Pia: VPN Setup
Overview
Allow the Chat User to create a VPN in the Active Directory Domain or Microsoft Azure Cloud environment
Platforms
The package supports the following platforms
- Cloud Hybrid
- Cloud Only
Requirements
The package has different requirements depending on which platforms are being supported.
Cloud Hybrid Orchestrator agents in a valid state on
- Primary Domain Controller
- Azure AD Connect Server
Cloud Only
- Microsoft Graph API Authorization and Delegation
Setup & Configuration
Global Config
- Primary Domain Controller
- Azure AD Connect Server
- Enable VPN Config
- VPN Setup
Process
The steps that the package takes during process execution are:
WuwwLa~ {.tabset}
Cloud Hybrid
Step 1 Pia will obtain the configuration details for the VPN from the client’s configuration.
Step 2 Pia will then validate the information is correct.
- If the information is incorrectly formatted or missing required information the package will stop execution.
Step 3 Pia obtains a list of users and sends a form prompting the engineer to select a user to setup the VPN for.
Step 4 Pia will attempt to obtain a list of workstations.
- If the user has no workstations, the engineer will be provided a list of all available workstations for that client to choose from.
Step 5 Pia will then validate the selected users VPN permissions and prompt the engineer to deny/allow access.
- If the engineer decides not to grant permissions the package will stop execution.
Step 6 Pia will then grant access to the user by adding them to the VPN security group.
Step 7 Pia will then prompt the engineer asking if they would like a VPN profile to be setup on the users machine.
- If engineer decides not to setup the VPN profile the package will stop execution.
Step 8 Pia then checks if the VPN Profile already exists on the clients workstation. If it exists, PIA will ask if the VPN Profile should be removed or redeployed.
- If the engineer decides not to redeploy the package execution will stop.
Step 9 Pia will create the VPN profile and create a desktop shortcut, on failure the package will output a failure message and stop.
Step 10 Pia will then prompt the engineer asking if they would like an e-mail to be sent to the user.
- If the engineer decides not to send the email package execution stops.
Step 11 Finally, Pia will send an e-mail to the user.
Cloud Only
Step 1 Pia will obtain the configuration details for the VPN from the client’s configuration.
Step 2 Pia will then validate the information is correct.
- If the information is incorrectly formatted or missing required information the package will stop execution.
Step 3 Pia obtains a list of users and sends a form prompting the engineer to select a user to setup the VPN for.
Step 4 Pia will attempt to obtain a list of workstations.
- If the user has no workstations, the engineer will be provided a list of all available workstations for that client to choose from.
Step 5 Pia will then validate the selected users VPN permissions and prompt the engineer to deny/allow access.
- If the engineer decides not to grant permissions the package will stop execution.
Step 6 Pia will then grant access to the user by adding them to the VPN security group.
Step 7 Pia will then prompt the engineer asking if they would like a VPN profile to be setup on the users machine.
- If engineer decides not to setup the VPN profile the package will stop execution.
Step 8 Pia then checks if the VPN Profile already exists on the clients workstation. If it exists, PIA will ask if the VPN Profile should be removed or redeployed.
- If the engineer decides not to redeploy the package execution will stop.
Step 9 Pia will create the VPN profile and create a desktop shortcut, on failure the package will output a failure message and stop.
Step 10 Pia will then prompt the engineer asking if they would like an e-mail to be sent to the user.
- If the engineer decides not to send the email package execution stops.
Step 11 Finally, Pia will send an e-mail to the user.