Virtual private network for employees

REVISION IN PROGRESS: This article contains useful information, but is being revised to reflect recent updates. Direct questions to TLT (tlt@winona.edu).

Winona State University Information Technology Services provides a secure virtual private network for employees working from off-campus locations. To maintain data security, access to some Winona State University online services requires a direct connection to our private campus network. Using our virtual private network (VPN), employees working remotely can emulate this direct, private connection and access these services as if they were on campus.

Is a VPN connection required?

When working remotely, a VPN connection is only required to access certain services with elevated restrictions, and then only for the duration of your transaction. Once that work is complete, you can disconnect from the VPN and continue working without it. Most Winona State University employees do not need a continuous VPN connection while working remotely. Here are some services that require a VPN connection for off-campus access. Contact the Technical Support Center (TechSupport@winona.edu, 507-457-5240, Somsen Hall 207) for a full list and if you have any questions.

• Department network drives (e.g., S drive)
• Printing to a WSU department printer
• Marketplace

Setting up VPN

Step One: Install an authenticator app

Connecting to our VPN requires multi-factor authentication. In order to establish a VPN connection, you will need to enter a one-time password (e.g., a random sequence of digits) You will need to use an authenticator app on your smartphone, tablet, or laptop to configure and use VPN. You will use these Winona State University Information Technology Services supports

Step Two: Add your VPN account to your authenticator app

NOTE: Please use Google Chrome to complete these steps. Mozilla Firefox is known to present errors during this process.

1. You must have access to an Authenticator app. This is typically a mobile phone app that can generate six-digit verification codes to allow multi-factor authentication.
2. Ensure your computer is connected to the Wazoo wireless network on campus

• If you are on a desktop computer your wired network connection should suffice

1. All employees must start by setting up their One-Time Password (OTP) at this link while on campus: https://otp.winona.edu
2. Once on that page, enter your StarID in the Username field
3. Enter your network password on the next screen
4. Click Add OAUTH Token
5. Click the radio button next to Online then click Add
6. On the next page, scan the QR code with the authenticator app of your choice

• You MUST click 'Done' after you scan your QR code!

• We recommend Microsoft Authenticator or Authy

Step 3: Test the VPN connection

For the next steps you must be connected to an off-campus (home) network or VPN will fail to connect.

If you would like to test your VPN connection while still on-campus, temporarily connect to the EduRoam Wi-Fi network with your StarID@minnstate.edu.

Connect to VPN-Cisco AnyConnect on Windows 10

• Open the Start Menu and type Cisco
• Select 'Cisco AnyConnect Secure Mobility Client' when it appears
  • If Cisco AnyConnect does not appear in your start menu, open your internet browser and go to https://ot.winona.edu

• Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect
• You will be prompted to login with your StarID, your six-digit authentication code, and your StarID password
• Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
  • The format is StarID-123456 for username. Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app

Connect to VPN- Cisco AnyConnect on macOS

• Click on Spotlight in the upper right corner of your Mac
• Type in "Cisco"
• Select "Cisco AnyConnect Secure Mobility Client" when it appears
  • If Cisco AnyConnect does not appear, open your internet browser and go to https://ot.winona.edu

• Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect

• You will be prompted to login with your StarID, your six-digit authentication code, and your StarID password
• Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
  • The format is StarID-123456 for username. Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app

How do I access my network storage off-campus?

You will first need to connect to your VPN client Cisco AnyConnect. Next follow steps below:

Windows 10

• Open your Start Menu and click the "Click to Map Network Drives" tile located at the top middle of the screen
• Re-open your Start Menu and click the "File Explorer" tile in the middle of the screen
• Your network storage drives will be located under the "Network locations" heading. You may have to scroll down to find it.

macOS

• In Finder, press and hold the <Command> key then tap the <K> key to bring up the "Connect to Server" prompt
• Connect to one of the network locations listed in Fig 2.
• Just copy/paste one of the addresses below if your list is not pre-populated
• Personal storage: smb://store.winona.edu/users/
• Department drive: smb://store.winona.edu/department/

Fig 2. Here is a sample of the server addresses you may need to connect to.

Related information

• Cisco AnyConnect Secure Mobility Client
• Local network storage
• VPN for Employees
• VPN for Students
• Installing VPN
• VPN