Mattel Global Information Technology Mattel Global Information Technology SSL VPN User Instruction Manual Page 1 3/9/2016 Mattel Global Information Technology Table of Contents Table of Contents ............................................................................................................ 2 Support Information ......................................................................................................... 3 Cisco SSL VPN ............................................................................................................... 3 Connecting to SSL VPN with a Mattel Laptop ................................................................. 4 Connecting to SSL VPN with a personally owned computer ........................................... 4 Instructions and Minimum Requirements for Using SSL VPN on a Personally Owned Computer ..................................................................................................... 4 Operating System Requirements ............................................................................. 4 Access to Mattel Resources – Computer Requirements .......................................... 5 Internet Explorer Settings to Review on Your Personal Computer ........................... 5 Connecting to Mattel ....................................................................................................... 8 Logging into the system ......................................................................................... 10 Navigating the User Interface – Cisco’s Portal ....................................................... 12 Navigation Portal .................................................................................................... 12 Toolbar ................................................................................................................... 12 File Shares ............................................................................................................. 12 VPN Connection – AnyConnect ............................................................................. 13 Navigation Portal .................................................................................................... 14 Log Out .................................................................................................................. 15 Troubleshooting & Frequently Asked Questions ........................................................... 16 Q. Active X component does not run or does not install. ....................................... 16 Q. Unable to reach any of these sites in my web browser. ................................... 16 Q. Why don’t I get the AnyConnect option? ........................................................... 17 Q. Do not know if your user name and password / locked out? ............................. 17 Q. Access to the Magic system through the portal does not work correctly. .......... 17 Q. Can I access external sites using the Portal or the AnyConnect Client? ........... 17 Using AnyConnect without the Browser ........................................................................ 19 Macintosh How-To ........................................................................................................ 22 Appendix ....................................................................................................................... 25 Accepted Antivirus Software: ................................................................................. 25 Accepted Personal Firewall .................................................................................... 26 Operating Systems:................................................................................................ 26 Page 2 3/9/2016 Mattel Global Information Technology Support Information After reviewing this document, if you have any additional questions, please contact the Global IT Support Center by email 7411@mattel.com or phone: US Toll Free (800) 438-4402 East Aurora x6330 El Segundo x7411 Middleton x4357 International Direct Dial (623) 476-3105. Cisco SSL VPN Cisco’s SSL VPN will allow you to connect to Mattel’s network through a secure connection. Users will have access to data, applications and resources and will be able to perform tasks remotely without the need of installing additional VPN client software. Before connecting, please reference the instructions applicable to your type of connectivity (on a Mattel laptop or on your personally owned computer). Page 3 3/9/2016 Mattel Global Information Technology Connecting to SSL VPN with a Mattel Laptop Your Mattel laptop has been configured to use Cisco SSL VPN. To begin using SSL VPN, please go to the ‘Connecting to Mattel’ section of this document. Connecting to SSL VPN with a personally owned computer Instructions and Minimum Requirements for Using SSL VPN on a Personally Owned Computer Operating System Requirements Windows XP Requirements: Service Pack 2 installed Internet Explorer 6.0 or 7.0 or Firefox Signed Active X Download Enabled Download ActiveX Controls set to prompt Windows Vista Internet Explorer 6.0 or 7.0 or Firefox Signed Active X Download Enabled Download ActiveX Controls set to prompt Note: Mattel supports Windows XP as a standard, the SSL VPN system supports Vista but in the event that there are problems support for Vista is limited at this time. MAC OS X is now supported Safari or Firefox browser Java version 1.4 or better Java must be installed prior to attempting to use the SSL VPN The required Java software can be obtained from www.java.com: http://java.sun.com/products/archive/j2se/1.4.2_13/index.html Page 4 3/9/2016 Mattel Global Information Technology Access to Mattel Resources – Computer Requirements Web Portal access Access is allowed from any computer AnyConnect access Access is allowed from Mattel laptops Access is allowed from Mattel employee owned personal computers providing they meet the requirements outlined below i. The computer must meet the minimum Operating systems requirements (See Appendix) ii. The computer must have installed antivirus software with virus definitions updated within the last 15 days. The list of supported antivirus software packages can be found in the Appendix iii. The computer must have an approved personal firewall enabled (See Appendix) Internet Explorer Settings to Review on Your Personal Computer Before attempting to logon, an addition needs to be made to Internet Explorer’s trusted sites list (if you are using Firefox as your browser this change is not required). From the Internet Explorer menu bar, click on ‘Tools’, then click ‘Internet Options’. This will open the browser’s ‘Internet Options’ window. Page 5 3/9/2016 Mattel Global Information Technology Once in this window, click the ‘Security’ tab and then click the ‘Trusted sites’ icon as shown in the screen capture. Then click ‘Sites’ so that the required setting addition can be made. Page 6 3/9/2016 Mattel Global Information Technology In the ‘Trusted sites’dialogue, make the addition of each SSL VPN site listed below and then click ‘Add’ and then ‘OK’ when complete. https://vpnphx.mattel.com https://vpnes.mattel.com https://vpnap.mattel.com https://vpneu.mattel.com Once these changes have been made, you will be ready to connect using Cisco SSLVPN. Please go to the next page. Page 7 3/9/2016 Mattel Global Information Technology Connecting to Mattel Make sure you are connected to your ISP (Internet Service Provider). In the address bar of your Internet browser, go to the following URL: http://www.mattelgateway.com Click on ‘Mattel VPN’ and then choose the ‘Phoenix’ or ‘El Segundo’ location. Page 8 3/9/2016 Mattel Global Information Technology The login screen will appear in the browser window with a username and password prompt. If you are a Windows XP user you may receive a ‘Warning – Security’ alert window and an ActiveX control warning as shown in the screenshot below: In this event, click ‘Always trust content from this publisher’ as well as ‘Run’ and ‘OK’ in each of the windows and you should be able to continue with the login process. Also click on the ActiveX control warning just below the address bar where it says ‘Click here to install…’ Page 9 3/9/2016 Mattel Global Information Technology Logging into the system Once the ActiveX or Java process is complete, the logon screen should now be available. At the login page, use your current Windows System or network login credentials and click Login. Note: This is the same username and password used on your work computer. The ‘CORP\’ is not needed prior to your username to login to the VPN system Example of the correct login credentials: Next read the warning shown and then click ‘Continue’ to complete the login process. Page 10 3/9/2016 Mattel Global Information Technology This completes the web portal login process. The next screen is the web portal. If all checks have passed appropriately, then a screen like the one below should appear with the ‘AnyConnect’ option available to the user. If there is no ‘AnyConnect’ option available once logged in, please refer to the troubleshooting section titled ‘Why don’t I see the AnyConnect’. Please Note: Once the AnyConnect client has been started, the portal window is no longer active and should be closed. Any resources that you may have been accessing via the portal will no longer be available once AnyConnect has been started. Page 11 3/9/2016 Mattel Global Information Technology Navigating the User Interface – Cisco’s Portal The Navigation Home Page will have different sections: Home – Easy access to links will be available here. The links provided here are links to internal Mattel web applications and sites Access to external sites is limited Web Applications – Web Applications will give you access to Mattel’s Intranet Sites without the need to VPN or a Client installed. a. Note: The Magic system does not work through the portal; to use that you will need to connect through AnyConnect and access the Magic system directly. Browse Networks – Access to Network Shares AnyConnect Client – VPN-like Connection, used for users requiring a full VPN Connection. (See instructions on next page for VPN Connectivity) Remote Desktop Servers – RDP Connections to servers Navigation Portal Toolbar Every time you click a web bookmark or Files you will open a new window. To go back, click on the “Menu Tool Bar” at the upper right side of the page. File Shares If you click Browse Networks, you will have access to your files and folders. You can use the following features: Download, Upload, Create New Folder and Delete. Note: If you open a document you must save it locally and then upload it back to your home directory. Or you can download it first and then upload it back again. Page 12 3/9/2016 Mattel Global Information Technology Note: The page back and forth arrow buttons should be used to navigate within the file shares window – not the Browser’s back and forth buttons. VPN Connection – AnyConnect Users that require a full VPN Connection will access the AnyConnect Client Row. Select ‘AnyConnect’ link on the left side of the window Click ‘Start AnyConnect’ Page 13 3/9/2016 Mattel Global Information Technology Navigation Portal If you are on a Mattel laptop, the AnyConnect client should be installed and will simply start giving you the access you require. If you are using your personal computer, the AnyConnect client will automatically install. You may need to approve the installation of this software depending on the security settings of your personal computer. If you are a Mattel laptop user and the AnyConnect client is not already installed, please contact the Mattel GIT Support Center so that they may assist you in installing the client on your laptop. You now can access any client applications. Your browser window does not need to stay open to the VPN portal once the AnyConnect client is launched. Page 14 3/9/2016 Mattel Global Information Technology Log Out Don’t forget to Log Out when you are done. Right click the ‘Cisco AnyConnect icon’ on your lower tool bar and select “Quit.” If you are using the Portal, logout with the ‘Logout’ link. Page 15 3/9/2016 Mattel Global Information Technology Troubleshooting & Frequently Asked Questions Q. Active X component does not run or does not install. A. Make sure you add the SSL site as a Trusted Site. Follow instructions below: Adding a security appliance to the list of trusted sites is required for Internet Explorer 6.0 or later on Windows Vista. We also recommend this procedure for others to eliminate certain security pop-up messages when you connect. Internet Explorer on Vista has "Protected Mode" enabled by default. Adding the security appliance to the trusted sites allows communications with the security appliance, even though "Protected Mode" is enabled. To add the security appliance to the list of trusted sites: 1. Choose Internet Options. To do so, use either of the following methods: o Choose Start > (Settings >) Control Panel > Internet Options. o Open Internet Explorer and choose Tools > Internet Options. 2. Click the Security tab. 3. Click the Trusted sites icon, and then click the Sites button below. 4. Add the following sites in Trusted Sites window. 1. 5. Click Add. 6. Click OK. 7. Click OK on the Security tab. Q. Unable to reach any of these sites in my web browser. http://www.mattelgateway.com A1. Make sure you are connected to the Internet by visiting another site such as http://www.google.com. A2. This connection only works from outside the Mattel network (e.g. on a home or other network). Page 16 3/9/2016 Mattel Global Information Technology Q. Why don’t I get the AnyConnect option? A. If when you log in you do not have the option for AnyConnect, then your computer is missing one of the requirements for the AnyConnect option. 1. The computer must meet the minimum Operating systems requirements (See Appendix). 2. The computer must have installed antivirus software with virus definitions updated within the last 15 days that is in the list of approved software packages (See Appendix). 3. The computer must have an approved personal firewall enabled (See Appendix). Please refer to the Appendix for supported software packages. Unfortunately, the SSL VPN system is not capable of informing you of where your system has failed (Operating System, AntiVirus or Personal Firewall). Q. Do not know if your user name and password / locked out? A. Contact the Global IT Support Center. Q. Access to the Magic system through the portal does not work correctly. A. Unfortunately at this time Magic does not work correctly using the portal. To access the Magic system you will need to connect via AnyConnect and then open it directly in your browser. Q. Can I access external sites using the Portal or the AnyConnect Client? A. Yes, since there are some Mattel Corporate sites that are outside of our corporate network you can access them through the Portal and through the AnyConnect client. When accessing sites such as this (an example would be eTime) through the portal the portal is required to authenticate your user credentials to the proxy server. A screen such as the example below will come up: Page 17 3/9/2016 Mattel Global Information Technology Input your network credentials including the ‘corp\’ before your username and the site should be accessible. To access external sites through the AnyConnect client, your Internet browser must be configured to use the proxy. Page 18 3/9/2016 Mattel Global Information Technology Using AnyConnect without the Browser You can access the AnyConnect client without browsing to the portal site if you know the VPN device name you want to connect to: Vpnphx.mattel.com (Phoenix) Vpnes.mattel.com (El Segundo) Vpnap.mattel.com (Asia Pacific) Vpneu.mattel.com (Amstelveen) Click the Start button, then click ‘AnyConnect VPN Client’ and that will start the client without having to use a browser. Page 19 3/9/2016 Mattel Global Information Technology This will bring up the client window where you can direct it to the device you want to connect with: Page 20 3/9/2016 Mattel Global Information Technology For example, to connect to vpnes.mattel.com you would type in ‘vpnes.mattel.com’ (without the quotes) and then click select. It will take a moment while the computer negotiates the VPN connection. If you get a messages stating ‘AnyConnect is not enabled on the VPN server’ using this method it is because you are missing one of the requirements defined in the appendix. Refer to the FAQ section titled ‘Why don’t I get the AnyConnect Option?’ Page 21 3/9/2016 Mattel Global Information Technology Macintosh How-To Mac systems are supported but sometimes require a bit of help when connecting to the SSL VPN system. The preferred Mac browser for SSL VPN is Safari. Once connected to the SSL VPN site of choice you may be presented with the following screens: This indicates that the Cisco applet needs to be associated with Java Web Start to run properly. To do this, click ‘Open with’ and then click ‘Choose.’ Then browse to Applications, Utilities, Java and choose ‘Java Web Start’ and then click ‘Open.’ Page 22 3/9/2016 Mattel Global Information Technology Once that is complete the next window should appear, click ‘OK’ and the connection progress should continue. Page 23 3/9/2016 Mattel Global Information Technology Next the ‘Swordfish app’ should start and it will likely prompt you to ‘trust’ it or not. Confirm that it should be trusted to allow it to continue. Once that is complete, you should see the login web page and be able to follow the same instructions for use as the Windows users. You should see a window like the one shown here to control the AnyConnect client. Page 24 3/9/2016 Mattel Global Information Technology To disconnect, right click on the AnyConnect icon in the upper right hand corner next to the system clock and click ‘Disconnect’ or simply click ‘Disconnect’ in the control window for the client. Appendix Accepted Antivirus Software: o Antivirus definitions must have been updated within the last 15 days o The versions listed are the minimum versions Avast! Antivirus home edition (Free) McAfee VirusScan Home ediction 7.x McAfee Internet Security 6.x McAfee VirusScan 8.x Norton AntiVirus 10.x Norton Internet Security 7.x Symantec AntiVirus 9.x TrendMicro Pc-Cillin Internet Security 15.x TrendMicro Internet Security 11.x TrendMicro Antivirus 11.x Zone Alarm Antivirus 6.x Zone Alarm Security Suite 5.x Zone alarm with Antivirus 5.x Page 25 3/9/2016 Mattel Global Information Technology Accepted Personal Firewall Norton Antivirus 14.x Norton 360 1.x Norton Internet Security 16.x Symantec Client Security 9.x - 10.x Microsoft Windows Firewall – Vista Microsoft Windows Firewall - Windows XP Service Pack 2 Microsoft Windows Firewall - Windows XP Service Pack 3 Trend Micro Internet Security 11.x Operating Systems: Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 & SP3 Microsoft Windows Vista Apple Mac OS X 10.4.x - 10.5.x Page 26 3/9/2016