Installing the CloudX/FortiClient Remote Access Services (VPN) Software

This is a pilot of the remote access service for authorized students in China is a partnership with CloudX. This service provides improved performance when accessing the educational materials and services offered by the University of California Berkeley. When the service becomes generally available a link will be added to this article detailing how to gain access.

This service is only available to students on mainland China and is not designed to be used from any other countries. If you are looking for the general-access remote access service (VPN) please see the bSecure remote access VPN.

NOTE: Because the service does not have a host name it will always show the site as untrusted. 

Contents

• Downloading and Installing the FortiClient Application for iOS and Android
• Downloading the FortiClient Application for Windows and macOS
• Installing and Connecting to the CloudX Service for the first time with Windows
• Installing and Connecting to the CloudX Service for the first time with macOS
• Connecting to the CloudX Service for the first time with iOS
• Connecting to the CloudX Service for the first time with Android
• Troubleshooting Connection Problems

Downloading and Installing the FortiClient Application for iOS and Android

If you are using an iOS device open AppStore or on Android open Play Store. Search for Fortinet, and then install FortiClient VPN. Once the install is complete scroll down to the first time login instructions below the Windows and macOS install section. 

Downloading the FortiClient Application for Windows and macOS

1. Start by opening a web browser and going to the service page https://54.223.109.123:10443/ 
2. Your web browser will warn you that the connection is not private, or is untrusted. This is because there is no host name associated with the site. 
   
   1. Chrome: Click the Advanced button and then Proceed to 54.223.109.123 (unsafe)
   2. Firefox: Click Advanced... and then Accept the Tick and Continue
   3. Safari: Click Show Details, then visit this website, and then click the Visit Website popup
   4. IE/Edge: Click Continue to this website (not recommended)
3. You will be presented with a login page similar to the images below.
    
   
   
4. Open the Duo app on your phone or device
5. Enter your CalNet ID and password, then click Login
6. Your primary Duo method will automatically start, for most people this is a popup from the Duo app itself
   
   1. The system can't accept one time passwords or tokens at this time
7. If you receive a failed login please see the troubleshooting steps at the end of this document
8. After a successful authentication you will be presented with the SSL-VPN Portal as pictured
            
   
   
9. Click on the Download FortiClient pull-down and select Windows or Mac to begin the download
   
   • If you are on an Android or iOS device please install the software from your app store and not this portal page
10. The installer will begin to download automatically

Installing and Connecting to the CloudX Service for the first time with Windows

To Install the Client Software

1. Double-click on the FortiClient MiniSetup installer you downloaded from website to launch the installer
2. Windows will prompt you for permission to run the installer, click Yes to continue
        
   
   
3. The installer will download the most recent install image
      
   
   
4. You will be presented with the licensing screen, click the Yes checkbox and then click Next
      
   
   
5. You will be prompted to accept the install location, click Next to continue
      
   
   
6. You will be prompted to start the install, click Install to continue
      
   
   
7. After the files have been copied and the software is installed you will be prompted to exit the installer
      
   
   
8. You can verify the FortiClient software is installed by looking in your system tray. FortiClient shows up as a blue shield with a check in the center. 
      

To Connect for the First Time

1. Click on the system tray to see all icons, and then click on the blue shield to select FortiClient
      
   
   
2. Select Open FortiClient Console
3. Click Configure VPN to start the configuration process
      
   
   
4. Fill out the following information, if it is no listed you can leave it as default
   
   • VPN: SSL-VPN
   • Connection Name: UCB-VPN
   • Remote Gateway: 54.223.109.123
   • Click the Customize port checkbox and then enter 10443
     
     
     
5. Click Save to save the configuration
6. You will be shown the login page. This is the page you will see when you start FortiClient in the future
      
   
   
7. It is helpful to open the Duo app on your phone or device before proceeding to ensure you can respond to the prompt as quickly as possible
8. Enter your CalNET ID and password
9. You will be prompted to accept an unverified certificate
      
   
   
10. Your Duo second factor will automatically trigger
11. If you receive a failed login please review the troubleshooting steps at the end of this article
12. You will then see the connected message, you can minimize this screen and access the materials you need
       
    
    
13. To disconnect just open the window again and click the Disconnect button

Installing and Connecting to the CloudX Service for the first time with macOS

To Install the Client Software

1. Double-click on the FortiClient MiniSetup installer you downloaded from website to launch the installer
2. macOS will prompt you for permission to run the installer, click Open to continue
      
   
   
3. The installer will download the most recent install image
      
   
   
4. When the downloads are complete you will be prompted to continue by clicking Install
      
   
   
5. The FortiClient installer will then display a description, click Continue to continue
      
   
   
6. Click Continue to accept the licensing agreement
      
   
   
7. You will be prompted to accept the licensing agreement a second time, Click Agree
      
   
   
8. You will be prompted to start the install, click Install to continue
      
   
   
9. After the install completes you will be prompted for two actions
10. System Extension Blocked
       
    
    
    1. Click Open Security Preferences
    2. Click the Unlock button, enter your password
    3. Click the Allow button for the VPN to be used
    4. Close the Security & Privacy window
       
       
       
11. FortiTray Would Like to Add VPN Configurations
    
    1. Click Allow for the new VPN service to be allowed
       
       
       
12. You can verify the FortiClient software is installed by looking in your system tray. FortiClient shows up as a checkbox shield (mac-con-1)

To Connect for the First Time

1. Click checked shield to select FortiClient
      
   
   
2. Select Open FortiClient Console
3. Allow FortiClient.app to access your documents folder
      
   
   
4. Click the acknowledgement checkbox and then the accept button
      
   
   
5. Click Configure VPN to start the configuration process
      
   
   
6. Fill out the following information, if it is no listed you can leave it as default
   
   • VPN: SSL-VPN
   • Connection Name: UCB-VPN
   • Remote Gateway: 54.223.109.123
   • Click the Customize port checkbox and then enter 10443
7. Click Save to save the configuration
8. You will be shown the login page. This is the page you will see when you start FortiClient in the future
      
   
   
9. It is helpful to open the Duo app on your phone or device before proceeding to ensure you can respond to the prompt as quickly as possible
10. Enter your CalNET ID and password
11. You will be prompted to accept an invalid certificate
         
    
    
12. Your Duo second factor will automatically trigger
13. If you receive a failed login please review the troubleshooting steps at the end of this article
14. You will then see the connected message, you can minimize this screen and access the materials you need
       
    
    
15. To disconnect just open the window again and click the Disconnect button

Connecting to the CloudX Service for the first time with iOS

1. Launch the FortiClient app by touching on the blue shield surrounding a lock
2. Allow FortiClientVPN to add VPN configurations to your iOS device
      
   
   
3. You will see the main VPN page, touch Connections to setup the app
      
   
   
4. Touch Add Configuration
5. On the Add/Edit VPN page fill out the following information
   
   • Name: SSL-VPN
   • Host: 54.223.109.123
   • Port 10443
     
     
     
6. Touch Save and then Done and you will see the VPN list
7. Touch <VPN to return to the main page
      
   
   
8. Touch the switch next to VPN to activate the connection
      
   
   
9. Touch OK to allow the untrusted connection
      
   
   
10. It is helpful to open the Duo app on your phone or device before proceeding to ensure you can respond to the prompt as quickly as possible
11. Enter your CalNet ID and password, then touch OK
       
    
    
12. Once you accept the Duo prompt on your device the connection will complete
       
    
    
13. You can disconnect by touching the switch next to VPN again to turn it off

Connecting to the CloudX Service for the first time with Android

1. Launch the FortiClient app by touching on the blue shield surrounding a lock
2. Touch OK at the FortiClient welcome page
      
   
   
3. Touch OK at the permissions request notice
4. Touch ALLOW to grant FortiClient permission to access files on your phone
      
   
   
5. On the Add VPN page fill out the following information
   
   • Name: UCB-VPN
   • VPN TYPE: SSL VPN
     
     
     
6. Touch Create to setup the VPN service
7. On the SSL VPN SETTINGS page touch and fill out the following information
   
   • Server: 54.223.109.123
   • Port 10443
     
     
     
8. Touch the back button to return to the connection screen
      
   
   
9. Touch the Connect button to start the VPN
10. It is helpful to open the Duo app on your phone or device before proceeding to ensure you can respond to the prompt as quickly as possible
11. Enter your CalNet ID and password, then touch LOGIN
       
    
    
12. Touch OK to allow FortiClient to create a VPN session on your devicee
       
    
    
13. Touch PROCEED to accept the untrusted certificate
       
    
    
14. Once you accept the Duo prompt on your device the connection will complete
       
    
    
15. You can disconnect by touching the switch next to VPN again to turn it off

Troubleshooting Connection Problems

Error: Permission Denied

This can be caused by three different conditions:

• You are not authorized to use the CloudX remote access service
• You did not respond to the Duo authorization prompt before the login timed out
• You entered your username/password incorrectly

If you have not tried connecting to the service page try that first to ensure you are not having a client problem. If you are unable to access the web portal please contact the student help desk for assistance.

If you are able to log into the web portal please contact the CloudX support team for assistance with the client through email at helpdesk@xnxcloud.com or WeChat CloudXHelpdesk. Helpdesk hours are 9:00am through 5:00pm Beijing Time Monday through Friday. 

Problems Installing the Software Client

Please contact the CloudX helpdesk for assistance with the client through email at helpdesk@xnxcloud.com or WeChat at  CloudXHelpdesk. Helpdesk hours are 9:00am through 5:00pm Beijing Time Monday through Friday

Unable to Access an Educational Resource

If you are unable to access a site needed for class, or the site you are accessing is running very slowly, please open a ticket with the student help desk to have it reviewed for inclusion in the service.