................................................... 8  

Logging  Off .................................................................................................................................................... 12  

Printing: ......................................................................................................................................................... 13  

Saving  files: .................................................................................................................................................... 13  

PKI .................................................................................................................................................................. 14  

CAG  Support: ................................................................................................................................................. 14  

Appendix  A .................................................................................................................................................... 15  

Supported  Operating  Systems  for  Citrix  Access  Gateway: .................................................................... 15  

To  utilize  the  Citrix  Online  Plug-­‐in  for  Windows  v12.1 .......................................................................... 15  

To  utilize  the  Citrix  Online  Plug-­‐in  for  Macintosh  v11.1  and  v11.2....................................................... 15  

Appendix  B .................................................................................................................................................... 16  

Creating  a  Shortcut  to  the  Citrix  CAG  on  your  desktop: ............................................................................ 16  

 

 

3    

 

IMPORTANT  NOTICE:    

All  VISN  11  staff  currently  using  their  own  computer  equipment  (OE)  to  access  the  ONE  VA  VPN  will  

now  gain  access  to  VA  resources  through  the  VISN  11  CAG  (Citrix  Access  Gateway).    Beginning  June  30,  2011,  you  will  no  longer  be  able  to  access  VA  resources  via  ONE  VA  VPN.  

VISN  11  staff  with  issued  Government  furnished  computers  (GFE)  must  utilize  VA  RESCUE  to  access  VA  resources.  

Installation:  

Prerequisites  • See  ‘Supported  Operating  Systems’  in  Appendix  A  below  prior  to  connecting. • Verify  TLS  1.0  is  enabled  in  your  web  browser

o For  Internet  Explorer Open  Internet  Explorer  >  Go  to  Tools  >  Internet  Options  >    select  the  Advanced  

Tab  >  In  the  ‘Settings’  box,  under  the  Security  section,  you  should  see  'Use  TLS  1.0'  >  verify  the  option  is  ‘checked’

• Add ‘*.va.gov’ to trusted sites (required for Internet Explorer 9) ***NOTE: If you are using GFE (government furnished equipment) this step should be skipped.

o Open Internet Explorer. Click on Tools (Menu bar) OR Gear icon (in Internet Explorer 9) Click on ‘Internet Options’ > click the ‘Security tab’ > select ‘Trusted

Sites’ > click ‘Sites’ >

4    

In ‘Add this website to the zone:’ type ‘*.va.gov’ > select ‘Add’ > select ‘close’ > select ‘OK’

Connecting  to  the  Citrix  Access  Gateway  (CAG):  https://vareast.vpn.va.gov

• Type  one  of  the  following  URL's  into  your  web  browser: https://varnorth.vpn.va.gov   https://varwest.vpn.va.gov  

                                           https://vareast.vpn.va.gov  

https://varsouth.vpn.va.gov  

   • Enter  your  DomainName\UserName  (i.e.  vha11\vhadayxxxxxx)  and  password  >  select  'Logon'

• The  1st  time  you  connect,  you  will  be  prompted  to  install  the  Citrix  Client.    If  prompted  >  check  'I  

agree'  >  select  'Install'  (NOTE:    this  Add-­‐on  does  not  require  administrative  privileges  to  run.    If  you  are  not  prompted  to  install  and  this  is  your  first  time  connecting,  you  may  have  to  manually  install  the  Citrix  plug-­‐in.    Manual  installation  instructions  can  be  found  in  the  ‘Troubleshooting’  section  of  this  document).    

5    

• When  prompted,  select  'RUN'.    Once  complete  you  will  see  'Installation  complete  successfully'  >  

select  'OK' • "Once  the  software  is  installed,  the  Internet  Explorer  informational  bar  may  appear  at  the  top.    

Click  on  the  bar  and  select    Run  ActiveX  Control"    (Note:    If  your  web  browser  locks  up,  restart  your  web  browser)

 

Select  a  folder  with  the  application  to  execute  >  once  you  select  an  application  you  will  be  presented  

with  the  'VA  Security  Warning'  logon  banner  >  select  'OK'

• When  prompted  for  "An  online  application  is  attempting…"  >  select  'Permit  use'

6    

       

7    

 

Troubleshooting    

ERROR  1:    “An  error  occurred  while  trying  to  access  the  requested  resource”  is  displayed  when  

attempting  to  launch  an  application.  

 

Resolution  1:    Manually  download  and  install  the  latest  Citrix  plug-­‐in  for  your  operating  system.    Manually  install  the  Citrix  Online  Plug-­‐in:  

Go  to  https://media.vpn.va.gov  >  in  the  Left  navigation  pane,  mouse  over  'Media'  >  select  'Citrix  Media'  >  select  the  plug-­‐in  compatible  with  your  Operating  System  

OR  

Got  to  www.citrix.com/downloads  >  select  Client  Center  >  select  your  Operating  System  >  download  and  

install  the  'Citrix  Online  plug-­‐in  -­‐  web'  

 

 

Error  2:    General  connection  issues.  

Resolution  2:    (a)  See  Supported  Operating  Systems  for  Citrix  Access  Gateway  in  Appendix  A  

                   (b)    Uninstall  the  current  version  of  the  Citrix  online  plug-­‐in  and  re-­‐install.  

 

Error  3:    You  receive  “The  page  cannot  be  displayed”  when  attempting  to  connect  to  the  site  (i.e.  https://vareast.vpn.va.gov)  

Resolution  3:    Enable  TLS  version  1.0.    Click  here  for  instructions.  

 

Error  4:    Application  Launch  Fails  after  Upgrading  to  Internet  Explorer  9  

Resolution  4:    see  http://support.citrix.com/article/CTX129082  

8    

Need  more  help?      

 

Accessing  the  CAG  for  VISN  11    

Connection  to  VA  resources:  

Connection  to  the  CAG  can  be  accomplished  in  two  ways.      

1.   Typing  one  of  the  following  URL’s  into  your  browser:  

https://vareast.vpn.va.gov   https://varwest.vpn.va.gov  https://varsouth.vpn.va.gov   https://varnorth.vpn.va.gov  

 2.    Via  a  shortcut  on  your  desktop.    You  can  create  a  shortcut  on  your  desktop  directing  

you  to  the  most  frequently  used  connection  site  which  would  be,  for  VISN  11,  https://vareast.vpn.va.gov.    Instructions  for  creating  a  desktop  shortcut  are  included  in  

Appendix  B.  

 

You  will  be  prompted  for  your  login  credentials.      

9    

 

• Enter  your  DomainName\UserName  (i.e.  vha10\vhadayxxxxxx)  and  password  >  select  'Logon' • The  following  will  display  while  connection  is  in  progress: •

 

You  will  be  directed  to  the  Main  Menu:  

10    

 

There  are  common  items  on  the  Main  Menu,  which  are  available  to  all  users.    These  are  MS  Communicator  Web  Link,  MS  Office  applications,  including  Outlook,  VISN  11  VistA  (Attachmate  

Reflections  for  each  site  in  VISN  11),  Visio,  Adobe  Acrobat,  and  ProClarity.    We  have  also  added  published  connections  to  your  main  mapped  drives.    

 

Also  included  on  the  desktop  are  subfolders  for  each  facility  in  VISN  10.      

 

Each  folder  contains  site  Specific  connection  to  CPRS,  as  well  as  a  link  to  the  facility  intranet  

homepage.  

 

11    

Once  you  select  an  application  to  use,  like  MS  Word,  for  example  you  will  be  presented  with  the  'VA  

Security  Warning'  logon  banner      ***NOTE***  You  will  see  the  following  four  screens  each  time  you  open  a  new  application  on  the  CAG.    

• • >  select  'OK' •

• If  prompted  for  "An  online  application  is  attempting…"  >  select  'Permit  use'

     A  Citrix  MesageBox  will  display  for  the  application  you  are  running:  

 

 

12    

Your  logon  Script  will  now  execute.  

 

your  application  will  now  start:  

 

Logging  Off  

When  finished  with  your  session,  you  must  log  off.    Please  click  the  Log  Off  icon  in  the  upper  

right  corner:  

 

You  will  then  see  the  following  screen.    At  this  point  you  are  logged  off  of  the  CAG:  

13    

 

Printing:  

Printing  is  not  currently  permitted  while  connected  to  the  CAG.    You  will  not  be  able  to  print  

to  your  local  home  printer  or  VA  printers  at  this  time.    VA  is  currently  reviewing  policy  on  this  matter.  

Saving  files:  

You  will  be  able  to  save  files  to  your  home  drive  from  CAG  based  applications.      

To  save,  select  FILE/SAVE  AS  

You  will  see  the  following:  

 

Click  Yes.  

The  “Save  As”  screen  will  appear:  

14    

 

You  will  select  your  home  drive,  and  type  in  the  file  name  and  click  “Save”    You  may  also  select  

your  Service  drive  (S)  or  your  public  drive  (P).  

PKI  

At  this  time  the  use  of  PKI  certificates  is  not  supported  on  the  CAG.    Information  will  be  forwarded  when  this  function  is  available.      

CAG  Support:  

As  with  the  old  One  VA  VPN,      Support  is  not  available  for  problems  on  your  personal  PC,      

If  you  encounter  problems  with  logging  in  to  the  CAG,  you  must  contact  the  National  VPN  Help  desk  at  1-­‐800-­‐877-­‐4328.      

For  issues  with  launching  applications,  please  contact  your  local  Site  help  desk  for  support.

15    

Appendix  A  

Supported  Operating  Systems  for  Citrix  Access  Gateway:      (Pasted  from  <https://media.vpn.va.gov/ImageStream.aspx?DocID=249>  )  

   FOR  FURTHER  INFORMATION  REFERENCE:  Citrix  Receivers  &  Plug-­‐ins      

To  utilize  the  Citrix  Online  Plug-­‐in  for  Windows  v12.1    • Supported  Windows  Operating  Systems:  

• Windows  7,  32-­‐bit  and  64-­‐bit  editions  (including  Embedded  Edition)   • Windows  XP  Professional,  32-­‐bit  and  64-­‐bit  editions   • Windows  XP  Embedded   • Windows  Vista,  32-­‐bit  and  64-­‐bit  editions   • Windows  Server  2008  R1,  32-­‐bit  and  64-­‐bit  editions  (not  supported  by  XenDesktop  

connections)   • Windows  Server  2008  R2,  64-­‐bit  edition  (not  supported  by  XenDesktop  connections)   • Windows  Server  2003,  32-­‐bit  and  64-­‐bit  editions  (not  supported  by  XenDesktop  

connections) • Supported  Browsers:  

• Internet  Explorer  Version  6.0  through  8.0  (NOTE:  As  of  March  11,  2011  Citrix  has  not  released  an  official  supportability  statement  for  Internet  Explorer  9  scheduled  for  release  on  March  14,  2011)

• Mozilla  Firefox  Version  1.x  through  3.x   • .NET  Framework  Requirements  (XenDesktop  Connections  Only)  

To  use  the  Desktop  Viewer,  .NET  2.0  Service  Pack  1  or  later  is  required.    • Hardware  Requirements:  

• VGA  or  SVGA  video  adapter  with  color  monitor   • Windows-­‐compatible  sound  card  for  sound  support  (optional)   • For  network  connections  to  the  server  farm,  a  network  interface  card  (NIC)  and  the  

appropriate  network  transport  software  

 To  utilize  the  Citrix  Online  Plug-­‐in  for  Macintosh  v11.1  and  v11.2    

• Supported  Macintosh  Operating  Systems:   • Mac  OS  X  Version  10.4  (Intel  and  PowerPC)  32-­‐bit  and  64-­‐bit  with  Safari  Browser • Mac  OS  X  Version  10.5  (Intel  and  PowerPC)  32-­‐bit  and  64-­‐bit  with  Safari  Browser • Mac  OS  X  Version  10.6  (Intel  only)  32-­‐bit  and  64-­‐bit  with  Safari  Browser

• Hardware  Requirements The  computer  on  which  you  intend  to  install  the  plug-­‐in  must  meet  the  following  minimum  requirements:    

• At  least  256  MB  of  RAM   • 29  MB  of  free  disk  space  

A  working  network  or  Internet  connection  to  connect  to  servers    

 

16    

Appendix  B  

Creating  a  Shortcut  to  the  Citrix  CAG  on  your  desktop:  

Right-­‐click  anywhere  on  your  desktop  and  select  “New”  Followed  by  “Shortcut”  

 

The  following  will  appear:  

 

Type  in  the  URL  for  the  CAG  gateway  you  wish  to  add.    (Normally  VISN  11  will  utilize  the  ‘EAST’  gateway).  

17    

 

 

Click  “Next”.    The  following  will  appear:  

 

Type  in  “Citrix  Access  Gateway”  or,    any  other  name  which  has  meaning  for  you  to  describe  this  

shortcut.    Click  “Finish”.  

18