Off Campus Access
The web browser based Remote Working Portal is being retired, the AnyConnect client based service will continue as before and will provide the replacement service for these users.
It is currently planned that the Remote Working Portal will be retired on 18th April 2018. Until this date the service will continue to function as it does today. Users are recommended to switch to the AnyConnect client based service as soon as possible. Further details can be found in the answer above.
You will need to download and install the Cisco AnyConnect client. Visit http://www.lboro.ac.uk/services/it/student/vpn/vpn/ for instructions to install the AnyConnect client on Windows, Mac OS and iOS devices.
The new AnyConnect client can be installed on Android, Blackberry, and Google OS (including the ChromeBook) and Linux. Further information can be found on the on the Other Platforms tab: http://www.lboro.ac.uk/services/it/student/vpn/vpn/ Support for Android devices is available from the PC Clinic and service desk to enable connectivity to wireless/VPN.
Drop-in session 1
Date: Tuesday 20th March
Time: Between 10am -12noon
Location: Pilkington Library, PC Clinic area
Drop-in session 2
Date: Wednesday 21st March
Time: Between 1pm - 4pm
Location: Pilkington Library, PC Clinic area
Will the upgraded Cisco AnyConnect VPN client provide similar functionality as the Remote Working Portal?
The Cisco AnyConnect VPN Client provides full access to campus resources. It provides greater functionality than the remote working portal. There are a couple of reasons we are retiring the remote working portal; predominantly because of security issues, but also that the functionality it offered initially when launched has declined and is providing issues as new web technologies / sites / applications are launched.
If a laptop is locked down so that the user cannot install applications, they will have to contact their local (company) IT to aid in the installation. This is one of the reasons we have started communicating so early, so people have time to install / upgrade their clients.
Following the upgrade, any users that are still on version 3 of AnyConnect will be unable to connect the the VPN Service. For information on how to update to the latest version, please visit http://www.lboro.ac.uk/services/it/student/vpn/vpn/
For Windows PC, launch the AnyConnect client and click the information icon:
For Mac users, launch the AnyConnect client and from the top bar menu click on " Cisco AnyConnect Secure Mobility client" and select "About Cisco AnnyConnect" from the drop-down menu:
To upgrade to the new version of the AnyConnect client v4.6, your iPad will need to be running on iOS version 10. If you are unable to update to this iOS version, you can continue to access the legacy v4.0 AnyConnect client.
Where can I find help and assistance while off-campus?
You can contact IT.Services@lboro.ac.uk or telephone 01509 222333 for help and assistance - Monday to Friday 8:30am - 5:00pm
What IT systems can I access from home or off-campus location?
You can access many University systems from off campus, providing you have an active internet connection. You can access the Intranet, e-mail, Individual and Department's shared File Store using Web File Access. You can also use the Cisco AnyConnect VPN Client to access many University systems as you would if you were at your desk on campus. This client is installed on all IT Services Managed Windows Service laptop computers and is available as an optional application on other Windows Managed Service desktop computers. Users of other (not Managed) Windows computers, or Mac OS X, or Linux, or various mobile devices can install the Cisco AnyConnect VPN Client.
Can I access journals from off-campus?
Yes, if you use the Cisco AnnyConnect VPN Client. This client is installed on all Staff Desktop service laptop computers and is available as an optional application on other Staff Desktop desktop computers. Users of non-Staff Desktop Windows, or Mac OS X, or Linux, or various mobile devices can install the Cisco AnyConnect VPN Client.
Can I print while off-campus?
Yes, if you use the Cisco AnnyConnect VPN Client. This client is installed on all IT Services Managed Windows Service laptop computers and is available as an optional application on other IT Services Managed Windows Service desktop computers. Users of non-Staff Desktop Windows, or Mac OS X, or Linux, or various mobile devices can install the Cisco AnyConnect VPN Client.
Visit the printing webpages for information on off-campus printing.
How can I access my University email off-campus?
If you have a computer at home you can read your University e-mail if you subscribe to an Internet Service Provider. If your requirement is just to read e-mail while away from the University, you can use the web-based e-mail system available from anywhere.
To access your e-mail simply direct your browser to http://office365.lboro.ac.uk (Webmail).
If you have Microsoft Outlook installed on the computer, you can also access e-mail via the Outlook client.
What is the VPN and how can it help me use University IT systems off-campus?
We provide access to all IT Central Services, plus Remote Desktop and SSH (Secure Shell) access to all departments. If your department is running a local server, then we need to add that resource to our list. Please ask your local IT Support Staff to provide details through the Service Desk system.
To ensure that IT Services does not deliver large software updates to users via broadband solutions that are subject to "fair usage" policies, we patch essential Windows and Office vulnerabilities only. Other software will be updated on return to campus.
Due to the licensing agreements in place for licensed managed software we can only grant access following a request from the member of staff managing the license server. Please ask them to check the licensing conditions and then e-mail IT.Services@lboro.ac.uk with the IP address and port number.
If there are connection problems (e.g. you are at the edge of availability of a wireless network), then you may see a warning message in the task bar. The client should re-connect and you can continue working.
The MTU of the physical adapter is too small. An MTU of at least 1374 bytes is required for an IPv6 connection. Please contact your network administrator
Firstly to resolve the problem you will need to look at your Windows configuration for networking.
1. Go to the Start Menu > Select All Programs and Accessories > Right click on Command Prompt and choose Run as Administrator (you may be prompted for your PC account's password or the username and password of an administrator at this stage).
It is very important you follow this step for changes you may need to make later.
2. In the black window which opens type the following command:
netsh interface ipv4 show subinterfaces
3. Press Enter. You will get back information similar to the below screen shot.
4. If the active interface MTU column value is greater than 1374, contact the Service Desk and raise an incident with the following information:
- Version of Windows
- Connection method (wired, wireless, 3g
- Screen shot of the information (Alt + Print Screen Button)
5. To fix the problem (if the MTU value is less than 1374) Type the following into command prompt:
netsh interface ipv4 set subinterface "__NAME OF INTERFACE__" mtu=1458 store=persistent
Name of Interface can be found from the information asked for via command prompt earlier in step 3
6. Open AnyConnect again and log into the VPN. If it doesn't work then the user should raise a service desk case detailing the following:
- Version of Windows
- Connection method (wired, wireless, 3g)
- Screenshots of the outputs of the commands detailed in the above steps and the following command
ping www.lboro.ac.uk<http://www.lboro.ac.uk> -f -l 1430
When I open the Cisco AnyConnect client on my Mac I get a message saying it is not optimised for my Mac. What do I need to do?
In a recent update to mac OS High Sierra Apple started to warn when out of date applications are used. Cisco have released an update which means this error will no longer occur. The existing client will continue to function normally but we recommend that users update to the latest version available from our site as soon as possible to ensure you're running the latest version which will no longer produce this warning.
When I try to connect to the VPN using the client I get the message: "Unable to establish VPN" or "Could not connect to secure gateway". What's causing this?
We have seen issues when using various Internet Security or Antivirus programs. IT Services recommends that staff uninstall that software and install Symnatec, and students install Microsoft Security Essentials, both of which are the University's recommended antivirus and anti-malware packages. These are available free of charge to download for all staff and students of the University.
It is also necessary to disable any Internet Connection Sharing facilities that may be enabled as these can stop the VPN client from establishing a successful connection.
In Windows 7 and Vista: from Start select Control Panel and then enter adapter in the search box; under Network and Sharing Centre click View network connections; right-click Local Area Network and select Properties (you may be required to enter an Administrator password); select the Sharing tab and confirm that Allow other network users to connect through this computer's Internet connection is not selected.
When attempting to connect to the VPN service why do I get the error message "Failed to Initialise Connection Subsystem"? What can I do?
This may be because Internet Explorer is running in Offline mode. Please load Internet Explorer and check the Tools menu (or File menu in Internet Explorer version 6) to confirm that "Work Offline" is not enabled. Note: if you can't see the menu, press the Alt key. If turning off "Work Offline" does not fix the problem then please contact our Service Desk for further assistance.
IT Services provide limited support for accessing and using the VPN on Linux devices. Cisco make AnyConnect available for Linux, but the officially supported list of distributions is quite small. A number of users have found the OpenConnect (http://www.infradead.org/openconnect/index.html) client works well with our VPN infrastructure. When configuring it, the server name you should use is vpn.lboro.ac.uk. If you require assistance with accessing the VPN from your Linux device please contact the IT Service Desk.
I am using an anti-virus package which offers a secure traffic scanning feature and find that AnyConnect either does not connect or disconnects almost immediately after connecting?
The Cisco AnyConnect VPN client creates a secure network connection from your device to the University. If your traffic is passing through a device which uses techniques to intercept the encrypted connection and examine the data therein then this can either cause AnyConnect to fail to connect or to break its connection. IT Services recommends you either disable this feature or exclude traffic destined for the University's VPN service from the interception tool.
I use a secure web proxy on my device and find that AnyConnect either will not connect or frequently disconnects?
The Cisco AnyConnect VPN client creates a secure network connection from your device to the University. If you have configured your device to use a secure web proxy (also known as an HTTPS proxy) then this can cause AnyConnect to fail to connect or frequently disconnect because it is unable to to create a secure connection directly to the University. IT Services recommends you either disable this feature or exclude traffic destined for the University's VPN service from the interception tool.
To disconnect, right click the VPN icon in the System Tray and select Quit from the pop-up menu.
This will disconnect from the IT Services VPN cleanly and exit the application. Connecting again is as simple as starting the application as before.
[Note that if you click the icon, the client window will re-open with a "Disconnect" button. If you click this it does disconnect, but the application still exists in the System Tray, and you must still right-click and select "Quit" from the pop-up menu to close the application fully!]
Recently Cisco have released a new version of the Cisco AnyConnect client for Apple's iOS. The new version is currently titled Cisco AnyConnect (New) while the old version is called Cisco Legacy AnyConnect. The new version supports the modern VPN frameworks in recent versions of iOS and will become the only supported version later this year. While the old version will continue to work for now, we recommend users upgrade to the new version of the client as soon as possible to ensure they get the latest updates and features. We have updated the Mobile Configuration tool to support the new version of the client and recommend users use this to configure their device after installing the new client as the existing configuration cannot be migrated automatically.
All of your Internet traffic goes through the VPN to Loughborough. This ensures that you can access Internet based resources such as journals and databases which could otherwise be restricted to on-campus use only. As such, please disconnect from the VPN when you do not need it and remember that when connected to the VPN you are bound by the University's IT Acceptable Use Policies.
If you have any further questions regarding this please do not hesitate to contact the IT Services' Service Desk.
When connected to the VPN using the client from a public WiFi hotspot, is my internet traffic protected from being intercepted and viewed (sniffed) by others?
Yes, other wifi users will not be able to intercept and view (in an intelligible form) your traffic while you are connected to the VPN using the AnyConnect client, as your traffic is encrypted between your client and the VPN server at Loughborough University.
For security reasons, IT Services prevents sending of unauthenticated e-mails through the VPN. If your ISP supports secure authenticated sending on port 465 or 587, then change your e-mail setup to allow sending through the VPN. Information on how to do that should be on your ISP's help pages.
Otherwise, we recommend queueing your e-mail, until you disconnect the VPN, at which point your e-mails will be sent.