FTPS is FTP using SSL for added security. SSL helps to ensure that you are connecting to Oxy’s servers and will ensure that all data transmitted between your device and Oxy’s servers are encrypted in transit end-to-end. FTPS is not the same as SFTP so be aware that whatever program you choose to use must specifically advertise FTPS support. SFTP will not work.   Steps: Determine if the resource you want is available over FTPS. Currently, Oxy maintains the following servers: acadshared.oxy.edu – file shares used between faculty and students. This is known as the S: drive. accounts.oxy.edu – personal file shares for employees and faculty. This is known as the G: drive. depts.oxy.edu – departmental file shared for employees and faculty. This is known as the H:/I: drive. sites.oxy.edu – miscellaneous websites that are not in Drupal or Moodle. stuaccounts.oxy.edu – personal file shares for students. This is also known as the G: drive, as well as the Desktop and My Documents folder students access while using lab workstations. You will need to obtain a file transfer application that supports the FTPS protocol. A few common, no-cost options are listed below. For those interested in additional options, Wikipedia provides a fairly comprehensive list of FTPS program that you can use. FileZilla (Recommended) Cyberduck Example FileZilla (macOS) login FireFTP Example WinSCP (Windows) login You will then need to configure your application to connect to the site. Generally, most applications will require that you do this at least once per site but will also allow you to save the configuration to simplify connecting in the future. You will need to consult the documentation for your application for specific details but these are the settings that you will generally need to input: Server or Host: choose from the options in Step 1, e.g. accounts.oxy.edu Protocol: This can be tricky but will generally use wording along the lines of “FTP with implicit encryption” Port: 990 Username: Your Oxynet username. No prefix (e.g. “oxynet\”) or postfix (e.g. “@oxy.edu”) is required. Password: Your Oxynet password.

Click the Finder icon in the dock.                 Click the Go menu and select Connect to Server or press Command K on your keyboard.               In the Server Address field, type the address for the drive that you’d like to map. G: drive (Employees) is smb://files.oxynet.oxy.edu/accounts/your_Oxy_username (replace your_Oxy_username with your username). S: drive (Students & Faculty - Academic shared drive) smb://files.oxynet.oxy.edu/acadshared H and I drives (Employees Only)  are smb://files.oxynet.oxy.edu/depts  The Shared directory on I drive is smb://files.oxynet.oxy.edu/depts/shared           Click on the  + symbol to the right of the address that you’ve entered to save it as a favorite. Click on the Connect button and enter your Oxy username and password if prompted. A Finder window will open, connect to the network drive, and allow you to navigate to the folder you are interested in.

We have implemented Single Sign-On (SSO) for our Fortinet VPN Firewall. This enhancement will greatly simplify the authentication process for accessing our VPN services. To utilize the new SSO functionality, please follow these steps: In the Fortinet VPN Client At the log in screen, click on the hamburger (three line) icon to the right to edit your VPN connection settings. Give the connection a new name such as Oxy VPN SSO The port should default to 443 Enable the "Single Sign-On (SSO) for VPN Tunnel" option Save your changes. To initiate the login process, click on the SAML Login button.   We believe that this SSO implementation will enhance user experience and improve the overall security of our VPN services. If you encounter any issues or have questions, please reach out to the helpdesk@oxy.edu

Setting up the Windows Fortinet VPN client (FortiClient) About: Connect your Windows PC to the Occidental College network from anywhere in the world (or across town) via the Oxy VPN (Virtual Private Network).  This article walks you through the installation of the FortiClient, the VPN client for use at Oxy.  Note: If at all possible, set up FortiClient prior to a large trip where you will absolutely need to connect to the Oxy network, so you can test it from home.  Steps: Permission to use VPN: By default, Oxy employees have VPN access. Students may access it upon request by emailing the helpdesk@oxy.edu Installation: Download the FortiClient software onto the device(s) that you will need access: Open https://forticlient.com/downloads/ in a web browser Select the appropriate “Windows” download in the “FortiClient VPN” section. Most newer systems will be “Download for Windows 64” If the Wizard does not run automatically, locate and run the FortiClient Setup Wizard which you downloaded. Please determine whether you want VPN only or VPN and Antivirus to be installed: If you are installing this on an Oxy machine or if you already have an antivirus that you are happy with, select “VPN Only”. If you are installing on a personal (non-Oxy) machine, and you want to use Fortinet’s antivirus product, install “Complete”. Follow the installation instructions.  It may require you to restart your system before finishing the installation. Wait for the installation to complete.  When it is finished, it will open the FortiClient. Setup and Connection: Open FortiClient by double-clicking on the FortiClient shield icon in the right side of the system tray, if it’s not already open Select the “Remote Access” sidebar menu item, if it is not already selected Click on “Configure VPN” Make sure “SSL VPN” tab is selected at the top (it should be the default) Enter these values in the New VPN Connection form Connection Name: Oxy VPN Description: may be left blank Remote Gateway: vpn.oxy.edu Authentication: Click customize port and enter "443" Authentication: Click "Enable Single Sign On (SSO) for VPN Tunnel" Click Save, then click Close. Click "SAML Login" then enter, you will be asked to enter your full oxy email address. To disconnect, right click on the Fortinet icon in the system tray at bottom right of your screen, and select “Disconnect”. To make subsequent connections: Right click the FortiClient icon Select Connect to “Oxy VPN“ Enter your \\oxynet.oxy.edu username and Password and press connect Mount Shared Network Drives After VPN connection After you have connected to the VPN service, you will need to manually load the G:, H: drives as they would not be mounted when you turn your PC on off campus. To do this please follow these steps. Additional walk-through guide on Mounting OXY network Drives manually. Windows 10 Right-click Start Select Run Type \\oxynet\netlogon\sayhola press “Ok” and your network drives are now loaded/mounted

About: Connect your iPhone, iPad or iPod Touch to the Occidental College VPN (Virtual Private Network) in order to connect to the Oxy network from anywhere in the world (or across town). Note: If at all possible, Set up the Fortinet VPN prior to a large trip where you will absolutely need to connect to the Oxy network, so you can test it from home.  There are separate instructions for Windows, Mac and Linux. Steps: Permission to use VPN: By default, Oxy employees have VPN access. Students may access it upon request by emailing the helpdesk@oxy.edu Installation: Install the FortiClient VPN software In the App Store, search for “FortiClient VPN” Install the FortiClient VPN app Setup: Open the FortiClient VPN app The first time that you use the FortiClient VPN app, you will be asked whether you would like to add VPN configurations. Select “Allow” Enter your device passcode Next to "Connections", click "Select Connection Select “Add Configuration…” In the Add/Edit VPN screen, complete these configuration settings:  Name: Oxy VPN Host: vpn.oxy.edu Port: 443 Toggle SSO on Press “Save” at the top left  You should now have “Oxy VPN” in the User VPN Gateway section.  Press Done. Connection: To connect to the Oxy VPN, open the FortiClient VPN app Make sure Connections is set to “Oxy VPN” Turn VPN on by selecting the slider. This will redirect you to the Microsoft single sign on page Sign in with your Oxy email and password The status should change from Disconnected to Connected, and information about your connection should now be visible. Now you can access items on the Oxy network as if you were on campus. Note that there is a VPN icon to the right of your network icon.  This reminds you that you are connected, no matter which app you are using.

Overview Fortinet provides a Linux VPN client. If you are using Linux as your desktop/laptop operating system from off campus, but need access to resources provided via the Oxy VPN, then follow these instructions. Download the FortiClient VPN installer Go to the Fortinet download page. Select the “Forticlient” tab at the top of the page, then scroll to the bottom section, with the heading “FortiClient VPN” Depending on the Linux distribution that you are using, download either the .rpm or .deb file. Select the .deb file if you are using a Debian distribution (ie. Ubuntu, Raspberry Pi OS, Linux Mint, etc.). Select the .rpm if you are using a distribution that derives from RedHat (RedHat, Fedora, CentOS, Oracle Linux, and openSuSE). Install (example on Ubuntu, Raspberry Pi OS, Linux Mint, etc.) Find the installer file that you downloaded. In this case on Ubuntu 20, the file will be in your ~/Downloads folder. Using Terminal, run the installer and specify the file that you just downloaded. In this example, the file is forticlient_vpn_7.0.0.0018_amd64.deb sudo apt install ~/Downloads/forticlient_vpn_7.0.0.0018_amd64.deb After authenticating using your user password to allow you to run the installer as root (sudo), the installer will probably ask you to install additional packages. Agree to that and wait for the installer to finish. Building dependency tree Reading state information... Done Note, selecting 'forticlient' instead of '/home/ddell/Downloads/forticlient_vpn_7.0.0.0018_amd64.deb' The following additional packages will be installed: gconf-service gconf-service-backend gconf2-common libappindicator1 libdbusmenu-gtk4 libgconf-2-4 Suggested packages: indicator-application The following NEW packages will be installed: forticlient gconf-service gconf-service-backend gconf2-common libappindicator1 libdbusmenu-gtk4 libgconf-2-4 0 upgraded, 7 newly installed, 0 to remove and 48 not upgraded. Need to get 909 kB/67.4 MB of archives. After this operation, 299 MB of additional disk space will be used. Do you want to continue? [Y/n] y Install (example on RedHat/CentOS/Oracle Linux, etc.) Click on the .rpm installer. Install the RPM file using yum. In this example, the file is forticlient_vpn_7.0.0.0018_x86_64.rpm sudo yum install "~/Downloads/forticlient_vpn_7.0.0.0018_x86_64.rpm" You will be asked to authenticate for sudo, and then confirm installation, with possible dependencies to be installed as well. Configure FortiClient VPN (first time) Start the FortiClient VPN application using the GUI. Acknowledge and accept that the software does not have support. Click on “Configure VPN” and fill out the New VPN Connection page: VPN: Select SSL-VPN tab (it should be selected) Connection name: Oxy VPN Description:  you can leave this field blank Remote Gateway: vpn.oxy.edu Customize port: leave checkbox unchecked (and just leave 443 as the value) Client Certificate: None Authentication: Your choice of these two: Select “Prompt on login” if you want to enter your Oxy username each time you login.  Select “Save login” and enter your Oxy username so you don’t have to enter it each login Press the “Save” button. Connect Start the FortiClient VPN application using the GUI. Enter your Username and Password. The username is your Oxy username, so the same as your email address, minus the “@oxy.edu” You should see a “Connected” message.  Once connected, you can close the FortiClient VPN application. Now you can use the network.

The Virtual Computer Lab is accessible to all Faculty and Students remotely using Parallels Remote Access Server and will include access to software such as: SPSS Mathematica Matlab ArcGIS Stata To use this system install the Parallels Client: 1. Open the App Store 2. Search for and download "Parallels Client". You may need to enter your Apple ID information, and authorize with your computer password or fingerprint. 3. Open once complete. 4. Click "Create Connection". 5. Type in "2xa.oxynet.oxy.edu" and then click "Next". 6. Enter a friendly name, like "Oxy", to denote what the remote desktop is used for. Then, click "OK". 7. Enter your username (not email) and password when prompted. You can save your password if you like. Then, click "Log In". 8. Click "Confirm". 9. Press "Open". 10. Click "Done". 11. You should now see your available virtual machines. To connect, double-click on one. 12. Click "Continue" 13. The remote desktop should now launch. Students will have access to the documents and files they have previously stored on the Virtual Computer Lab. Files can be transferred between the local and Virtual Computers. Documents can also be printed to locally attached printers.

FTPS is FTP using SSL for added security. SSL helps to ensure that you are connecting to Oxy’s servers and will ensure that all data transmitted between your device and Oxy’s servers are encrypted in transit end-to-end. FTPS is not the same as SFTP so be aware that whatever program you choose to use must specifically advertise FTPS support. SFTP will not work. Steps: Determine if the resource you want is available over FTPS. Currently, Oxy maintains the following servers: acadshared.oxy.edu – file shares used between faculty and students. This is known as the S: drive. accounts.oxy.edu – personal file shares for employees and faculty. This is known as the G: drive. depts.oxy.edu – departmental file shared for employees and faculty. This is known as the H:/I: drive. sites.oxy.edu – miscellaneous websites that are not in Drupal or Moodle. stuaccounts.oxy.edu – personal file shares for students. This is also known as the G: drive, as well as the Desktop and My Documents folder students access while using lab workstations. You will need to obtain a file transfer application that supports the FTPS protocol. A few common, no-cost options are listed below. For those interested in additional options, Wikipedia provides a fairly comprehensive list of FTPS program that you can use. FileZilla (Recommended) Cyberduck Example FileZilla (macOS) login FireFTP Example WinSCP (Windows) login You will then need to configure your application to connect to the site. Generally, most applications will require that you do this at least once per site but will also allow you to save the configuration to simplify connecting in the future. You will need to consult the documentation for your application for specific details but these are the settings that you will generally need to input: Server or Host: choose from the options in Step 1, e.g. accounts.oxy.edu Protocol: This can be tricky but will generally use wording along the lines of “FTP with implicit encryption” Port: 990 Username: Your Oxynet username. No prefix (e.g. “oxynet\”) or postfix (e.g. “@oxy.edu”) is required. Password: Your Oxynet password.

install the application from URL https://chrome.google.com/webstore/detail/parallels-client/nfkkcalpbgmfhnendooplbkmpfplmhga/ configure settings: Server: 2xa.oxynet.oxy.edu Alias: Oxy Enter in your oxy username and password. click save

Setting up the macOS Fortinet VPN client (FortiClient) About: Connect your macOS computer to the Occidental College VPN (Virtual Private Network) in order to connect to the Oxy network from anywhere in the world (or across town). Note: If at all possible, Set up the Fortinet VPN prior to a large trip where you will absolutely need to connect to the Oxy network, so you can test it from home.  There are separate instructions for Windows, Linux, and iOS Note: Fortinet does not support very old macOS systems. As of September 2022, the FortiClient supports these versions of macOS: macOS Ventura (version 13) macOS Monterey (version 12) macOS Big Sur (version 11) Steps: Permission to use VPN: By default, Oxy employee accounts have VPN access and students can access it by request by contacting helpdesk@oxy.edu. Installation: Download the FortiClient software: Open up a web browser and go to https://www.fortinet.com/support/product-downloads Click the “FortiClient” tab at the top of the page, then scroll to the “FortiClient VPN” section at the bottom of the page. Select the “Download” button under macOS to download the Mac installer Locate and open the installer that you just downloaded (usually in your Downloads folder) Accept the license agreement and continue Complete the installation by pressing Install and then press Close Setup and Connection: Open FortiClient by clicking on the FortiClient application in your Applications folder Click the “Configure VPN” link In the New VPN Connection window, select/enter the following: Select the tab: SSL-VPN (it was probably already selected) Enter connection name: Oxy VPN Description: You may leave this blank Enter the Remote Gateway: vpn.oxy.edu Customize Port: Click the check box and enter 443 Authentication: Click the check box for "Enable Single Sign On (SSO) for VPN Tunnel" Save by pressing "Save" To initiate the login process, click on the SAML Login button Close the FortiClient VPN window After installation and setup, a FortiClient icon will be added to your menubar.  When you are disconnected from the VPN, the menubar icon will be a small shield with a grid of white squares. To connect, click on the FortiClient icon in the menubar, and select “Connect to Oxy VPN”. The menubar icon will change to a lock. Note, the first time you login, you will be asked for your Oxy username and password To disconnect, click on the FortiClient icon in the menubar, and select “Disconnect Oxy VPN” Removing FortiClient Whether you are through with the need to have VPN, or if you want to remove the FortiClient as part of a re-installation of FortiClient, please follow these steps. Note: Fortinet only provides the latest version of FortiClient, and even if you keep old installers, they don’t have the software inside of them – the installers download a new copy of FortiClient each time. This is important if you are removing FortiClient and installing again, but your system is too old to run the latest version of FortiClient. Open your Applications folder on you macOS system. Double click on FortiClientUninstaller Follow the instructions to uninstall FortiClient