Networking

What a VPN is and how you might use it

VPN is a tool to make your computer think it is physically at UMSL.

VPN software is available for most systems, including smart phones. The VPN software can be downloaded and installed on your system.

Triton VPN with Multi Factor Authentication instructions

Windows Computer with MFA

Triton VPN instructions

Apple Computer

Apple Mobile Device 

Windows Computer

Step 1: Find the name of your Windows workstation:

• On your workstation, go to the Windows search bar, type "Computer Name", and hit Enter.

• Search for the computer name:

  • On Windows 10/11, choose "View your PC name" , and then look for "Full Device name"

  Make a note of the computer name, (this will be your computer name with .stl.umsl.edu or .umad.umsystem.edu at the end).

Step 2: Run or install your Microsoft Remote Desktop Client:

Windows computers already have the Remote Desktop Client installed; all you have to do is search for it. Macs, IOS devices (iPhones/iPads), and Android devices need the Microsoft RDP app installed.

Step 3: Configure Microsoft Remote Desktop Client to use the Remote Desktop Gateway

The Remote Desktop client must be configured to use rdp.umsl.edu as the Gateway hostname.

• Windows  includes a Remote Desktop client, which you can launch from the Start Menu

Install and configure Microsoft Remote Desktop app for

• Windows (Windows Store)
• Mac OS X
• iPad and IOS devices
• Android and Chromebook devices

Step 4: Connect to your computer

The computer name must be entered as computername.stl.umsl.edu.

Your username must include the domain name: ssoid@umsystem.edu

You must have the name of the machine you want to connect to.

You must install Microsoft Remote Desktop from the app store.

1. Launch the Microsoft Remote Desktop app

   

2. Click the Settings gear, and select Preferences...
   

3. From the Preferences window, click the Gateways tab
   

4. On the Gateways tab, click +
   

5. For Gateway name enter rdp.umsl.edu, click the drop-down arrows, and click Add User Account...
   
   

6. Enter User name as SSOID@umsystem.edu, with your SSO password. The Friendly name is optional. Click Add.
   
   

7. Click Add 
   

8. Close Preferences by clicking the red Close button.
   

9. Click Add PC
   

10. Enter the PC name, select the User account and Gateway you created, then click Add
    

11. Click the connection with the desired computer name
    

Follow any prompts you may receive.  If prompted to Verify Certificate, review the host name and click Trust then Continue.

Network Usage:

• All UMSL network traffic to and from the Internet must go through the firewall. Any network traffic going around the firewall must be accounted for and explicitly allowed by the Computer Security Incident Response Team (CSIRT).
• Computer Security Incidents and Abuses can be reported to the CSIRT at abuse@umsl.edu , or call the Technology Support Center at 314-516-6034.
• Applications which transmit sensitive information over the network in clear text, such as telnet and ftp, are prohibited and will be blocked. Exceptions must be accounted for and explicitly allowed by the CSIRT. Secure free replacements to telnet and ftp are SSH and SFTP.
• UMSL has enabled port locking which locks a specific PC to a specific network port. Moving a PC to another port, or plugging a new PC into an old PC's port will result in an automatic disabling of that port. The Technology Support Center will have to reset the port.
• Users may not go outside UMSL for network connectivity, such as signing up for a connection to an outside Internet Service Provider, without the consent of Information Technology Services (ITS).
• Activities that inhibit the ability of others to connect to or use the network are prohibited. This includes, but is not limited to: unauthorized file-sharing, initiating denial of service attacks, initiating viruses or worms, and network scanning.
• ITS will attempt to satisfy all requests for special network topologies that are needed for research or teaching. There may be costs associated with these accommodations.

Workstation Configuration and Network Administration:

• Only UMSL approved and updated Operating Systems will be allowed to access the UMSL network.
• Windows based Faculty and Staff systems must be joined to the UMSL Domain. Exceptions must be approved by ITS.
• Faculty and Staff Windows based systems must run the current campus anti-virus software.
• Faculty and Staff are responsible for the servers they manage and for keeping them in compliance with campus rules.
• Students may not provide accounts, disk storage, or web pages for other users.
• Users may not set up servers without first notifying ITS. This includes but is not limited to DHCP, DNS, WINS, FTP, Web, or Mail servers.
• By default, IP addresses are automatically assigned by Dynamic Host Configuration Protocol (DHCP). The use of a hard-coded or non-approved IP address is prohibited. IP addresses can change without notice unless arrangements are made with ITS to assign a static IP.
• A computer should not be connected to the network via wired connection and wireless connection at the same time.
• Network administration tools are not allowed without the consent of ITS. This includes, but is not limited to:
  • Network monitors
  • Sniffers
  • Vulnerability scanners
  • Port scanners
  • SNMP tools

Network Hardware:

• University computing equipment must not be tampered with in any way.
• Wiring may not be split, re-wired, or re-configured.
• Mini-hubs, routers, switches, bridges, wireless access points, wireless bridges, or other network hardware are not allowed.
• A PC with multiple network cards is not allowed to function as a network address translation gateway. For example, Windows Internet Connection Sharing is prohibited. No device other than an ITS device will be permitted to route or bridge packets.
• A PC with a wireless card may not be configured to act as a wireless access point.

Network Maintenance Window:

Sunday mornings (midnight thru noon), 1st and 3rd Wednesday of the month (4:00.am. thru 7:00.am.) and 2nd and 4th Friday of the month (5:30p.m. thru Sat 6:00.am.) are reserved for network maintenance. Every effort will be made to give prior notice. The network and or servers may be unavailable during this time so updates can be made. Access to the network may be suspended to preserve the integrity of the network.

Temporary Guest Accounts:

Non-UMSL users may be granted a temporary guest account with approval by ITS to help facilitate collaboration with researchers at other Universities and sites. These accounts will be allowed to VPN into UMSL. A faculty member must request the account, fill out a form, and be responsible for the account's usage.

Individual Responsibility for Security on the Student Network:

Users in UMSL student housing are expected to take reasonable steps to ensure that their computer systems do not create a security risk when connected to the network. This includes but is not be limited to the following steps:

• Users must register their computer on the student network using an SSO/ MyGateway username and password.
• Windows based systems must run a current and updated anti-virus software.
• Operating systems and software must be kept current with the latest patches and service packs offered by the vendors.
• Wired Windows and Macintosh student systems must have the NAC Persistent Agent installed.
• All accounts on student owned machines should have passwords.
• It is recommended that individual computers be protected by a personal firewall.
• It is recommended that users perform regular scans for malware using anti- spyware software.

University of Missouri-St. Louis Information Technology Network Usage Policy

The University of Missouri-St. Louis (UMSL) campus network provides access to the campus computing facilities. All users of the UMSL network must conform to the University of Missouri-St. Louis Acceptable Use Policy. Upon connecting a computer to the UMSL network, there are additional policies that must be followed. Violation of any of the following policies may result in immediate disconnection from the network.

For more information, visit ITS Security.