Students - Remotely access campus network


> Assigned lab PC for academic work

> Access software apps for academic work


Students : Catholic-STU (DUO Enabled VPN)

Overview

Catholic University provides the "Catholic-STU" virtual private network (VPN) to students to connect to our campus network.

The VPN extends the campus network to the off-site computer in its remote location. The VPN helps to protect the University's systems and services while allowing students to access them easily from outside campus.


The university also requires the use of Duo for multi-factor authentication (known as MFA or 2FA). MFA allows you to present two categories of credentials when authenticating to a service. Duo is a software tool provided by Duo Security, a cloud-based access security provider that enables us to support a second factor when authenticating to certain Cardinal Applications and to the WFH VPN connection. Duo provides 'something you have' and, when paired with your password 'something you know', we have greater assurance that the individual logging in is who they say they are. Please read about Using Duo to learn more about Duo, including how to enroll your devices.

This page explains how to

  1. Connect to the Catholic-WFH VPN.

  2. Use Remote Desktop to connect to a campus computer (normally your assigned office computer).

But first, a few important FAQs

Why do I need to use the VPN?

VPN ensures no one can observe the network traffic from your home to campus and multi-factor (using a product called DUO) secures your personal login. Taken in combination, these ensure only you can log in to the university services, even if someone else with nefarious intent may have stolen your password and that your communications can’t be listened to by third parties.

How to connect

Please read on for detailed instructions on how to connect.

Apple users: While the instructions in this article are for Microsoft Windows, Cisco AnyConnect and Microsoft Remote Desktop work similarly on Apple Mac. Please install the free Microsoft Remote Desktop app from the Mac App Store, and install Cisco AnyConnect as described below.

Prerequisites

Before you follow the numbered steps below for using the VPN and Remote Desktop, please make sure you have completed the necessary preliminary steps.

Screenshot of the Windows 10 "Security at a glance" window, showing that all settings are green-checked.

  • You have taken steps to keep your remote computer safe. Your off-site computer is up-to-date with security updates, has a firewall enabled and is running antivirus software that performs regular scans and is updated automatically.

Duo request screen from a mobile device showing prominent Approve and Deny buttons.

  • You have an enrolled Duo device. This document assumes you are using the free Duo Mobile app on your smartphone to respond to requests; this is the recommended method.

Enrolling into DUO

You are able to run the Microsoft Remote Desktop Connection app on your remote computer (search for it in your Start menu). It is built into Windows, but is also available as a Windows 10 app at the Microsoft Store if you need to install it on your remote computer.

  • Assigned Lab PC

  • You know the hostname (computer name) of the Lab PC to which you have been assigned. Please contact your department for this value.

1. On your remote computer, use Cisco AnyConnect to connect to the VPN

This extends the campus network to the computer in your off-site location, allowing you to access resources and services as if you were on campus. The VPN connection is required for you to be able to make a remote connection to your office computer or use campus network-only services such as Cardinal Financials. You first must have installed the AnyConnect software (see "Prerequisites" above).

Screenshot of the Cisco AnyConnect connection prompt showing "vpn.cua.edu" entered into the text box. There is a "Connect" button to the right of the text box.

  • Open the Cisco AnyConnect application on your computer.

    • Enter vpn.cua.edu in the text box.

    • Click Connect.

  • The AnyConnect logon screen appears.

    • In the Group pull-down menu, select Catholic-STU.

    • In the Username box, enter your Cardinal Credentials username.

    • In the Password box, enter your Cardinal Credentials password.

    • If are using the Duo Mobile smartphone app (recommended), in the Second Password box, enter push.

    • Click OK

**NOTE**

Second Password: push


(Alternatives)

    • Approve the Duo authentication request for the VPN connection on your enrolled device.


--------------------------


Windows 10 notification from Cisco AnyConnect stating it is Connected.

  • You receive a Windows notification from Cisco AnyConnect that you are connected.

2. Connect to your campus computer using Microsoft Remote Desktop

Working by remote access to your office computer is the best way to make sure University data remains stored in University systems and storage, not on your personal devices. It also allows you run special software installed on your office computer, and to access files that may be located only on the office computer hard drive. You must be connected to the university VPN before you can connect with Remote Desktop.

Screenshot of Remote Desktop Connection connection screen, with a blurred hostname.cua.edu entered into the Computer text box. There are Connect and Help buttons in the lower right of the window.

  • Open the Microsoft Remote Desktop Connection application on your computer.

  • In Remote Desktop window, enter the hostname or IP address of your office computer. When entering a hostname, include the ".cua.edu" suffix.

  • Click Connect.

Microsoft Remote Desktop logon screen showing text boxes for Username and Password. There are OK and Cancel buttons on the bottom edge of the window.

  • Enter your Cardinal Credentials username as cua\username.

  • Enter your Cardinal Credentials password.

  • Do NOT check "Remember me"—to best protect university data, type your credentials each time you connect.

  • Click OK.

"The identity of the remote computer cannot be verified" warning screen annotated with an arrow pointing to the location of the remote computer name. There are Yes and No buttons in the bottom right corner of the window.

  • Verify that the remote computer name matches that of your campus computer.

  • Click Yes to connect

Screenshot of a remote desktop session, showing the remote computer running Microsoft Excel and Cardinal Mail and Cardinal Faculty and Staff in Chrome tabs.

  • The Remote Desktop application connects to your campus computer and mirrors its screen so that you can use it as if you were on campus.

Screenshot of the Windows 10 Start Menu showing the navigation to the Sign out button when the Start menu is right-clicked.

  • When you are finished with your Remote Desktop session, right-click the Start menu on the campus computer and navigate to Sign out (fully end session) or Disconnect (suspend session).

  • The Remote Desktop window closes, and you can exit the application on your remote computer.

  • To finish, Disconnect the Cisco AnyConnect VPN on your remote computer.