VPN

Windows Installation

Windows Installation and Usage via Client

To connect to the Weizmann internal network using the full VPN client, follow these steps:

1. Download the VPN client installation file and run it.
2. In the installation wizard, choose Endpoint Security VPN.

3. In the destination folder window, proceed with the defaults and click Install.
4. When prompted to restart your computer, save all open documents and click Yes to restart.
5. Following the restart, double-click the yellow lock icon in the taskbar.

6. In the window that appears, click Yes to configure a new site, then click Next.

7. Enter svpn.weizmann.ac.il in the Server address or Name field, then click Next.

8. When requested to choose an authentication method, select SecurID, then click Next.

9. Select Use Pinpad card when requested to select the SecurID authentication device, then click Next.

10. Click Finish to complete the installation.
11. When presented with the Would you like to connect dialog, click Yes.
12. Enter your Weizmann user ID in Username field, and the 8-digit token in the Tokencode field (to acquire the correct 8-digit token code, be sure to insert your PIN code in the Weizmann Authentication field in the RSA app).

13. Click Connect. The green lock icon in the taskbar will show a green dot on successful connection.

Windows Installation and Usage via Chrome

When accessing the Check Point VPN software for the very first time via Chrome, you are required to perform the following:

1. Install/update Java software version 8 (see additional information further down this page).
2. Access svpn.weizmann.ac.il in Chrome.
3. Select Standard Sign In and enter your Institute user ID and password (from the RSA app).

4. Allow pop-up windows in the page that opens.

5. In the window that appears, click the link highlighted below to download the Check Point Mobile agent .msi update installation file, then run it.

6. Wait for installation to complete, then click Yes, Trust server and Yes in the three consecutive confirmation dialogs that appear, respectively.

7. On successful connection, the status indicated in the pop-up window will change to Connected.

Mac Installation

Mac Installation via the Self-service Application

The easiest way to install the Check Point VPN is via the Weizmann Self-service application. To do so:

1. Launch the Self-service application and log in.
2. Perform a search for VPN in the search field.
3. Click the Install button.
4. Once installation has completed, launch the VPN app and proceed as instructed, starting at step 7 in the client installation instructions provided below.

Mac Installation via Client

Installation is supported on Mac computers running macOS 10.15 or higher. To check the operating system version installed on your computer, click About This Mac on the Apple menu, and review the version information presented in the window that appears.

To install the Check Point VPN software on a supported Mac computer:

1. Download Endpoint Security VPN.
2. Double-click the relevant (.dmg) installer file in your Downloads folder to open it, then double-click Endpoint_Security_VPN.pkg in the window that appears.

3. Click Continue to initiate installation.

4. Important: disable the Firewall option in the installer.

5. Enter your computer user password to authorize the installation.

6. On installation completion, click Close.

7. The VPN software icon will now appear on the menu bar.

8. Click the icon and click Connect.

9. To authorize creation of a new site, click Yes.

10. To continue installation, click Next.

11. Enter svpn.weizmann.ac.il in the Server address or Name field, enable the check box next to​ the Display name field, and enter Weizmann VPN in this field. Click Next.

12. When presented with a security certificate warning, click Trust and Continue.

13. When requested to select an authentication method, select SecurID.

14. In the SecurID authentication window, select Use PinPad Card and click Next.

15. Click Finish to complete the process.

16. When asked if you wish to connect to the VPN, click Yes.

17. Enter your user ID and the passcode generated by the RSA SecurID mobile app, then click Connect., following which you'll be presented with a connection progress indication.

18. You will ultimately be connected to the Weizmann Institute network, as reflected by the green indication on the connection icon.

19. Upon completing your work, be sure to disconnect from the network by clicking Disconnect, and confirm your request to disconnect by clicking Yes. To reconnect, click Connect.

Mac Usage Instructions

To connect to the network via VPN:

1. Launch the Check Point VPN Client application from the Dock or from your installed applications folder.
2. Click Connect in the application user interface.
3. Enter your user ID, PIN and current token code, assuming you have an RSA SecurID card. If you're using the RSA SecurID mobile app, enter your user ID and the passcode generated by the app.
4. Click Connect.
5. You may alternatively access svpn.weizmann.ac.il on either Safari or Chrome browsers.

Linux Installation

To install Check Point VPN software on a Linux computer, perform the following in a terminal window:

1. Download the installation script via the following command:
   ​curl -L -o svpn.sh https://www.dropbox.com/scl/fi/uy6sfezmg3ccrsjs8p44f/svpn.sh?rlkey=lz7po2wpt5dxc2w91hi7uszae&dl=1
2. Run the script as follows:
   sudo bash svpn.sh
3. To complete installation, add a shortcut for the application by running the source ~/.bashrc command or adding an alias (alias svpn='snx -s svpn.weizmann.ac.il -u ') to your .bashrc/.cshrc/etc.
4. Run svpn username to connect, or use the full snx command snx -s svpn.weizmann.ac.il -u username.

Notes:

• Ubuntu users need to change the packages repository server to an Italian one due to missing 32bit libraries on Israeli repositories. See help.ubuntu.com/community/Repositories/Ubuntu for instructions.
• Fedora 31 (and higher) users can no longer install snx due to lack of 32-bit libraries.

Linux Usage Instructions

To log into and disconnect from the VPN network on a Linux computer, perform the following via a terminal window:

1. Connect to the VPN network via the following command:
   svpn 'your user ID' (for example, svpn user1)
2. Use the following command to disconnect:
   snx -d

Notes:

• You may require root access. Should that be the case, use the sudo sh svpn terminal command to assign it.
• Replace username with your WIS user ID (in lowercase).
• RSA physical keyfob users: the password is comprised of your 4 fixed PIN digits + your 6-digit SecurID.
• RSA mobile phone app users: the password is comprised of your 8-digit SecurID.

iOS Installation

To install the Check Point VPN software on an iOS device:

1. Look up the Capsule Connect app on the Apple app store via http://is.gd/GNjKMp.
2. You may alternatively locate the app by using your iOS device to scan in the QR code below.

3. Install the Capsule Connect app by tapping the download/installation icon.

iOS Usage Instructions

To connect and disconnect via VPN on iOS:

1. Launch the Capsule Connect app by tapping the OPEN button after installing it, or by tapping the app icon on your iOS device’s relevant home screen.

2. When asked to Enable VPN, tap Yes.
3. Tap Scan QR Code under New Connection. If, for any reason, you're unable to scan QR codes, see the next step.

Scan the QR code provided below. Once you've scanned in the code, skip to step 5. 

4. If unable to scan in QR codes, tap Manual Connection under New Connection.

Enter Weizmann VPN in the name field and svpn.weizmann.ac.il in the server address field, as shown below, then tap Create.

When asked to authorize the certificate, tap Trust.

When asked to select an authentication method, tap RSA SecurID.

Tap PinPad, then tap < Authentication to return to the authentication method selection screen.

5. Enter your user ID and the passcode generated by the RSA SecurID mobile app, then tap Connect.

You are now connected to the Weizmann Institute network.

6. When connected, the Capsule Connect app displays connection statistics (connection duration, your user ID and more). To disconnect from the Institute’s network, tap Disconnect .

You may alternatively tap and swipe the app display to the left, to view additional information, as shown below.

Android Installation

To install the Check Point VPN software on an Android device:

1. Look up the Capsule Connect app on the Google Play store (when located, it should come up as shown below).

You may alternatively locate the app by using your Android device to scan in the QR code provided before.

2. Install the app by tapping INSTALL.

3. Tap Accept when requested to authorize the app's access privileges.

Android Usage Instructions

To connect and disconnect via VPN on iOS:

1. Launch the Capsule Connect app by tapping OPEN after installing it, or by tapping the app icon on your Android device’s relevant home screen.

2. Tap the camera icon on the screen that appears, to create a new connection by scanning a QR code. If, for any reason, you're unable to scan QR codes, skip to the next step.

Scan the QR code provided below. Once you've scanned in the code, skip to step 4.

3. If unable to scan in QR codes, enter Weizmann in the name field and svpn.weizmann.ac.il in the server address field, as shown below, then tap Create.

When asked to select an authentication method, tap RSA SecurID.

Tap PinPad when presented with the following two options.

4. Enter your user ID and the passcode generated by the app, then tap Connect.

You are now connected to the Weizmann Institute network.

5. The Capsule Connect app will display connection statistics (connection duration, your user ID and more). To disconnect from the Institute’s network, tap Disconnect.

To install or upgrade to Java software version 8:

1. First verify that the Java software required is in fact available on your computer. Do so via the Windows Start menu, accessing Start -> Settings -> Control Panel ->
   Programs and Features -> Java 8 Update 25.
2. Should the software not exist at the relevant location, or an older version (such as Java 6 or Java 7) be installed, access the site www.java.com/en in your browser, and select Free Java Download.
3. Following installation of the current software version, restart your computer.

Authorizing Pop-up Windows in Microsoft Internet Explorer

To authorize pop-up windows in Internet Explorer:

1. Click the Internet Options command on the Tools menu, and access the Privacy tab.
2. Should the check box next to Turn on Pop-up Blocker be enabled, click the Settings button next to this option.
3. In the window that appears, enter https://svpn.weizmann.ac.il in the Address of website to allow field, click Add and close the window by clicking Close.

4. Click OK to close the Internet Options window.

Authorizing Pop-up Windows in Mozilla Firefox

To authorize pop-up windows in Firefox:

1. Click the Options command in the main menu () and access the Content tab.
2. Should the check box next to Block pop-up windows be enabled, click Exceptions.
3. In the window that appears, enter https://svpn.weizmann.ac.il in the Address of website field, click Allow and close the window by clicking Close.

4. Close the Options window by clicking OK.