VPNS FAQ

The followings are questions relate to using CSUF VPNS:

1. What is VPNS?
2. Who can use VPNS?
3. Where can I get software to connect to campus using VPNS?
4. How do I install VPNS software?
5. What are the system requirements for running VPNS?
6. Is there a timeout value for the VPNS connection?
7. Using VPNS: How Do I Access My Outlook Mail From Home?
8. What user name and password do I use to connect to the VPN service?
9. Is the VPN service connection secure?
10. Which versions of VPN software are supported?
11. I have DSL/Cable modem access and a wireless network in my home.
    Will VPN work?
12. I have a LINKSYS router protecting my home DSL/Cable modem broadband connection. Will VPN work?
13. I wish to manually configure my VPN service connector. What information do I need?
14. What can I do after VPN/DigiTunnel is connected?
15. Where can I learn about terms related to VPNs?
16. Where can I get support for the VPNS software?
17. What information is collected from my system and who is it sent to?
18. If no information is sent from my system, how does VPNGuard know if my system complies with campus security requirements?
19. What Anti-Virus Vendors are supported?
20. Can I use a virus scanner other than McAffee or Norton?
21. How often is maintenance performed on the VPN servers?

1. What is VPN?
The CSUF VPN (Virtual Private Network) client consists of two components. The first component is the Microsoft VPN client, which is responsible for making the VPN connection. The second component is VPNGuard, which is responsible for ensuring that VPN clients connecting to the CSUF campus network meet campus security requirements.

You will need to use VPN to have access to your campus workstation hard drive and to access your email using MS Outlook.

NOTE: If you connect to the campus via Titan Internet access, you don't need to use the VPN service.

2.  Who can use VPNS?
All campus faculty and staff are eligible for signing up for VPNS.

3.  Where can I get software to connect to campus using VPNS?
In order to obtain the VPN software please request a copy by filling out the software request form located at: http://www.fullerton.edu/it/services/software/software_request.asp or email Titan Card directly at softwarerequest@fullerton.edu . Also, include the operating system that you are using Windows or Macintosh.

back to top

4.  How do I install VPNS software?
Click here for instructions on installing the Windows XP/2000/software
Click here for instructions on installing the Mac OSX software

5.   What are the system requirements for running VPNS?
Minimum requirements are Windows 2000 or XP with the latest security patches as well as McAfee or Norton Antivirus.  For more information, please see the Top 10 Rules for Home PC and Mac Use.

6.   Is there a timeout value for the VPNS connection?
Yes. The VPNS service has a four hour timeout window. This means that when the service has been connected four continuous hours it will automatically disconnect. To reconnect you will have to re-run the program and login again.

back to top

7.   Using VPNS How Do I Access My Outlook Mail From Home?
Once VPNS is setup please click here to be directed to instructions on setting up email from home.

8.   What user name and password do I use to connect to the VPN service?
Use your email user name and password.

9.   Is the VPN service connection secure?
Our VPN service typically include a number of security features including encryption, authentication, and tunneling. Therefore, the data you will transmit such as sensitive, including but not limited to passwords, credit card information, social security numbers or any confidential information while connected to the Internet is strictly secure.

10. Which versions of VPN software are supported?
CSUF IT VPN Client v1.0

back to top

11.   I have DSL/Cable modem access and a wireless network in my home.
Will VPN work?
Yes. However, we recommend you to try it from a non-wireless network when you initially set up the connection for the first time.

12. I have a LINKSYS router protecting my home DSL/Cable modem broadband connection. Will VPN work?
NOTE: This also apply to any other ROUTER brand or hardware, software firewall solution.

Make sure that you enable IPSec and PPTP in your hardware device or software configuration. Please, consult the manual of your firewall or router.

For example, the following settings must be enabled in your LINKSYS router for VPN to work.

back to top

13. I wish to manually configure my VPN service connector. What information do I need?
We highly recommend that you use our VPN package; however, if you wish to configure it manually, this is the information you need.

Server name: csufvpn.fullerton.edu
Name Server: 137.151.1.1 and 137.151.1.2

WINS Server: 137.151.199.223
Remote VPN server assigns IP to computer.

Make sure you use the server name above as it will maintain redundancy and load balancing features.

14. What can I do after VPN/DigiTunnel is connected?
Windows VPN:
Connect to your work computer and access files.
How to setup Microsoft Outlook 2003 to connect to an Exchange Server.
How to view your office Personal Folders in Microsoft Outlook 2003 from home.
How to enable Cached Exchange Mode in Outlook 2003.

Macintosh DigiTunnel:
Connect to your Mac hard drive and access your files.

back to top

15.   Where can I learn about terms related to VPNS?
For a list of commonly used VPN related terms and descriptions, please visit the Virtual Private Network Consortium's terms page. http://www.vpnc.org/terms.html

16.  Where can I get support for the VPNS software?
The Help Desk provides support for this application. You can contact them at helpdesk@fullerton.edu and/or at 714/278-7777.

17. What information is collected from my system and who is it sent?
VPNGuard scans your system to see if it meets campus security requirements. All of this is performed locally on your system. The only information that leaves your system is whether or not your system meets campus security requirements. For more information on this topic, please read question 2 and its answer.

18. If no information is sent from my system, how does VPNGuard know if my system complies with campus security requirements?
When you make a VPN connection to campus the following processes occur:

1. The Microsoft VPN client establish launches a pre-connect script which checks to make sure that VPNGuard is installed.
2. When you enter your username and password and click on connect, the Microsoft VPN client establishes a connection the one of the campus VPN servers, which places your connection in a quarantine status until VPNGuard reports that your system meets campus security requirements. It also launches a post-connection script.
3. The post-connection script downloads several VPNGuard configuration files from the campus that list the current campus security requirements.

• These files are located in c:\program files\opswat\vpnguard
• The filenames are
• AVConfiguration.xml
• BlackListConfiguration.xml
• ErrorMessages.xml
• FirewallConfiguration.xml
• IESecurityConfiguration.xml
• MainConfiguration.xml
• MustListConfiguration.xml
• WhiteListConfiguration.xml
• WPMConfiguration.xml

1. VPNGuard then downloads a small database from www.opswat.com that contains a current list of Microsoft operating systems, applications, and their patches.
2. VPNGuard then scans your system to see if your system meets campus security requirements.

• If your system meets campus security requirements, VPNGuard sends a packet that tells the VPN server to let your computer out of quarantine. This packet does not contain any information about your computer. In simple terms, it just states “let this computer out of quarantine.”
• If your system does NOT meet campus security requirements, VPNGuard does not send anything to the VPN server. It does notify you as to why your system does not meet campus security requirements. After the quarantine time expires, the VPN server drops the VPN connection

Note that no other information is sent from your computer.

19. What Anti-Virus Vendors are supported?
Campus security requirements require that your system be running an anti-virus package from either McAfee (recommended) or Norton.

20. Can I use a virus scanner other than McAfee or Norton?
No, you not be able to connect to the campus network unless you are running McAfee or Norton. McAfee is available free of charge to facutly and staff. Get it now by following this link.

21. How often is maintenance performed on VPN Servers?
A: Regular system maintenance is performed on the VPN servers Mondays and Tuesdays between 11:00 p.m. and 11:30 p.m. VPN services are available intermittently during these times.

For more information please contact Desktop Computing at 714-278-7777