Installing Ivanti VPN for State Software & Update Patch
Installing Ivanti VPN for State Software & Update Patch
These instructions explain how to install the Ivanti Commonwealth VPN for staff that work in D building and connect to the State through a secure VPN. Note: This is different than the Bristol VPN we install for staff to work from home.
To install the Ivanti VPN, grab the installation file from //srv-casper/Software/State VPN/tssrav3.exe. It is a quick and simple install. It will require your -wa account to install.
If you go to Control Panel and then Programs and Features after installing you can double check that Ivanti is in the Programs. The current version is 22.7.30227 and is the tssrav3.exe one you want to install.
In the search bar you can type in “Ivanti” and Ivanti Secure Access Client will show up. Click on it to open. If it does not open, look in the task tray for this key icon that is gray and right click it.
We want to Open Ivanti Secure Access Client so we can create the Commonwealth_VPN connection. In this screen capture I have already created it so that’s why we see it.
Opening the Ivanti Secure Access Client will open the application. In the example below I have already created the connection and entered the Server URL. For a new user, you will want to click on the + to add the connection.
Name the connection: Commonwealth_VPN
Server URL: https://mavpn.state.ma.us/azure/
Update Patch for Connectivity Issue
Once you have added the connection you will need to run an update patch to help with connectivity issues. On the user’s system, open Power Shell and run as Administrator. Log in with your -wa account.
You will want to run this line:
Add-DnsClientNrptRule -NameServers "172.16.110.11,172.16.110.20,8.8.8.8" -Namespace ".bcc.local"
Testing the Connection
Once you have install Ivanti and the update patch, you will want the user to connect and sign into the Ivanti. The user will click Proceed and sign in.
The user will need to have been set up by their supervisor first in order to gain access to this. The supervisor was Keith Toni, who will be retiring shortly. I will update this portion once Keith’s replacement is named. Often they aren’t properly set up in the system, and we need to have their supervisor reach out to the state to resolve that. It is not our responsibility to get this taken care of, nor could we as the state will only authorize a change through the supervisor. I would always reach out to Keith by email and he would always take care of it.