Nokia Secure Access System User’s Guide

PDF

Документ

Nokia Secure Access System

User’s Guide

Version 3.2

Part No. N450869005 Rev A

Published June 2005

COPYRIGHT

Rights reserved under the copyright laws of the United States.

RESTRICTED RIGHTS LEGEND

Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph

(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.

Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer software, the rights of the United States Government regarding its use, reproduction, and disclosure are as set forth in the

Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.

IMPORTANT NOTE TO USERS

This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall

Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services; loss of use, data, or profits; or business interruption) however caused and on any theory of liability, whether in contract, strict liability, or tort

(including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possibility of such damage.

Nokia reserves the right to make changes without further notice to any products herein.

TRADEMARKS

Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document are trademarks or registered trademarks of their respective holders.

050110

2 Nokia Secure Access System User’s Guide

Nokia Contact Information

Corporate Headquarters

Web Site

Telephone

Fax

Mail

Address

http://www.nokia.com

1-888-477-4566 or

1-650-625-2000

1-650-691-2170

Nokia Inc.

313 Fairchild Drive

Mountain View, California

94043-2215 USA

Regional Contact Information

Americas

Europe,

Middle East, and Africa

Nokia Inc.

313 Fairchild Drive

Mountain View, CA 94043-2215

USA

Tel: 1-877-997-9199

Outside USA and Canada: +1 512-437-7089 email: [email protected]

Nokia House, Summit Avenue

Southwood, Farnborough

Hampshire GU14 ONG UK

Asia-Pacific 438B Alexandra Road

#07-00 Alexandra Technopark

Singapore 119968

Tel: UK: +44 161 601 8908

Tel: France: +33 170 708 166 email: [email protected]

Tel: +65 6588 3364 email: [email protected]

Nokia Customer Support

Web Site:

Email:

Fax:

Asia-Pacific

https://support.nokia.com/ [email protected]

Americas Europe

Voice:

1-888-361-5030 or

1-613-271-6721

Voice:

1-613-271-8782

Fax:

Voice:

Fax:

+65-67232999

+65-67232897

+44 (0) 125-286-8900

+44 (0) 125-286-5666

050602

Nokia Secure Access System User’s Guide 3

4 Nokia Secure Access System User’s Guide

About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

In This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Conventions Used in This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Online Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1 Nokia Secure Access System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Nokia Secure Access System Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2 Using the Web Browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Signing in to Nokia Secure Access System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Changing Your Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Signing Off Nokia Secure Access System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

User Interface Elements and Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Main Window Tour . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Using the Navigation Bar. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Using Panes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Modifying Favorites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Adding Favorites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Editing Favorites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Sorting, Hiding, and Deleting Favorites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Managing Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Setting User Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Setting Single Sign-On Credentials . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Setting Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Setting Session Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

How to Use Auto-Start Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Clearing Persistent Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Launching a Web Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Using Email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Outlook Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Other Ways to Access Your Email Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Nokia Secure Access System User’s Guide 5

Accessing a Default Email Resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Accessing Multiple Email Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Using File Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Using a File-Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Using NFS File Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Using FTP File Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Using Windows File Share . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Using Port-Forwarding Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Using the Applications Page for Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . 38

Port Forwarding Application Pane. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Using ActiveX for Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Using the ActiveX Application Forwarding Window. . . . . . . . . . . . . . . . . . . . . . 41

Using Java Web Start for Port Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Using the Java Web Start Application Forwarding Window . . . . . . . . . . . . . . . 43

Using Java Runtime Environment for Port Forwarding . . . . . . . . . . . . . . . . . . . . 44

Using the JRE Application Forwarding Window . . . . . . . . . . . . . . . . . . . . . . . . 45

Overriding the Auto-Start Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . 46

Extending Port-Forwarding Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Using Microsoft Outlook with Port-Forwarding Resources. . . . . . . . . . . . . . . . . . 47

Using Lotus Notes with Port-Forwarding Resources . . . . . . . . . . . . . . . . . . . . . . 48

Using Drive Mapping with Port-Forwarding Resources . . . . . . . . . . . . . . . . . . . . 48

Using Citrix Nfuse with Nokia Secure Access System . . . . . . . . . . . . . . . . . . . . . 49

Using Local Web Proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

3 Nokia Secure Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Using Nokia Secure Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Launching Nokia Secure Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Exiting Nokia Secure Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

4 Nokia Secure Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Nokia Secure Connector Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Installing Nokia Secure Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Nokia Secure Connector Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Navigating Nokia Secure Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Operating From Behind a Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Checking Client Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Working with Nokia Secure Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Accessing the Intranet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Accessing Email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Accessing Network Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Nokia Secure Access System User’s Guide

The Private File Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Manually Disabling the Private File Area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

End-Point Security Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Uninstalling and Reinstalling Nokia Secure Connector . . . . . . . . . . . . . . . . . . . . . . 64

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Nokia Secure Access System User’s Guide 7

8 Nokia Secure Access System User’s Guide

About This Guide

This guide is written for the Nokia Secure Access System user. It describes how to use

Nokia Secure Access System to gain secure access to network resources, including internal Web sites, Web-based applications, shared files, and email, from a remote location of from an untrusted or unknown computer.

With the 3.2 release of Nokia Secure Access System, users can securely access corporate resources. Information and instructions for these methods are described in this guide.

In This Guide

This guide is organized into the following chapters:

Chapter 1, “Nokia Secure Access System”

describes Nokia Secure Access System remote client features, system requirements, and instructions for signing in to and launching

Nokia Secure Access System.

Chapter 2, “Using the Web Browser”

describes how to navigate the portal pages, instructions for customizing the pages, and describes how to access and use the network resources for which you have been granted permission.

Chapter 3, “Nokia Secure Workspace” provides information and instructions for using

Nokia Secure Workspace to initiate a secure connection to your enterprise network from an unknown or untrusted computer.

Chapter 4, “Nokia Secure Connector”

describes how to install and run the

Nokia Secure Connector software to access your enterprise network. Features of this SSL

VPN client include encrypted file storage, antivirus software compatibility, and a client-side firewall.

Conventions Used in This Guide

The following sections describe the conventions used in this guide, including:

Notices

Text Conventions

Nokia Secure Access System User’s Guide 9

Notices

Caution

Cautions indicate potential equipment damage, equipment malfunction, loss of performance, loss of data, or interruption of service.

Note

Notes provide information of special interest or recommendations.

Text Conventions

Table 1 describes the text conventions this guide uses.

Table 1 Text Conventions

Convention Description

monospace font Indicates command syntax, or represents computer or screen output, for example:

Log error 12453

bold monospace font

Indicates text you enter or type, for example:

# configure nat

Key names

Menu commands

Keys that you press simultaneously are linked by a plus sign (+):

Press Ctrl + Alt + Del.

Menu commands are separated by a greater than sign (>):

Choose File > Open.

The words enter and type

Italics

Enter indicates you type something and then press the Return or Enter key.

Do not press the Return or Enter key when an instruction says type.

• Emphasizes a point or denotes new terms at the place where they are defined in the text.

• Indicates an external book title reference.

• Indicates a variable in a command: delete interface if_name

10 Nokia Secure Access System User’s Guide

Online Help

Online Help

To launch the online help, click Help from any window in the Web user interface, then select the language you want the Help to appear in.

Use the up and down arrows in the toolbar to navigate forward or back and display additional text and procedures when viewing the online help.

To view a specific topic, click the topic from the contents. You can also look up information in the index or search for topics.

Nokia Secure Access System

This chapter describes the secure remote access features and system requirements for running

Nokia Secure Access System.

Nokia Secure Access System Features

System Requirements

Nokia Secure Access System Features

Nokia Secure Access System provides secure access to your corporate network resources when you are away from the office. Based on the specifications configured by your system administrator, you can use one of the following methods to gain secure access.

Download and use the Nokia Secure Connector SSL VPN client.

This client application is configured by your system administrator and is downloaded and installed to your remote computer or other client device. Secure Connector uses standard

SSL technology, the security protocol found in all standard Web browsers.

Use a standard Web browser and port forwarding.

Using a standard Web browser and the URL provided by your system administrator, you can gain access to system files and other resources that have been set up for you, such as email.

With this method, you can also initiate a Nokia Secure Workspace session to allow you to safely access the network from an unknown or untrusted computer.

These methods are described in greater detail in this guide.

Although many of the rules for remote access to the corporate resources are configured at the administrator level, you can customize some features, such as links to your resources on the various portal pages. Descriptions of these features, along with detailed instructions for the user, are also included in this guide.

Note

Nokia Secure Access System is fully configurable and customizable by your system administrator. Although the pages you have access to might look different than those represented in this document, the system functionality is the same. The feature descriptions, procedures, and examples pages shown in this guide show how you can use Secure Access

System.

Nokia Secure Access System User’s Guide 13

Nokia Secure Access System

System Requirements

Table 2 lists the operating systems, Web browsers, and email clients that are compatible with

Nokia Secure Access System.

Note

If your organization requires client integrity scanning or port forwarding, you will be prompted to install the Sun Java Runtime Environment (JRE) 1.3.1, or later in your Web browser, if it is not already installed. This file can either be downloaded directly from the gateway, or from the Sun Microsystems Web site, depending upon your site configuration. If you are running the Microsoft Internet Explorer browser, ActiveX will automatically download and install.

Table 2 Supported Systems

System Version

Microsoft Windows

Operating System

Other Operating

Systems

Web Browsers

• XP Home Service Pack 1 and 2*

• XP Professional Service Pack 1 and 2*

• 2000 Professional Service Pack 4

• NT v4.0 Service Pack 6

* Windows XP Home and Professional with Service Pack 2 require a Microsoft

Hot Fix, which is listed in the release notes.

• Fedora

• Nokia Symbian (series 60 and 80 implementations)

• OS X

• RHEL WS

• Redhat v9

Note: All operating systems must have the most current version of service packs applied to be supported.

Most SSL-capable Web browsers are compatible with Nokia Secure Access

System, including the following:

• Firefox v1.x

• Mac OS X Safari and Tiger

• Microsoft Internet Explorer v5.5 and v6.0

• Mozilla v1.7.x

• Netscape v8.0

• Opera 7.x

Email Systems The following is a list of supported email client systems that have been tested and are supported for use with Nokia Secure Access System.

• iNotes v6.0 and later

• Lotus Notes Client v6.0.and later

• Microsoft Outlook Client 2000 and later

• Mozilla v1.6 and later

• Thunderbird v1.0 and later

14 Nokia Secure Access System User’s Guide

Using the Web Browser

This chapter describes how to use a standard Web browser and port forwarding to securely access network files and other corporate resources from a remote location. Once you authenticate to Nokia Secure Access System, your user portal automatically launches.

Note

The appearance and content of the portal is configurable by your system administrator.

Therefore, the appearance of your portal may vary from the examples presented in this chapter.

You can customize the appearance of your portal by following the procedures in this chapter.

This chapter contains the following topics:

Signing in to Nokia Secure Access System

User Interface Elements and Navigation

Using Port-Forwarding Resources

Using Local Web Proxy

Signing in to Nokia Secure Access System

The following procedure describes how to sign in to Nokia Secure Access System using a standard Web browser. For information about how to use Nokia Secure Connector to access

corporate files and resources, see Chapter 4, “Nokia Secure Connector.”

Nokia Secure Access System User’s Guide 15

Using the Web Browser

Note

To sign in to Nokia Secure Access System, you need the URL, user name, and password supplied to you by your system administrator. In some cases, you may also need the IP address of Nokia Secure Access System.

To use a Web browser to sign in to Nokia Secure Access System

1. Open your Web browser.

2. Enter the URL (Web address) supplied to you by your system administrator.

For example: https://gateway.example.com.

Note

The first time you sign in, a certificate may be displayed, which you must accept in order to continue.

3. The Nokia Secure Access System Sign In page opens.

4. If available, click the link for the preferred language in which the portal is to appear.

5. Enter your user name and password and click Sign In.

Note

If you are signing in using a certificate, you do not need to supply your user name and password. The certificate must be installed on your system. See your system administrator for information about installing the certificate file.

When the sign-in process is complete, the main window for Nokia Secure Access System opens.

Changing Your Password

The first time you sign in to Nokia Secure Access System, you must use the user name and password supplied by your system administrator. After you sign in the first time, you can change

the password if you have a user account. For more information, see “Setting User Passwords” on page 27.

16 Nokia Secure Access System User’s Guide

User Interface Elements and Navigation

Signing Off Nokia Secure Access System

To sign off Nokia Secure Access System, click the Sign Off link on the link bar at the top of the page. A new page opens, informing you that you have signed off the system.

User Interface Elements and Navigation

This section provides information about the following topics:

Main Window Tour

Home Page

Using the Navigation Bar

Using Panes

Main Window Tour

The following example shows the main window of Nokia Secure Access System.

Link bar

Four tabs

Depending on your configuration, you might be able to access the following pages by clicking one of the four tabs at the top of the page:

Home—provides quick access to frequently used resources and the means to browse the

corporate intranet. For more information, see “Home Page” on page 18.

Web—allows you to manage frequently used Web resources and provides quick access to resources that have been already configured for you by your system administrator. For more

information, see “Launching a Web Page” on page 30. See also

“Outlook Web Access” on page 31.

Files—provides access to Web and file servers. For more information, see “Using File

Resources” on page 34.

Nokia Secure Access System User’s Guide 17

Using the Web Browser

Applications—provides access to port forwarding, which lets you directly start a company

resource and other applications. For more information, see “Using Port-Forwarding

Resources” on page 37.

By using the link bar at the top of the window, you can access the following options:

Preferences—shows the page where you set preferences. For more information, see

“Managing Preferences” on page 26.

Sign Off—exits Nokia Secure Access System.

Help—launches the online Help file.

Home Page

You can access your most frequently used resources from your Home page. The following example of the Home page shows three configured panes: Web, File, and Browse Intranet. Use these panes for convenient access to your most frequently used resources. For more information, see

“Using Panes” on page 19.

Panes

Note

These panes might also appear on other pages.

For more information about these and other panes, see

“Using Panes” on page 19.

Note

Some of the resources discussed in this chapter might not be available to you. For configuration details specific to your installation, see your system administrator.

Nokia Secure Access System User’s Guide

User Interface Elements and Navigation

Using the Navigation Bar

A navigation bar is located on the upper right corner on most HTML pages such as Web, FTP,

NFS, and Windows File Share pages. The navigation bar allows you to access

Nokia Secure Access System.

Sign Off

Home

Expand/

Collapse

Add Favorite

To use the navigation bar:

Click the Home icon to return to your Nokia Secure Access System Home page.

Note

Do not use the Back button on your Web browser to return to the

Nokia Secure Access System pages. Use the Home icon.

Click the Add Favorite icon to add a link in the current pane.

Click the X icon to sign off Nokia Secure Access System.

Click the right-arrow to expand or collapse the navigation bar.

Note

The Navigation bar is superimposed over the Web page, however it does not appear on pages that have no HTML content.

Using Panes

The Web, File, and Browse, or Browse Intranet panes can appear on any page, depending on how your system administrator configured your system. These panes show the system resources that your system administrator preconfigured for you to access.

To access the Web pane

1. Click the Web page tab.

The Web page opens, displaying the Web and Browse Intranet panes.

Nokia Secure Access System User’s Guide 19

Using the Web Browser

2. In the Web pane, click the link of the resource or application you want to launch.

Note

You cannot access email resources by using the Web pane. For information about accessing email resources, see “To set a default email resource” on page 32.

To use the Browse Intranet pane

1. In the Browse Intranet pane, enter the URL of the Web site, FTP server, NFS server, or

Windows File Share server you want to open.

2. Click Open.

For more information about using the Browse Intranet pane, see

“Using a File-Browser

Interface” on page 34.

Modifying Favorites

You can configure Nokia Secure Access System to provide active links to commonly used resources, called bookmarks or favorites. These configuration options include:

Adding favorites

Editing favorites

Hiding favorites

Deleting favorites

Sorting favorites

When you modify the list of resources in a pane, such as the Web pane, the changes appear in the that pane on any page where that pane is displayed. For example, the list of resources in the Web pane is the same list no matter which page the Web pane appears on.

20 Nokia Secure Access System User’s Guide

Modifying Favorites

You can configure your favorite settings by clicking Edit (the pencil icon) on any pane where this option appears:

Edit Minimize

Show filter

When you click Edit, the Manage Channel page opens for the specific pane you are on, for example: Manage Channel: Web.

Manage Channel page options

The following options appear on the Manage Channel page, whether to configure the Home,

Web, Files, or Applications pages of Secure Access System.

Option

Mine/Company

Edit

Delete

Description

Click to toggle between personal and company resources.

Click to access the Bookmarks page, where you can modify existing favorites.

Click to delete the highlighted favorite.

Nokia Secure Access System User’s Guide 21

Using the Web Browser

Down

Hide

Add New Favorite

Click to move the selected favorite up in the sort order.

Click to move the selected favorite down in the sort order.

Click the check box beside one or more favorites to hide.

Click to access the Bookmarks page, where you can add new favorites.

For more information about the options on the Manage Channel page, see the following topics:

Adding Favorites

Editing Favorites

Sorting, Hiding, and Deleting Favorites

Adding Favorites

The following procedure describes how to add links to your favorite resources on any pane.

To add links to your favorite resources

1. Select the pane to which you want to add favorites.

2. Click Edit (the pencil icon).

The Manage Channel page for that pane opens, as shown in the following example.

3. Click Add New Favorite.

The Bookmarks pane opens.

Nokia Secure Access System User’s Guide

Modifying Favorites

4. You can enter or modify the title of the favorite as you want it to appear on the Bookmarks pane and enter or modify the URL. You can also select a predefined resource, including

Web, Email, and port-forwarding resources, from the drop-down list (as configured by your system administrator). The information you select is automatically entered in the Title and

URL fields, which you can then modify.

5. Click Save Changes.

The new favorite appears in the pane on all the pages where that pane is displayed.

Editing Favorites

The following procedure describes how to edit links to your favorite resources on any pane.

To edit links to your favorite resources

1. Select the pane in which you want to edit favorites.

2. Click Edit (the pencil icon).

The Manage Channel page for that pane opens.

Nokia Secure Access System User’s Guide 23

Using the Web Browser

3. Select a favorite from the list.

4. Click Edit.

The Bookmarks pane opens.

5. You can modify the title of the favorite as you want it to appear on the Bookmarks pane and also modify the URL.

6. Click Save Changes.

The changed favorite appears in the pane on all the pages where that pane is displayed.

Sorting, Hiding, and Deleting Favorites

You can sort, hide, and delete favorites as described in this section. The favorites you sort remain in the same order in that pane on any page.The favorites you hide are hidden from view in that pane on any page. The favorites you delete are removed entirely from the system and do not appear in that pane on any page.

24 Nokia Secure Access System User’s Guide

Modifying Favorites

To sort favorites in a pane

1. Select the pane containing the favorites to sort.

2. Click Edit (represented by a pencil icon).

The Manage Channel page for that pane opens, as shown in previous examples.

3. Select the desired favorite and click Up or Down to change its position in the list.

The favorites are sorted accordingly. When you are finished, return to the pane you just configured.

To hide favorites from a pane

1. Select the pane containing the favorites to hide.

2. Click Edit (represented by a pencil icon).

The Manage Channel page for that pane opens.

3. Select the desired favorite(s), then click the check box beside the desired favorites.

The favorites you checked are hidden. When you are finished, return to the pane you just configured.

Note

If you delete one of your favorites, it is removed from the system and does not appear in that pane on any page. You cannot delete a company favorite, as they can be edited or removed only by your system administrator.

To delete favorites from a pane

1. Select the pane containing the favorite you want to remove.

2. Click Edit (represented by a pencil icon).

Nokia Secure Access System User’s Guide 25

Using the Web Browser

The Manage Channel page for that pane opens, as shown in the following example.

3. Select the desired favorite(s), then click Delete.

The favorites you deleted are removed from the system. When you are finished, return to the pane you just configured.

Managing Preferences

Note

Some of the preferences options outlined in this chapter might not be available to all users.

If you have questions about your configuration, see your system administrator.

To access the Preferences page

1. Click the Preferences link on the link bar.

The Preferences page opens.

26 Nokia Secure Access System User’s Guide

Managing Preferences

2. Depending on the configuration of your system, you can set the following options on the

Preferences page:

User passwords

Single sign-on credentials

Certificates

Session preferences, such as saving passwords used to access resources, and saving cookies for Web resources

Auto-Start Preferences

Clear persistent values

Setting User Passwords

Note

You must be using a local authentication method to change your Secure Access System password from the Sign-In page.

Nokia Secure Access System User’s Guide 27

Using the Web Browser

To set or reset your password

1. Click the Preferences link on the link bar.

The Preferences page opens.

2. Under Set Your Local Passwords, enter the password you want to change in the Old

Password page.

3. Enter your new password in the New Password page.

Your new password must meet or exceed the minimum length set by your system administrator. If you do not know the required length, ask your system administrator.

4. Enter your new password again in the New Password (confirm) page.

5. Click Set Password.

Your new password is now stored. The next time you log in to Nokia Secure Access System, use this new password.

Setting Single Sign-On Credentials

If the system administrator has enabled the single-sign on credential option, you will see section for setting a single-sign on credential on your Preferences page, as shown previously.

To set a single-sign on credential

1. Click the Preferences link on the link bar.

The Preferences page opens.

2. Under Set Single Sign-On Credentials, enter your username, your new password, and, optionally, your domain.

3. Click Set Credentials.

Setting Certificates

It is unlikely that you would need to change or set your certificate, unless your system administrator instructs you to do so. If you need to set or change your certificate, obtain the certificate file from the system administrator. You may need to have your computer directly connected to the internal network in your organization. Consult your system administrator about which certificate allows you access to which resources and applications.

To set a certificate

1. From the Nokia Secure Access System main window, click the Preferences link.

The Preferences page opens.

2. Under Set Local Certificate, click Set Certificate.

You are prompted to browse for your certificate.

3. Select the certificate.

28 Nokia Secure Access System User’s Guide

Managing Preferences

4. Click Open.

The page opens.

5. Sign off from Nokia Secure Access System.

6. Sign back in to Nokia Secure Access System.

The new certificate is recognized when you sign in.

Setting Session Preferences

You can set the following session preferences:

Passwords

To set password session preferences and cookies

1. Click the Preferences link on the link bar.

The Preferences page opens.

2. Under Set Session Preferences, select any (or none) of the following options to bypass the password prompt page when you change from Nokia Secure Access System to another application, for example, an FTP server:

Save passwords used to access Web Resources.

Save cookies for use with Web Resources.

3. Click Set Session Preferences to save the selections.

4. Once set, enter your username and password the first time you access the resource. After the first time, access is automatic.

Note

Nokia recommends that you save your Web resource cookies. For your company policy, see your system administrator.

How to Use Auto-Start Preferences

Select this option to launch HTTP Proxy every time you sign in to Nokia Secure Access System and also to automatically start port-forwarding resources as defined by your system administrator. HTTP Proxy settings must be specified by the system administrator for this option

to work. For more information, see “Using Local Web Proxy” on page 50.

Nokia Secure Access System User’s Guide 29

Using the Web Browser

To set Auto-Start preferences

1. Check the Automatically Launch the Local Web Proxy check box.

2. Check the Automatically Launch Port-Forwarding Resource check box.

3. Click Auto-Start Preferences.

Clearing Persistent Values

When you clear persistent passwords, stored passwords and Web resource cookies are deleted.

This can be useful when passwords are changed for resources such as file servers and email, or if a Web resource cookie is deemed insecure.

1. Click the Preferences link on the link bar.

The Preferences page opens.

2. Click Clear Now.

3. Log off Nokia Secure Access System, and sign back in to clear the values.

Launching a Web Page

You can launch a Web page directly from within Nokia Secure Access System, if your system administrator configured your system to allow access to the Internet.

To launch a Web page from the Browse Intranet pane

1. In the Browse Intranet pane, enter the URL of the Web page or server to view.

2. Click Open.

The requested page opens. The Navigation bar is superimposed over the Web page.

Note

To save a Web page to your favorites, see “To add links to your favorite resources” on page

22.

You can also access certain Web pages from the Local Web Proxy pane. See “Using Local Web

Proxy” on page 50.

Using Email

Nokia Secure Access System works with all standards-based email clients that support SSL/

TLS. This section describes how to access email using such an email client. For a complete list of supported email clients, see

Table 2 on page 14.

30 Nokia Secure Access System User’s Guide

Using Email

Note

You can also access email by using Web mail access and exchange port forwarding. For more information, see

“Outlook Web Access” on page 31 and

“Using Microsoft Outlook with

Port-Forwarding Resources” on page 47.

Your system administrator likely configured your system so you could access your email in one of a few ways.

Topics in this section include:

Outlook Web Access

Other Ways to Access Your Email Messages

You can also use the port-forwarding feature to access email applications, such as

Microsoft Outlook. For more information, see

“Using Microsoft Outlook with Port-Forwarding

Resources” on page 47.

Outlook Web Access

You can access your email by using, for example, Reach Outlook Web Access (OWA) for Web browsers other than Internet Explorer, or Rich OWA for Internet Explorer. Your system administrator can configure OWA to appear in the Web Resources pane.

To access OWA

1. Click the OWA link in the Web pane, or enter the URL in the Browse Intranet pane and click open.

The Authentication Required page opens.

2. Do one of the following:

If the Authentication Required page includes a Domain prompt, enter your username, password and Windows domain.

If the Authentication Required page does not include a Domain prompt, in the username field, enter the following:

<domain_name>\<user_name>

Other Ways to Access Your Email Messages

You can also access your email in these other ways:

By using the default setting that your system administrator configured. For more

information, see “Accessing a Default Email Resource” on page 32.

With multiple email resources, where you specify which email resource to use. For more

information, see “Accessing Multiple Email Resources” on page 32.

The system administrator will either preconfigure your email client or should provide instructions for you to do the configuration. Your email client must be configured before using

Nokia Secure Access System User’s Guide 31

Using the Web Browser

Nokia Secure Access System to send and retrieve email. The following section contains instructions for setting email protocols, server port numbers, security requirements, user names and passwords, and selecting email resources.

Accessing a Default Email Resource

If your system administrator set persistent passwords, you only need enter the username and password the first time you sign in. Make sure that the email resource you want to access is set as the default. See “To set a default email resource” on page 32 for more information.

If your system administrator set persistent passwords, access your email by doing one of the following:

When username and password match the backend server, open your email client.

When username and password do not match the backend server:

Open your email client.

Enter your username and password.

username

NSAS

;username emailserver password

NSAS

; password emailserver

Note

This example uses a semicolon (;) as a separator between the username and password.

Your configuration might use another separator symbol. Your system administrator configures this option and determines which symbol to use.

Accessing Multiple Email Resources

When you have multiple email resources, you must designate one as your default or specify the email resource. For complete information about setting default email resources, see your system administrator.

To set a default email resource

1. Sign in to Nokia Security Access System.

2. From the Applications page, in the Email pane, select the email resource link.

The Email Resource Selected page opens.

32 Nokia Secure Access System User’s Guide

Using Email

3. Enter the username and password, then confirm the password.

4. Click Set Email Username/Password.

The default email is set. The fields are cleared and a message appears, informing you that credentials have been changed.

5. Click Return To Main Page.

The resource you selected in step 2 is now your default email resource. You can access your email as described in

“Accessing a Default Email Resource” on page 32.

To access an email resource other than the default email resource

1. Sign in to Nokia Security Access System.

2. Open your email client.

3. Enter a username and password.

<username>@<resource.com>

For example:

[email protected]

<password>

The resource name is not necessarily a domain name. It is a resource name. Which separator you use is determined by your system administrator. This example uses the at sign (@).

To access an email resource when the username and password do not match the backend server

1. Sign in to Nokia Security Access System.

2. From the Web page, in the Web pane, select the email resource link.

Nokia Secure Access System User’s Guide 33

Using the Web Browser

3. Open your email client.

4. Enter username and password in the following way:

username

NSAS

<specifiedresource>;username emailserver password

NSAS

; password emailserver

Note

Separators are configurable for a number of symbols. This example uses a semicolon (;) as a separator for the username and password and the at sign (@) as a separator for a resource. Your system administrator configures this option and determines which symbol to use.

Using File Resources

This section describes how to use the file resources shown on the Files page, as described in the following topics:

Using a File-Browser Interface

Using NFS File Resources

Using FTP File Resources

Using Windows File Share

To access preconfigured files, click the Files Page tab, then click the appropriate link in the Files pane.

The FTP, NFS, and Windows File Share resource options all look and function similarly. You can view these files by name, size, type or date, by clicking the heading at the top of the desired column.

Using a File-Browser Interface

The following instructions apply to the user interface for NFS file resources, FTP file resources, and Windows File Share resources. The administrator can configure file resources to appear as links in the Files pane for NFS, FTP, and Share resources.

34 Nokia Secure Access System User’s Guide

Using File Resources

Note

Some of the options discussed in this section may not be available to all users. For more details, see your system administrator.

To download a file

1. Click the Disc icon next to the file name.

A File Download dialog box opens.

2. Select Save.

3. Save the file to the desired location.

To upload a file

1. Click Browse next to the Upload a file dialog box.

2. Browse to find and select the file to upload.

3. Click Open

4. Click File Open Upload.

The file uploads to the File Resource server. The new file appears on the File Resource server page.

To create a directory on a file resource

1. Enter the name of the new directory in the Create a Folder dialog box.

2. Click Create Folder.

The new directory appears on the File Resource server page.

To delete a file

1. From the Files page click Edit on the File pane.

2. Select the file by clicking the Trash Can icon next to the file.

3. Click Confirm.

To save a file resource to the Bookmarks pane, see “To add links to your favorite resources” on page 22.

Nokia Secure Access System User’s Guide 35

Using the Web Browser

Using NFS File Resources

This section explains how to access the NFS file resource.

To access an NFS server

1. Select the Files page.

2. In the File pane, enter the URL of the NFS server to access by using the following syntax:

[<host name>/<mount point>]

where the mount point may be something like

export/home/userjoe

. The mount point should be the complete path from the directory to the actual shared directory.

3. Click Open.

The Authentication page opens.

Note

Some NFS servers do not require authentication. In this case, you do not need to enter a username and password.

4. Enter your NFS username and password.

The NFS server page opens.

Using FTP File Resources

This section describes how to access the FTP file server.

To access an FTP server

1. Select the Files page.

2. In the File pane, click the resource to access.

Alternatively, you can enter the URL of the FTP server to access the Browse Intranet pane by using the following syntax:

[host name or IP address of server]

3. (Optional) Enter the subdirectory in the URL.

4. Click Open.

An intranet FTP Server Authentication page opens.

5. Enter your FTP username and password.

The FTP server page opens.

36 Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

Using Windows File Share

This section describes how to access Windows file share.

To access Windows File Share

1. Enter the server name, followed by the share name as //servername/sharename.

2. Click Browse.

An intranet Windows Network page opens.

3. Select the Windows File Share server to access.

The Authentication page opens.

4. Enter your username and password.

5. Click OK.

Nokia Secure Access System launches the File Browsing page.

Using Port-Forwarding Resources

Port forwarding allows you to directly start a company resource application, such as

Microsoft Outlook, so you can do your work within the application itself rather than through a

Web browser. Port forwarding uses two protocols, TCP and UDP. Port forwarding allows you access to applications that are not Web-based, such as Microsoft Outlook Exchange, Lotus

Notes, and Telnet, or other applications that are not SSL/TLS enabled. When you use portforwarding, keep in mind the following considerations:

The application you access must communicate with the local host instead of trying to communicate directly to a backend server.

You can open and handle multiple port-forwarding resources.

Your system administrator has configured your system to use one of the following technologies for port forwarding: ActiveX, Java Web Start (JNLP), or Java Runtime Environment (JRE). The actual Nokia Application Forwarding Window you see is essentially the same (with minor variations) no matter which technology you are using. The way to access the Nokia Applications

Forwarding window varies, depending on the technology used. If you are running either

ActiveX or Java Web Start, when you start a new port forwarding resource, an icon appears in your system tray, which you double-click to open. If you are using JRE, no icon appears in your system tray, but the applet window opens automatically in a new instance of the browser. For more information, refer to the appropriate section:

Using ActiveX for Port Forwarding

Using Java Web Start for Port Forwarding

Using Java Runtime Environment for Port Forwarding

Using the Applications Page for Port Forwarding

The Applications page displays port-forwarding resources, as the following example shows.

To start a new port-forwarding resource

1. Click the Applications page tab.

2. In the Port Forwarding pane, click the link of the application you want to start.

A page opens informing you that you successfully started the resource.

Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

Note

If you are using Microsoft Outlook, you might need to start the application directly or open a new browser.

Port Forwarding Application Pane

The Port Forwarding Application pane allows you to add applications by selecting them from the drop-down list, shown below. You choose an application then supply the IP addresses and port numbers.

Note

You see only those applications that have been configured by your system administrator.

To configure the applications, you need the following additional information from your system administrator:

Nokia Secure Access System User’s Guide 39

Using the Web Browser

For TCP or UDP applications:

Local IP address

Local port number

Remote server hostname or IP Address

Remote server port number

For Microsoft Outlook Exchange:

MS exchange server FQDN

For Lotus Notes:

Local IP address

Local port number

For Windows Drive Mapping:

Map drive letter

To server with hostname

Share name

To use Microsoft Outlook

1. Click the Applications page tab.

2. In the Port Forwarding Application pane, select Microsoft Outlook from the drop down list.

3. Enter the server name (supplied by your system administrator).

4. Click Start.

To forward a TCP or UDP application

1. Click the Applications page tab.

2. In the Port Forwarding Application pane, select TCP or UDP applications from the drop down list.

Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

3. Enter the port number for TCP or UDP application communication. Contact your system administrator if you do not know the port number.

4. Enter the IP address and port number that you are forwarding communications to. Contact your system administrator if you do not know the IP address and port number

5. Click Start.

Using ActiveX for Port Forwarding

Note

You must use Internet Explorer if you use ActiveX. If you cannot use Internet Explorer, then you automatically use JRE for port forwarding.

To open the ActiveX Application Forwarding window

1. On the Applications pane, click a port-forwarding resource.

The Nokia Application Forwarding window starts. The following icon appears in your system tray:

2. Double-click the icon or right-click the icon and select Status from the menu.

The ActiveX Application Forwarding window opens.

Using the ActiveX Application Forwarding Window

The Nokia Application Forwarding window (also know as the Port-Forwarding applet) starts when you connect to port-forwarding resources. It contains three pages: General, Details, and

Settings.

For more information, see “Using Local Web Proxy” on page 50.

Nokia Secure Access System User’s Guide 41

Using the Web Browser

Note

The Nokia Application Forwarding window does not open if windows are disabled.

The General page shows status for connection, activity packets, and the remaining time for this session. The system administrator sets the time limits for a connection. For more information

about how to extend your port-forwarding session, see “Extending Port-Forwarding Sessions” on page 47.

The Details page shows a description of the forwarding connection, the channel ID, and the number of packets sent and received. If you are running multiple port-forwarding resources, the

Details page shows all open channels.

The Settings page allows you to set or view the debug level.

Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

Using Java Web Start for Port Forwarding

To open the Java Web Start Application Forwarding window

1. On the Applications pane, click a port-forwarding resource.

The Java Web Start applet starts. The following icon appears in your system tray:

2. Double-click the icon or right-click the icon and select Status from the menu.

The Java Web Start Application window opens.

Using the Java Web Start Application Forwarding Window

The Nokia Application Forwarding window (also know as the Port-Forwarding applet) opens when you connect to port-forwarding resources.

For more information, see “Using Local Web Proxy” on page 50.

Note

The Nokia Application Forwarding window does not open if windows are disabled.

The General page shows status for connection, activity packets, and the remaining time for this session. The system administrator sets the time limits for a connection. For more information about how to extend your port-forwarding session, see

“Extending Port-Forwarding Sessions” on page 47.

Nokia Secure Access System User’s Guide 43

Using the Web Browser

The Details page shows a description of the forwarding connection, the channel ID, and the number of packets sent and received. If you are running multiple port-forwarding resources, the

Details page shows all open channels.

The dot next to the port number is green when the connection is active, yellow when the connection failed, and red when the port is unusable. No icon is visible when the channel is inactive.

The Trace Log option in the upper right corner shows log information and any errors. Most users do not need this information.

The About option in the upper right corner shows the port-forwarding applet and build number.

Click Exit to close the Nokia Application Forwarding window.

Click Extend Session to extend your port forwarding session (see “Extending Port-

Forwarding Sessions” on page 47).

Using Java Runtime Environment for Port Forwarding

If your organization requires client integrity scanning or port forwarding, you need Java

Runtime Environment (JRE) v1.3.1, or later. If you do not have JRE v1.3.1 or 1.3.2 installed,

44 Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

you are automatically prompted to download it. For more information, see your system administrator.

This procedure uses the example of Telnet to a server named Caffeine. In this example, the system administrator configured the use of Telnet to Caffeine and port forwarding using port

2300. This example uses Windows 2000.

To use JRE to access resources

1. In the Port Forwarding pane, click the desired resource.

A Java applet launches the Nokia Application Forwarding window and a status bar notifies you when you are connected. For more information, see

“Overriding the Auto-Start

Configuration Settings” on page 46.

If JRE is not installed, you are automatically asked to download it. Select OK to Trust

Sun Microsystems. The applet launches when the JRE installation is complete.

2. Click Yes in response to the security messages.

The security messages appear only the first time you access port forwarding.

This process can take a few minutes. Do not close the applet until the client application is complete and is not in use.

3. After you are connected, open a command line and enter the following command:

telnet localhost 2300

where Telnet is the application, localhost is the name, and 2300 is the listening port.

A telnet connection to Caffeine opens.

4. To run multiple port-forwarding resources, continue to open resources as needed.

5. When you finish, exit Telnet.

6. Click Exit on the Nokia Application Forwarding window.

Using the JRE Application Forwarding Window

The Nokia Application Forwarding window (also know as the Port-Forwarding applet) opens when you connect to port-forwarding resources.

For more information, see “Using Local Web Proxy” on page 50.

Note

The Nokia Application Forwarding window does not open if windows are disabled.

“Extending Port-Forwarding Sessions” on page 47.

Nokia Secure Access System User’s Guide 45

Using the Web Browser

The Details page shows a description of the forwarding connection, the channel ID, and the number of packets sent and received. If you are running multiple port-forwarding resources, the

Details page shows all open channels.

The dot next to the port number is green when the connection is active, yellow when the connection failed, and red when the port is unusable. No icon is visible when the channel is inactive.

The Trace Log option in the upper right corner shows log information and any errors. Most users do not need this information.

The About option in the upper right corner shows the port-forwarding applet and build number.

Click Exit to close the Nokia Application Forwarding window.

Click Extend Session to extend your port forwarding session (see “Extending Port-

Forwarding Sessions” on page 47).

Overriding the Auto-Start Configuration Settings

If your system administrator configures the auto-start port-forwarding feature for an application

(such as email), the PFP applet for the application automatically launches when you sign in.

46 Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

Although the administrator can configure specific port-forwarding resources to be automatically started, you can override this from your Preferences page. For more information, see

“Managing

Preferences” on page 26.

Note

If a specific resource has been configured to start automatically and also to be invisible, and you override this Auto-Start option, the resource then becomes inaccessible unless you reenable the auto-start preference.

To override auto-start configuration settings

1. Click Preferences on the link bar.

The Preferences page opens.

2. Uncheck Automatically Launch Selected Port-Forwarding Resources.

3. Click Set Auto-Start Preferences.

Extending Port-Forwarding Sessions

Your system administrator has preconfigured the time that is allowed for a port-forwarding session. This is shown as time remaining on the General page of the Nokia Application

Forwarding window. You can extend the port-forwarding session time before the time expires by following these instructions.

To extend a port forwarding session

1. Click Extend Session, located on the bottom of the Nokia Application Forwarding window.

The Session Extended window opens and the session timer is set back to the default value.

You can repeat this step as many times as you want. You may be asked to authenticate again.

2. Click Close This Window.

The Session Extended window closes and you are returned to the Nokia Application

Forwarding window.

Using Microsoft Outlook with Port-Forwarding Resources

This section describes accessing a port-forwarding resource to use Microsoft Outlook with a backend Exchange server.

To use Outlook with port-forwarding

1. From the Applications page, click the desired resource.

An applet launches the Nokia Application Forwarding window. The Port-Forwarding window shows the status as connected in the connection field of the General page.

Nokia Secure Access System User’s Guide 47

Using the Web Browser

2. Click Yes to the three security messages.

The security messages appear only the first time you access port forwarding.

This process might take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. Once connected, open Outlook and proceed as normal.

4. To exit, close Outlook.

You can now close the applet window.

Using Lotus Notes with Port-Forwarding Resources

This section describes how to use Lotus Notes with port-forwarding. Be sure that your system administrator has set the Locations Preferences for your Lotus Notes client.

Note

Lotus Notes might be called another name in your organization. In the following procedure, substitute your server name for Lotus Notes.

To use Lotus Notes with port forwarding

1. From the Applications page, in the Port-Forwarding pane, click Lotus Notes.

A Java applet launches the Nokia Application Forwarding window and a status bar notifies you when you are connected.

2. Click Yes to the three security messages.

The security messages appear only the first time you access port forwarding.

This process can take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. Once connected, open Lotus Notes and proceed as normal.

4. To exit, close Lotus Notes.

You can now close the applet window.

Using Drive Mapping with Port-Forwarding Resources

The system administrator can map a frequently-used server or drive to the local computer.

To access a mapped drive with port forwarding

1. From the Resource pane, click the desired resource.

A Java applet launches the Nokia Application Forwarding window and a status bar notifies

you when you are connected. For more information, see “Overriding the Auto-Start

Configuration Settings” on page 46.

48 Nokia Secure Access System User’s Guide

Using Port-Forwarding Resources

2. Click Yes to the security messages.

The security messages appear only the first time you access port forwarding.

This process can take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. Once the applet connects, based on the security settings applied to the share on the backend resource, you might be prompted for a username and password, to gain access to the share.

4. Click OK.

5. Open Internet Explorer.

6. Choose Start > Programs > Accessories > Windows Explorer.

The mapped drive appears in the menu under My Computer.

7. Close the applet window.

Using Citrix Nfuse with Nokia Secure Access System

If your system administrator has indicated that you need to access Citrix Nfuse, use the steps in this section to access Web resource configured for Citrix Nfuse.

Note

Citrix might be called another name in your organization. In the following procedure, substitute your server name for Citrix Nfuse.

To access Citrix Nfuse with port forwarding

1. From the Resource pane, click the resource designated by your administrator.

This launches the Nokia Application Forwarding window.

Caution

Do not click Citrix resource under Web at this time. You will be instructed to do so later.

2. Click Yes to the security messages.

These security messages only appear the first time you access port-forwarding.

This process may take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. From the Port-Forwarding Applet Starting window, click Home.

The Home page opens.

4. From the Resource pane, click the Nfuse Web resource.

The Citrix sign-on page opens.

Nokia Secure Access System User’s Guide 49

Using the Web Browser

5. Authenticate to the Citrix server with the username and password your administrator supplies to you.

6. Click Log in.

The Citrix Metaframe page opens and displays resources available to you.

To exit Citrix Nfuse

Use the navigation bar in the upper right corner of the window to open

Nokia Secure Access System and exit Citrix.

Using Local Web Proxy

You can access a Web page through local Web proxy (HTTP proxy) if you experience problems using a Web-based application. Some applications have content that is not well-supported by the standard Web resource, for example, streaming Flash content. You can configure an HTTP

Proxy to access all Web pages through the proxy, or only a selected number. For more information, see your system administrator.

An HTTP proxy is available for all Web browsers. It is automatically configured on Internet

Explorer. With other types of browsers, you must manually configure the HTTP proxy settings.

For more information, see

“To set Auto-Start preferences” on page 30.

To use Internet Explorer to access a Web resource through HTTP Proxy

1. Click HTTP proxy in the Local Web Proxy pane.

Note

The system administrator can give the HTTP Proxy link another name.

An applet launches the Nokia Application Forwarding window, and a status bar notifies you when you are connected. For more information, see

“Overriding the Auto-Start

Configuration Settings” on page 46.

If the JRE is not installed, you are automatically prompted to download it. Select OK to

Trust Sun Microsystems. The applet launches when the JRE installation is complete.

2. Click Yes to the security messages.

Note

If you are using ActiveX, no security messages are presented.

The security messages appear only the first time you access port forwarding.

This process may take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. The Nokia Secure Access System browser opens.

50 Nokia Secure Access System User’s Guide

Using Local Web Proxy

To use Mozilla or Netscape to access a Web resource through HTTP Proxy

1. Click HTTP proxy in the Local Web Proxy pane.

Note

The system administrator can give the HTTP Proxy link another name.

A Java applet launches the Nokia Application Forwarding window, and a status bar notifies you when you are connected. For more information, see

“Overriding the Auto-Start

Configuration Settings” on page 46.

If the JRE is not installed, you are automatically prompted to download it. Select OK to

Trust Sun Microsystems. The applet launches when the JRE installation is complete.

2. Click Yes to the security messages.

The security messages appear only the first time you access port forwarding.

This process may take a few minutes. Do not close the applet window until the client application is complete and is not in use.

3. The Nokia Secure Access System browser opens.

4. Copy the URL shown in the Local Web Proxy pane.

5. In your browser window, choose Edit > Preferences.

6. Select Advanced.

7. Select Proxies.

8. Click Automatic proxy configuration URL.

9. Paste the URL from the Local Web Proxy pane into the text box.

If you are unable to copy and paste the URL, enter the following URL into the box:

https://host:port/get/_pac/proxy.pac

Host is the hostname or IP address you are using to access Secure Access System.

Port is the port on which Secure Access System is running.

If you normally do not use a port number to access Secure Access System, omit it.

10. Click Reload.

11. Click OK to save your changes.

12. To save the URL in the text box, repeat the procedure, and click Direct Connection to the

Internet.

To use Firefox to access a Web resource through HTTP Proxy

1. Click HTTP proxy in the Local Web Proxy pane.

Note

The system administrator can give the HTTP Proxy link another name.

Nokia Secure Access System User’s Guide 51

Using the Web Browser

A Java applet launches the Nokia Application Forwarding window, and a status bar notifies

you when you are connected. For more information, see “Overriding the Auto-Start

Configuration Settings” on page 46.

If the JRE is not installed, you are automatically prompted to download it. Select OK to

Trust Sun Microsystems. The applet launches when the JRE installation is complete.

2. Click Yes to the security messages.

The security messages appear only the first time you access port forwarding.

This process may take a few minutes. Do not close the applet window until the client application is complete and is not in use.

The Nokia Secure Access System browser opens.

3. Enter the URL.

4. In your Web browser choose Tools > Options (or choose Application > Preferences on the

MacOS X).

5. Select the General icon on the left toolbar.

6. Click Connection Settings.

7. Click Automatic proxy configuration URL.

8. Paste the URL from the Local Web Proxy pane into the text box.

If you cannot copy and paste the URL, enter the following URL into the box:

https:// host:port/get/_pac/proxy.pac

Host is the hostname or IP address you are using to access Nokia Secure Access System.

Port is the port on which Nokia Secure Access System is running.

If you normally do not use a port number to access Nokia Secure Access System, omit it.

9. Click Reload.

10. Click OK to save your changes.

11. To save the URL in the text box, repeat the procedure, and select the Direct Connection to the Internet.

52 Nokia Secure Access System User’s Guide

Nokia Secure Workspace

Nokia Secure Workspace offers remote access from an unknown or untrusted computers by providing a temporary “sandbox” for the Nokia Secure Access System session. This sandbox is entirely deleted when the session is terminated, allowing user access to Nokia Secure Access

System without leaving behind traces, such as cookies, files, and browser history on the remote system.

As with the standard Web browser access to Nokia Secure Access System, once a

Nokia Secure Workspace session is initiated, you have all access permissions assigned to your corporate login account.

This chapter describes Nokia Secure Workspace, and includes the following information:

Using Nokia Secure Workspace

Exiting Nokia Secure Workspace

Using Nokia Secure Workspace

Nokia Secure Workspace securely deletes any downloaded and newly created files when you terminate the Secure Workspace session. Any changes that have been made to the registry during the session are returned to the pre-session configuration, removing all traces of the session from the computer.

During a Secure Workspace session, you cannot copy or cut and paste data from

Secure Workspace to your desktop. However, you can copy and paste data from your desktop to

Secure Workspace.

Launching Nokia Secure Workspace

This section describes how to launch Nokia Secure Workspace from the Internet Explorer browser.

To launch a Secure Workspace session

1. Enter the Nokia Secure Access System URL that was provided by your system administrator into your browser.

The Secure Workspace page opens.

Nokia Secure Access System User’s Guide 53

Nokia Secure Workspace

2. Click Start Secure Workspace.

Note

If you are signing in to Nokia Secure Access System from a trusted computer, a Secure

Workspace session is not initiated, and you are prompted for a standard sign in.

The Nokia Secure Workspace user interface appears with a panel that has two buttons:

Switch to Local Workspace—allows the user to switch between the Secure and nonsecure

Workspace. This button might also be Switch to Secure Workspace, depending on which desktop is active.

Exit Secure Workspace (Logoff)—closes the Secure Workspace and launches clean-up operations. This operation might take up to a few minutes.

A security certificate may appear. This is to inform you that the gateway’s certificate is not in your local certificate store. In almost all cases this is merely a warning. Please consult your network administrator if you feel this warning poses a real security threat.

3. Click Yes to proceed.

The Nokia Secure Access Sign In page opens. This Sign In page is a new desktop with a new instance of the IE browser.

4. Enter your username and password and click Sign In.

Your Nokia Secure Access System home page opens.

Note

You might see a warning message from IE asking for verification that the signed ActiveX control is trusted. Click Yes to clear the message.

Nokia Secure Access System User’s Guide

Exiting Nokia Secure Workspace

Exiting Nokia Secure Workspace

When you exit Nokia Secure Workspace, all changes made to the registry are deleted and all files created by programs during this session are deleted, including:

All downloaded files

Cookies downloaded during the session

URL history

Remembered form entries

Cached passwords

Auto-complete history

Open and Save history

Note

The state of the system before launching Secure Workspace is not affected or altered by these clean-up operations.

To exit Nokia Secure Workspace, click Exit Secure Workspace (Logoff). This closes the

Secure Workspace environment and launches automatic clean up operations.

Nokia Secure Access System User’s Guide 55

Nokia Secure Workspace

56 Nokia Secure Access System User’s Guide

Nokia Secure Connector

This chapter describes how to install the Nokia Secure Connector application software on the computer you use to connect remotely to the enterprise network and resources.

It includes the following information:

Nokia Secure Connector Features

Nokia Secure Connector Basics

The Private File Area

End-Point Security Scanning

Uninstalling and Reinstalling Nokia Secure Connector

Nokia Secure Connector Features

Nokia Secure Connector offers complete, integrated remote access to your corporate network and resources. It includes the following features:

Remote application access

Secure file storage

Full VPN support without the limitations of traditional IPSec implementations

Operates from behind third-party firewalls and proxies

System Requirements

To install and operate Nokia Secure Connector client software, your computer must meet the

system requirements described in Table 3

Nokia Secure Access System User’s Guide 57

Nokia Secure Connector

Table 3 System Requirements for Nokia Secure Connector

Requirement Description

Operating

System

Processor

• Windows 2000 with SP4

• Windows XP Home with SP2

• Windows XP Pro with SP1

• Administrative-level privileges on the computer to which you are installing Nokia Secure Connector application software.

Pentium 233MHz CPU or faster

Memory

Hard disk

64MB RAM (minimum)

50MB of free disk space (minimum)

Installing Nokia Secure Connector

Before you start, you need the username and password that your system administrator provided.

Note

You must have administrator-level privileges on the machine to which you are installing the

Nokia Secure Connector application software. User account privileges can be viewed through the control panel settings on the Windows platforms. If you are unsure of your account settings, see your system administrator.

To install Nokia Secure Connector

1. Sign in to Nokia Secure Access System.

2. Click the Secure Connector Installer Download link located on the Web pane to start the download process.

58 Nokia Secure Access System User’s Guide

Nokia Secure Connector Basics

3. Click Save.

4. Choose a location on your computer to store the NokiaSetup.exe file: for example, C:\Temp.

The file download begins.

5. When the download is complete, double-click the NokiaSetup.exe file.

The installation begins, and may take several minutes to complete while various components are installed.

Note

The installer uses the Windows Installer system that is supplied with the Windows operating system. If the Windows Installer version on your computer is out of date, you will be asked to update your computer for the latest version of the Windows Installer.

Click OK to update the Windows Installer.

Nokia Secure Connector Basics

This section describes:

Navigating Nokia Secure Connector

Operating From Behind a Firewall

Checking Client Status

Nokia Secure Access System User’s Guide 59

Nokia Secure Connector

Navigating Nokia Secure Connector

This section provides information for using the Nokia Secure Connector software.

To use the Nokia Secure Connector software

1. Right-click the red Nokia Secure Connector lock icon located in the Windows system tray.

This icon appears red when the Nokia Secure Connector software is not active; once you have successfully connected to Nokia Secure Access System, it changes to green.

2. Select Sign-on from the menu.

Note

If you do not see the icon in the system tray, you can launch Nokia Secure Connector by choosing Start > Programs > Secure Connector from the Windows system tray.

When the Nokia Secure Connector session is active, the color display of your desktop may change according to the settings specified by the system administrator. This change in color is a reminder that you have a Nokia Secure Connector active session.

To exit Nokia Secure Connector

1. Right-Click the green Nokia Secure Connector lock icon located in the Windows system tray.

2. Select Sign-off from the menu.

A message opens, informing you that the computer settings prior to the

Nokia Secure Connector session are being restored. When this process is complete, the

Nokia Secure Connector icon turns red, signifying the termination of the session.

Nokia Secure Access System User’s Guide

Nokia Secure Connector Basics

Operating From Behind a Firewall

Unlike other VPN clients, Nokia Secure Connector can operate from behind third-party firewalls and proxy servers. For example, typically when you want access to your network from an airport kiosk or another office that you may be visiting, these networks usually have implemented proxies and firewalls to control access to the Internet. Depending on how those proxies are configured, you might need to perform the following configuration steps.

Note

Proxy settings need to be configured only if proxy authentication is required. Check with your system administrator to verify whether this is the case.

To configure proxy settings

1. Launch Internet Explorer.

2. Select Tools > Internet Options.

3. Click the Connections tab.

4. Click LAN Settings.

This displays your Proxy server IP address and Port settings. Nokia Secure Connector uses these same settings.

5. Right-click the Nokia Secure Connector icon in the system tray.

6. Choose Settings.

7. Enter your Proxy username and password.

8. Click OK.

Nokia Secure Access System User’s Guide 61

Nokia Secure Connector

Note

The Internet Explorer default settings are usually sufficient to gain network access through the proxy.

Checking Client Status

To check the status of the client, right-click the Nokia Secure Connector icon in the system tray and choose Status. At a glance, you can verify that the client features are properly configured and operational.

Working with Nokia Secure Connector

This section describes how to use Nokia Secure Connector to access the files and resources that have been configured by your system administrator.

62 Nokia Secure Access System User’s Guide

The Private File Area

Accessing the Intranet

When you launch Nokia Secure Connector, your computer automatically provides access to your organization's intranet Web sites. Your system administrator might even specify an intranet Web site as the start page while you are signed on. When you sign off, your computer returns to its normal start page. The colors displayed on your desktop will be altered as specified by your system administrator when a Nokia Secure Connector client session is active.

Accessing Email

You can access your organization's email server when you sign in to Nokia Secure Connector.

Accessing Network Files

You can access your organization's network-based drive shares, which then are available from

My Computer or Windows Explorer, when you sign in to the Nokia Secure Connector.

The Private File Area

The private file area is a secure, encrypted file area that is stored locally on your computer. It is available if your system administrator configures it for access during your VPN session. When you sign in, you can access the private file area as a virtual disk drive. When you sign off, the private file area is inaccessible and secure.

To access files in the Private File Area

Double-click the My Computer icon on your desktop

Locate and double-click the drive named Removable Disk.

Manually Disabling the Private File Area

Under some circumstances when the Nokia Secure Connector is running, you might want to temporarily disable your private file area, but continue to work online.

Nokia Secure Access System User’s Guide 63

Nokia Secure Connector

To manually disable the private file area

1. Right-click the Nokia Secure Connector icon in the system tray.

2. Click Status.

3. Click the Private File Area tab.

4. Click Unmount.

Your private file area is disabled. To access the private file area, exit and restart the client.

End-Point Security Scanning

Your system administrator can configure Nokia Secure Connector to run a series of checks before you are granted access to network files or resources. This is done to ensure that you have the appropriate security software and application updates installed. These security scans also check for potentially harmful viruses or programs before connecting to the network.

These scans are run automatically, and need no action on your part. However, if a scan discovers that your computer needs an update or new software installed, an error message appears informing you of the type of corrective action to take. The error message also contains a link to a

Web page containing the necessary updates that, once installed, will allow you to successfully connect to the network.

Uninstalling and Reinstalling Nokia Secure Connector

If you have a previous version of Nokia Secure Connector installed on your computer, you can uninstall it or update it, if your system administrator instructs you to do so, by following the procedures in this section.

Note

Close other applications you have running, as the removal process requires you to reboot your system.

To uninstall Nokia Secure Connector

1. In Nokia Secure Access System, click the Home Page tab.

2. In the Web pane, click Secure Connector Installer Download.

The File Download window opens.

64 Nokia Secure Access System User’s Guide

Uninstalling and Reinstalling Nokia Secure Connector

3. Click open.

The Nokia Secure Connector Installer opens and automatically detects the previous version of Secure Connector on your computer.

4. Click Remove.

5. Restart your computer.