| Rev| Section|Location|Date|Contributor|
|—|—|—|—|—|—|
|1.0| All |Document Created|09/15/23|Cory Walton|
|2.0| All |Changed KB from DUO to Cisco Secure Client M365 SAML |12/05/23|Cory Walton|
Purpose:
Section titled “Purpose:”To tighten network security controls between the Adstra and Belardi Wong network, BW users will now be required to switch between BW VPN and Adstra VPN. Please provided the attached work instruction to end-users if needed to help them work through this process and use it as a reference.
Section titled “To tighten network security controls between the Adstra and Belardi Wong network, BW users will now be required to switch between BW VPN and Adstra VPN. Please provided the attached work instruction to end-users if needed to help them work through this process and use it as a reference.”Scope:
Section titled “Scope:”-
Service Delivery
-
Customer Satisfaction
Responsibility:
Section titled “Responsibility:”-
Service Delivery
-
vITM
Completion Criteria:
Section titled “Completion Criteria:”-
Manager approval or Onboarding form includes any of the following PBAs:
-
Cognos
-
BBj
-
BW user created in the correct OU in Adstra’s Active Directory
-
BW User is in the correct M365 Security Group
Records:
Section titled “Records:”- Halo Ticket
Requirements:
Section titled “Requirements:”-
Authorization from Client POC or Manager
-
No Adstra or Belardi Wong user account should be set to never expire!
-
Belardi Wong User is created in the following Adstra OU:
-
alc.com > Belardi Wong > Users
-
Adstra VPN
-
MFA
-
Member of “Adstra M365 Security (MFA/SSPR/CA Policies)” Group
-
MX Client VPN Dynamic URL: college-road-mknvgpbrht.dynamic-m.com
Steps:
Section titled “Steps:”- Ensure Belardi Wong user has an active directory account with “flast” format (eg jdoe) in both Belardi Wong and Adstra’s Active Directory
-
Belardi Wong User is created in the following Adstra OU: alc.com > Belardi Wong > Users
- In Adstra’s M365 Admin Center make sure the end-user is a member of the following Security Group:
- Adstra M365 Security (MFA/SSPR/CA Policies)
- Use Cisco Secure Client VPN (can download from Meraki Dashboard: ALC > Datacenter > SD/WAN > Client VPN)
- Connect to college-road-mknvgpbrht.dynamic-m.com
- You can modify user’s XML file to include both Belardi Wong VPN and Adstra