file include

8/11/2019 File Include

1/6

UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 1

UTC Aventail ver. 10.x client pre-installation Check List

In order to ensure successful Aventail installations, several items need to be examined before your perform Aventail 10 client installation.

Network Connectivity

This requirement is critical to check when you are in a office environment with a local firewall in your network. If you are running Aventail in a home office environment thatwithout a strict Firewall policy, this step may be skip ped and go straight to the PC

Readiness section below.

1. Your PC should be able to reach following UTC Aventail systems on TCP port 80and 443 directly without using a proxy . This normally should be verified if you arein an office environment. If a proxy server is normally defined in a user's InternetExplorer web browser (select menu Tools->Internet Options->Connections->LANSettings), it is important to note that such network connectivity must be establishedwithout using your local web proxy server. If any UTC web applications are requiredto your Aventail users, you may also consider to reconfigure your Aventail users' PC

browser, set up proxy bypass exception rule for *.utc.com resources or your requiredutc.com domain resources (or simply *.utc.com). This proxy exception rule on yourusers browser will ensure your users access UTC web applications through Aventailtunnel, not via your local proxy. Please note this proxy bypass exception rule isextremely important to allow your Aventail users to access their local resources,internet and UTC resources at the same time while in a Aventail session. All requiredUTC resources should be defined and processed through our UTC BPAR process.You may contact your UTC User Administrator for more details on ourBPAR(Business Partner Access Request) process.

UTC Aventail V10 DNS name IP Address Site Name Site Location

extranet-v10.utc.com 159.82.150.15UTC-

Americas1 Newington

mdextranet-v10.utc.com (DR only) 159.82.166.15UTC-

Americas2 Meridensgextranet-v10.utc.com 192.249.41.99 UTC- Asia Singaporeukextranet-v10.utc.com 192.249.36.99 UTC- Europe Maidstone

2. Your PC should resolve UTC Aventail DNS names

To verify your Firewall is allowing your PC directly communicate UTC Aventail serveris to issue a DOS Command telnet extranet -v10.utc.com 443. If a blank screen isdisplayed and receives no error message, it means your network is ready.

Tip: A simple way to verify whether your PC satisfy the above two requirements andwith a valid Aventail certificate is to use web browser to browse those web sites listedabove (e.g. https://extranet-v10.utc.com ). However, you must make sure your browser
http://myutc.utc.com/guestportal/server.pt?space=CommunityPage&control=SetCommunity&CommunityID=1968&PageID=0&cached=true&in_hi_userid=2http://myutc.utc.com/guestportal/server.pt?space=CommunityPage&control=SetCommunity&CommunityID=1968&PageID=0&cached=true&in_hi_userid=2http://myutc.utc.com/guestportal/server.pt?space=CommunityPage&control=SetCommunity&CommunityID=1968&PageID=0&cached=true&in_hi_userid=2https://extranet-v10.utc.com/https://extranet-v10.utc.com/https://extranet-v10.utc.com/https://extranet-v10.utc.com/http://myutc.utc.com/guestportal/server.pt?space=CommunityPage&control=SetCommunity&CommunityID=1968&PageID=0&cached=true&in_hi_userid=2


2/6



proxy server settings to be off while performing such connectivity verifications . Ifyour local office firewall policy is ready, you should be able to see followingauthentication prompt through your web browser directly with out usin g a web prox .

Note: Please do not try to install any Aventail on-demand components when prompted

here. Otherwise, this could result some installation problems later on. In stead, youshould just simply close the web browser after verifying your network connectivity withUTC Aventail systems.

PC Readiness

Local PC administrator right is required during Aventail program installation process Aventail 10.03 client or above supports Windows XP, Vista and Windows 7. For

Vista or Windows 7 users, both 32 and 64bit are supported. Local PC administratorright is required during Aventail program installation process.

Starting from Aventail 10.04.35 client or above, UTC has a universal WindowsAventail installation program. The universal installation program is applicable on all

Windows 32bit or 64 bit OS platform currently. It means user can run this universalinstallation client on XP, Vista and Windows 7, either 32 or 64 bit. To download theUniversal client, user can go to Megapath User Centerhttps://connect.megapath.net/utc or UTC Aventail support Wiki page downloadsection.

For the multi-language Windows PC international users, please refer to our specialinstruction document for installation instructions. Those users should follow our
https://connect.megapath.net/utchttps://connect.megapath.net/utchttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttp://wikitss.utc.com/display/BPRA/Install+Aventail+10+client+on+a+multi+language+Windows+PC+enviromenthttps://connect.megapath.net/utc


3/6



special instruction and choose special installation image to install UTC Aventail 10client on their non-English OS Windows PC.

Microsoft Remote Access Connection Manager service must be running or set toAutomatic. This service must be running to allow Aventail client to select VPNsystem to connect, otherwise, users cant not see any pre -configured UTC Aventail

VPN system configuration.

Microsoft Plug and Play service should be enabled and running during the installation process. But the Plug and Play service is not required to run Aventail program afterinstallation.


4/6



A valid Aventail SSL VPN client certificate must be stored in your MS Windowspersonal certificate store, which can be verified from your Windows InternetExplorer . In 5.x client, your Aventail client certificate can be stored in differentlocation but this has changed since 9.x Aventail release. To be able to authenticatethrough UTC Aventail servers, a valid Aventail client certificates must be stored in

user s personal certificate store. To verify this, you may launch your Internet Explorerweb browser, and then choose the menu Tools-Internet Options- The tab Contentand then the Certificate button under the Certificates section. A valid certificatemeans that your Aventail cert is not expired. If your certificate is obsolete, pleasedelete all invalid ones, and then go to Megapath Aventail User Centerhttps://connect.megapath.net/utc to download a new one. For further assistance,

please login your current Aventail VPN and browse our UTC Aventail Support portal for further information. You may also contact your UTC Business Unit Aventail UserAdministrator or refer to our Aventail Certificate Wiki Page . For instructions on howto remove an obsolete certificate, please visit our Aventail 10 installationtroubleshooting page. Do note that UTC Aventail Support portal can only be viewed

after you sign in UTC Aventail. The Megapath support and UTC User Administratorsshould be able to provide you the documents if you can t reach our Aventail supportWiki page.

To troubleshoot Aventail certificate authentication issue, please visit our certificateauthentication troubleshooting wiki page .

For Vista and Windows 7 user, UAC (user access control) should be disabled duringinstallation. See our Wiki page for instructions on how to disable UAC on a Vista orWindows 7 PC.

For Aventail 9.01 client users, the Aventail 9.01 client must be uninstalled beforeinstalling Aventail 10 client. However, this doesnt apply to Aventail 5.3. BothAventail 5.3x client version and Ver 10 version can coexist. As a result, the ver 5.3x

client users can have both 5.3x and ver 10 client on their PC for a period of time. Ifyou run into some problems in the version 10 client, you may simply go back to yourold 5.3 client without performing any changes on your PC. In fact, most of our UTCAventail users are currently running version 5.3. Therefore, removing exitingAventail client should only apply to small number of users.

To validate you Aventail version, one simple way is that Ver.5 client has a dark greenIcon on users desktop; the version 9 clients has a blue Aventail connection iconinstead. Of course, you may verify by launching your Aventail client. Then right clickthe Aventail icon from your system tray and select the About button to find outyour Aventail client version. For 9.01 client, your should select the properties iconduring the authentication prompt and then select the about tab to validate your

Aventail client version
https://connect.megapath.net/utchttps://connect.megapath.net/utchttp://wikitss.utc.com/display/BPRA/Homehttp://wikitss.utc.com/display/BPRA/Homehttp://wikitss.utc.com/display/BPRA/Homehttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/Enrollmenthttp://wikitss.utc.com/display/BPRA/Enrollmenthttp://wikitss.utc.com/display/BPRA/Enrollmenthttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+client+certificate+authentication+tipshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Troubleshooting+Aventail+10+Installation+issueshttp://wikitss.utc.com/display/BPRA/Enrollmenthttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/UA+Directoryhttp://wikitss.utc.com/display/BPRA/Homehttps://connect.megapath.net/utc


5/6


6/6



To start your Aventail connection, you may either launch the UTC Remote AccessSelector program or double click the preferred UTC Aventail SSL VPN adaptor

file include

Documents