|The Cisco VPN IPSec client is not approved for use in conjunction with the delivery of patient care.|
For access to clinical applications, UMHS users must use the Cisco AnyConnect SSL client. However, UMHS users who will not be working with clinical applications nor in the delivery of patient care can currently use the Cisco VPN IPSec Client offered by ITS to access some UMHS internal resources (some servers will not be accessible). Please note, though, that the UMHS-access profile currently offered will be decommissioned in the near future, so it may be best to use the Cisco AnyConnect SSL client regardless.
ITS provides the Cisco VPN IPSec Client to all University of Michigan students, faculty, staff, alumni, and retirees who have a valid UM uniqname and Kerberos password. The client provides an encrypted VPN for all network-computing needs. Using the Cisco VPN IPSec client, along with the appropriate UM VPN profile, provides a secure computing experience when accessing a University of Michigan network from a remote location or when using a wireless connection.
Software and installation instructions for a variety of computer platforms can be found on the ITS page at the following link:
Once the software is installed, a VPN connection can be established by launching the Cisco VPN IPSec Client, double-clicking the appropriate profile, and logging in using a UM uniquename and Kerberos password.
|Mac OS 10.6 Users!|
Although Mac OS 10.6 has a built-in VPN client for which ITS offers an installer, use of the UMHS-access profile requires the full Cisco VPN IPSec client to be installed. When selecting an installer from ITS, be sure to click the Download the Cisco VPN client and U-M VPN profiles for Mac OS 10.4 and above link.
By default, the Cisco VPN IPSec client installation includes three UMVPN profiles that point to the main campus VPN server for authentication. Because none of these profiles use the UMHS VPN server, accessibility to UMHS internal resources may be limited. For this reason, UMHS personnel are encouraged to use the UMHS-access profile when using the Cisco VPN IPSec client.
IP addresses are allocated by the main campus VPN server based on the role of the user as listed in MCommunity. Most individuals will use either the UMVPN - All Traffic profile or the UMVPN - Only U-M Traffic profile; both of these profiles are treated as an on-campus U-M network. However, alumni and retirees whose MCommunity roles do not also include faculty, staff, student, temporary staff or sponsored affiliate must use the UMVPN-Alumni-Retiree profile, which is treated as a non-UM network. The ITS Service Center (764-HELP) is available to assist anyone who believes their MCommunity role is incorrect.
For more information, see the answer to the What is the difference among the profiles? entry in the U-M Virtual Private Network (VPN) FAQ at the following link; Kerberos authentication may be necessary to view the FAQ:
|This integration is not intended for accessing clinical applications.|
No quality testing, data integration or other review is being done to assure integrity using this service. There should be no expectation of making clinical decisions based on the use of this service.
MCIT currently provides a UMHS profile for use with the Cisco VPN IPSec client. After installing the Cisco client, the UMHS-access profile can be imported to allow the Cisco client to establish a secure connection to the MCIT VPN server and provide access to some UMHS resources that are not available when using the profiles provided by ITS. Some servers may not be accessible, even when using the UMHS-access profile. The UMHS-access profile can be downloaded using the following link (save the file to the Desktop to make it easy to find):
After downloading the UMHS-access profile, use the following procedure to import the profile into the client:
- Launch the Cisco VPN Client software.
- Click the Import button at the top of the window.
- Navigate to the Desktop, select the UMHS-access.pcf file, and click the Open button.
- A window will appear indicating the file was successfully imported. Click the OK button.
- To set the UMHS-access profile as the default, right-click the profile (or go under the Connection Entries menu) and select Set as Default Connection Entry.
- The UMHS-access profile will be listed in bold in the list.
- A UMHS VPN connection can be established by double-clicking the UMHS-access profile and logging in using a UM uniquename and Kerberos password.