Pia: Troubleshoot Windows VPN Configuration

Overview

The package will allow the Chat User to check various issues that may impact the VPN connecting successfully, such as:

• Account locked & expired
• Wrong security group
• VPN server address

Platforms

The package supports the following platforms

• All

Requirements

Orchestrator agents in a valid state on

• Primary Domain Controller
• Target Workstation

Setup & Configuration

Opt-In

• This package requires to be manually opted into

Global Config

• Primary Domain Controller

Package Config

• VPN Server
• VPN Domain
• VPN Type
• VPN Certificate Password
• VPN Certificate download link
• VPN Pre-Shared Key
• Authentication Method
• VPN Encryption Level
• OpenVPN Config

Process

The steps that the package takes during process execution are:

1. Pia will obtain a list of users and sends a form prompting the engineer to select a user to troubleshoot issues for.
2. Pia will then obtain a list of machines for the user and send a form prompting the engineer to select a users workstation
   • If none exist pia will return a list of all available workstations for the client.
3. Pia will check the user configuration for the following:
   • Account Lock Out
   • Password Expiry
   • Account Disabled
   • VPN Group
4. Pia will then validate that the VPN client and VPN profile exist on the workstation
5. Depending on the results of steps 4 and 5 Pia will perform one of the following activities:
   • Fix Account Lock Out
   • Fix Password Expiry
   • Fix Account Disabled
   • Fix VPN Group access
   • Fix Incorrect Server Address
   • Fix Incorrect Connection Profile
   • Fix VPN Client not installed
6. Pia will then re-validate itself after a fix has been applied and check the user configuration for the following:
   • Account Lock Out
   • Password Expiry
   • Account Disabled
   • VPN Group
7. Finally, Pia will then return the diagnostic result to the engineer.