vpn connection guide for cloud service for web …

VPN CONNECTION GUIDE FOR CLOUD SERVICE FOR WEBSAMS

VPN CONNECTION GUIDE

FOR

CLOUD SERVICE FOR WEB-BASED SCHOOL ADMINISTRATION AND MANAGEMENT

SYSTEM (WEBSAMS)

2021

Version: 1.0

July, 2021


Page 1 of 28

Table of Contents

1. INSTALL THE VPN CLIENT ........................................................................................................................ 2

2. GET THE VPN TOKEN ............................................................................................................................... 7

2.1 SOFTWARE TOKEN ......................................................................................................................................... 7 2.1.1 For Android Devices ............................................................................................................................. 9 2.1.2 For iOS Devices .................................................................................................................................. 11 2.1.3 For Windows Devices ......................................................................................................................... 13

3. CONNECT VPN TO THE CLOUD .............................................................................................................. 16

4. CHANGE VPN PASSWORD FROM SELF SERVICE PORTAL ....................................................................... 19

5. TRANSFER OF SOFTWARE TOKEN FROM OLD TO NEW DEVICE (AVAILABLE FOR ANDROID AND IOS DEVICE ONLY) ................................................................................................................................................ 22

5.1 FOR ANDROID DEVICES ................................................................................................................................ 22 5.2 FOR IOS DEVICES ........................................................................................................................................ 25


Page 2 of 28

1. INSTALL THE VPN CLIENT

Prerequisite FortiClient 7.0 supports Desktop Operating Systems with Microsoft Windows

10 or above. 1. On the Windows PC you wish to connect VPN, download the VPN Client

installation program at https://www.fortinet.com/support/product-downloads

https://www.fortinet.com/support/product-downloads


Page 3 of 28

2. After download complete, double click the installation program to execute it.

3. Check the checkbox if you accept the license agreement and click Next.

4. Set the destination folder, and click Next.


Page 4 of 28

5. Click Install.

6. Click Finish.

7. After installation, launch the VPN Client.


Page 5 of 28

8. Check the agreement and click I accept.

9. Click Configure VPN.


Page 6 of 28

10. Choose SSL-VPN to set up the new VPN connection. Connection Name can be any name you prefer. Remote Gateway: vpn2021.sams.edu.hk

11. Click Save.


Page 7 of 28

2. GET THE VPN TOKEN

To connect to the cloud, each school is assigned with two software tokens, which are mobile application for 2-factor-authentication during VPN login process to strengthen the security. It is necessary during login of VPN connection.

2.1 SOFTWARE TOKEN

Software token requires several steps to set up. Please follow the procedures to install Mobile App (FortiToken Mobile) for registering the token on your mobile device. You can download the Apps from Google Play Store (for Android) Apps Store (for Apple iOS device) Microsoft Store (for Windows device) You should have received an activation email from < [email protected] >, which contains a QR code for software token activation. You should follow the instruction below to activate the token within 7 days before the QR code expires. You may refer to procedures in later sections.


Page 8 of 28

You may need to contact the CloudSAMS Helpdesk if the activation code is expired your device is lost/ stolen transfer of token is required


Page 9 of 28

2.1.1 For Android Devices

Prerequisite FortiToken Mobile is compatible with devices running Android 5.0 or above The devices should have Internet access during the token activation process

1. Go to Google Play Store and search for FortiToken Mobile. Tap .

2. Tap to launch the application.


Page 10 of 28

3. Open the activation email. Please note that the activation code will expire in 7 days.

4. Tap to scan the QR code [1] in the activation email. You can

also tap to input the activation code [2] in preceding sample mail.


Page 11 of 28

5. Once the token is activated, the VPN token will be displayed on the App as follows:

2.1.2 For iOS Devices

Prerequisite FortiToken Mobile is compatible with devices running iOS 9.0 or above The devices should have Internet access during the token activation process 1. Go to App Store and search for FortiToken Mobile. Tap .

2. Tap to start the installation.


Page 12 of 28

3. Tap to launch the application.



Page 13 of 28

5. Tap to scan the QR code [1] in the activation email. You can also tap

to input the activation code [2] in preceding sample mail.

6. Once the token is activated, it will be displayed on the App as follows:

2.1.3 For Windows Devices

Prerequisite FortiToken Mobile is compatible with devices running Windows 10 version

14393.0 or above The devices should have Internet access during the token activation process 1. Go to Microsoft Store and search for FortiToken Mobile.


Page 14 of 28

2. Tap to start the installation.

3. Tap FortiToken Mobile to launch the application.


5. Tap to add account.


Page 15 of 28

6. Enter the profile to set up the token. Account Name can be any name you prefer. Key refers to activation code sent in step 4 [1] Select Fortinet in Category

7. Click to proceed


XXXXXXXXXXXX


Page 16 of 28

3. CONNECT VPN TO THE CLOUD

1. Launch the VPN Client.

2. Choose the configured VPN Connection Name, and input the VPN Username and Password and click Connect.

3. You can either use method (i) or (ii) below. (i) Retrieve token code from your mobile device.

Note that each token code is valid for 1 minute only.

Software Token

On Android device On Apple device On Windows device

Open the Apps to get the token code


Page 17 of 28

On your desktop, enter the code generated by the VPN token from your mobile and click OK;

(ii) Click Approve in your mobile device with FortiToken Mobile (available for

Apple and Android only) when you receive a notification. *The devices should have Internet access during the approval process

Software Token

On Android device On Apple device On Windows device

Step 1: Tap the notification

*with notification enabled for

FortiToken Mobile Apps

Step 1: Tap the notification

*with notification enabled for

FortiToken Mobile Apps

Not available

Step 2: Tap approve to allow the authentication request

Step 2: Tap approve to allow the authentication request


Page 18 of 28

After performing either (i) or (ii) in previous step, VPN should be connected in your desktop successfully.

For technical matters related to VPN connection, please contact the CloudSAMS Helpdesk at 2802 0218. For other questions, please contact your School Liaison Officer of WebSAMS Team.

https://cdr.websams.edb.gov.hk/Files/Contact/WebSAMS%20School%20Liaison%20Officer%20list.xls

https://cdr.websams.edb.gov.hk/Files/Contact/WebSAMS%20School%20Liaison%20Officer%20list.xls


Page 19 of 28

4. CHANGE VPN PASSWORD FROM SELF SERVICE PORTAL

1. Open web browser, go to Self Service Portal at

https://fac1.sams.edu.hk/portal/selfservice/WebSAMS or https://fac2.sams.edu.hk/portal/selfservice/WebSAMS, then enter your VPN login.

*Each VPN account is able to login only by one of the two links. You can try both links to check which link works for your account.

2. Enter your passcode generated by the VPN token or click Approve in supported

devices. You may refer to step [3] in previous section.

https://fac1.sams.edu.hk/portal/selfservice/WebSAMS

https://fac2.sams.edu.hk/portal/selfservice/WebSAMS


Page 20 of 28

3. Click Password below. Note that only the icon Password is available while the remaining features are disabled.

4. Change your password as follows.


Page 21 of 28

5. You will be forced to sign out afterwards.

6. You may login again with your new password for testing.

7. Click Logout after conducted your test in step [6].


Page 22 of 28

5. TRANSFER OF SOFTWARE TOKEN FROM OLD TO NEW DEVICE (AVAILABLE FOR ANDROID AND IOS DEVICE ONLY)

In case transfer of software token is required due to a change in mobile device, you can either contact CloudSAMS Helpdesk or initiate Transfer Tokens from your mobile device.

5.1 FOR ANDROID DEVICES

1. Click then choose Transfer Tokens.

2. Tap the token.

3. Tap .


Page 23 of 28

4. Tap .

5. Tap .

6. The token is removed from FortiToken Mobile Apps of your old device.

7. Open the activation email. Please note that the activation code will expire in 24 hours. While the time indicated in the email is in Coordinated Universal Time (UTC), which is 8 hours behind of Hong Kong Time.


Page 24 of 28

8. Tap to scan the QR code [1] in the activation email. You can

also tap to input the activation code [2] in preceding sample mail.



Page 25 of 28

5.2 FOR IOS DEVICES

1. Tap Transfer Tokens.


Page 26 of 28

2. Tap .

3. Tap .


Page 27 of 28

4. Tap .

5. Tap .

6. The token is removed from FortiToken Mobile Apps of your old device.

7. Open the activation email. Please note that the activation code will expire in 24 hours. While the time indicated in the email is in Coordinated Universal Time (UTC), which is 8 hours behind of Hong Kong Time.


Page 28 of 28

8. Tap to scan the QR code [1] in the activation email. You can also

tap to input the activation code [2] in preceding sample mail.

9. Once the token is activated, it will be displayed on the App as follows:

vpn connection guide for cloud service for web …

Documents