Getting Started with SVPN

Set Up Connect
About SVPN Set Up MFA FAQ Support
AnyConnect Remotely
 About SVPN

Introduction
Enabling your corporate laptop to utilize SVPN solution is a two-part process:
1. Set up your On Premise Microsoft Authenticator and Cisco AnyConnect from an Ameren
facility.
2. Connect to SVPN while at a remote location.

1 Register cell Download MS Set up Download

From an number at: Authenticator Authenticator AnyConnect
Ameren Facility https://mfa.ame app from App account for “On Client from
ren.com Store Premise MFA” Software Center

2 Close Skype, Launch the

Enter
Ameren
Approve via Wait for Map Drives
From a Remote Yammer, & AnyConnect Mobile System Scan via Desktop
Logon and
Teams application phone to Completed icon
Facility PW

About SVPN 2
Keep in Mind...

• The Authenticator account for Office 365 is NOT the same Authenticator account as
SVPN – you must have a separate “On Premise MFA” account for SVPN

• You must complete the MFA set up at: mfa.ameren.com including the security
questions and clicking authenticate

• Every time you connect to SVPN you will receive an “approval” request on your
phone. You must accept that approval in order to connect. Unlock your phone to
speed up approval.

• SVPN isn’t Webdesk. SVPN will only work on Ameren owned, Windows laptops.
Webdesk will work on iPads or non-Ameren laptops.

• There are just a few things you can’t/shouldn’t do with SVPN… like change your
Ameren password or try to update your SVPN software.

• Some public Wi-Fi locations hate VPN and may limit your bandwidth!

About SVPN 3
Set Up MFA

Users must have a mailbox in Office 365. As of December 2018, many

consultants (Q accounts), have not migrated to Office 365. If you don’t have
an Office 365 account, open a Support Desk ticket.

While you are in an Ameren facility…

https://mfa.ameren.com

Set Up MFA 4
Set Up MFA

Set Up Your Mobile Device

Upon login, you are prompted to setup your Authentication Method.

Choose Mobile App, then Click Generate Activation Code.

Set Up MFA 5
Set Up MFA

Now, unlock your mobile phone.

Open the MS Authenticator App on your iPhone or Android device.

Look for the Option to Add Account or a +

iPhone Android

Set Up MFA 6
Set Up MFA

Select Work or school account

iPhone Android

Set Up MFA 7
Set Up MFA

A QR code will appear on your laptop screen. Point your camera towards the QR code.

Click Authenticate Me Now on the web page to test and click Approve on your mobile phone.
iPhone Android

Set Up MFA 8
Set Up MFA

You will then have a new entry for Ameren On Premise MFA. That is your SVPN account.

iPhone Android

Set Up MFA 9
Set Up MFA

You are then be prompted to answer security questions.

Set Up MFA 10
Set Up MFA

Expected Results

Utilizing the Microsoft Authenticator application on a mobile device provides a consistent,

previously utilized technology for MFA for applications and services for end users. Utilizing an on
premise MFA server allows for proven technologies for MFA without requiring significant
changes to application infrastructure.

Exceptions and Escalation

Ameren Digital's recommendation is to utilize the mobile application to handle authentication
for end users. Individuals may opt to utilize text or phone factor for authentication, but that will
not generate proper token codes for applications that require them.

If you need additional assistance, contact the Ameren Service Desk at (314) 554-4357.

Set Up MFA 11
Set Up AnyConnect

Complete these steps when you are in an Ameren facility. This is a one time activity.

1. Log into your laptop with your network username and password.

2. On your start menu launch Software Center.

3. Search in Software Center for AnyConnect. Note: If AnyConnect does not appear, contact the
Support Desk.

Set Up 12
AnyConnect
Set Up AnyConnect

4. Click the AnyConnect software package and select Install.

Note: If you have a previous version of AnyConnect installed, you must uninstall the previous
version prior to installing the latest version.

5. Once installation completes, you will have a new Map Drives icon on your desktop.

Set Up
13
AnyConnect
Set Up AnyConnect

4. Fully Shutdown the laptop prior to taking the laptop off premises.

Failing to fully shutdown your laptop leads to inconsistent applications and mapped drives when
connecting remotely.

Set Up
AnyConnect 14
Connect Remotely

Every time you want to connect to SVPN, you will:

1. Log into your laptop with your network username and password. Wait for your laptop for
fully startup

2. Connect to your local Wi-Fi

3. Close any applications that startup on login. Examples would include Yammer, Teams,
OneDrive and Skype. These applications cannot properly login prior to you connecting via
VPN.

4. If prompted, close the Microsoft OneDrive authentication prompt by clicking the X. Typing
your username and password in this dialog at this point will result in the inability to save files
to OneDrive.

Connect
15
Remotely
Connect Remotely

5. In the Start menu, select the Cisco folder, then select Cisco AnyConnect Secure Mobility
Client to launch the VPN client.

6. Once the AnyConnect software launches completely click Connect.

Connect 16
Remotely
Connect Remotely

7. Enter your Ameren network username and password and click OK.

7. An approval will appear on your smartphone. Respond to your Microsoft Authenticator

prompt on your smartphone by selecting Approve.

7. Read and click Accept on the login banner.

Connect
17
Remotely
Connect Remotely

10. Upon connection, you will see several messages under the System Scan as your computer
attempts to fully connect to Ameren. The System Scan checks your laptop for virus protection
and compliance. The System Scan can take up to a minute to complete. During this time,
you can access resources via WebDesk, if necessary.

10. When the scan is completed, System Scan will indicate Compliant. Network access allowed.
You are in SVPN!

Connect
18
Remotely
Connect Remotely

12. After network connectivity is established, you may double click the Map Drives icon on your
desktop to reconnect all of your drives.

Tip: Wait for the yellow exclamation mark to disappear on the network task bar icon, or wait a
few seconds for best results.

13. Launch Skype for Business 2016, Microsoft Teams, Yammer and Microsoft OneDrive from
the Start Menu.

14. When finished working, click Disconnect to properly disconnect from the Ameren network.

Connect
19
Remotely
Connect Remotely

Expected Results
Utilizing VPN from a corporate laptop remotely is similar to accessing resources while residing at
an Ameren location, the operating system and applications will behave similarly.
If you suspend, hibernate or put your laptop to sleep instead of shutting down your laptop while
traveling to remote locations, you may experience inconsistent access to resources, applications,
and mapped drives. To avoid this situation, you should fully shutdown your laptop prior to
leaving the Ameren location.
Your VPN connection speed is a function of the speed of the Wi-Fi at your remote location.

Exceptions and Escalation

If you are unable to authenticate with the AnyConnect client, ensure that you are enrolled in the
On Premise Microsoft Authenticator service located at https://mfa.ameren.com

Some applications, like Microsoft Skype or Teams, may need to authenticate again while
connected over VPN to allow full functionality. These applications should do so on their own, or
you can quit and restart the application to force authentication while connected on VPN.

If need additional assistance, contact the Ameren Service Desk at (314) 554-4357.

Connect
20
Remotely
 FAQs

Why should I use SVPN if I'm using Webdesk now?

SVPN offers you access to all authorized Ameren resources and drives. Webdesk is more limited in the available resources.

Can SVPN be used at a public Wi-Fi location, like Starbucks?

Yes, you can use SVPN from any public Internet access location.

Does1SVPN use my smartphone's data plan?

SVPN and the data traffic between your Laptop and Ameren's network does not use your smartphone's data plan.

How fast is SVPN compared to Ameren's network?

2 of SVPN is dependent on the Wi-Fi/Internet speed at your remote location. SVPN may not be quite as fast as when
The speed
you are working in an Ameren facility or SVPN may be faster.

While using SVPN, 3will I be "timed out" or knocked off the network?
If you stop using the keyboard/mouse, eventually, you will be timed out and your SVPN connection will be terminated. If that
happens, you can re-connect.

If you are timed out, simply close all Windows applications and programs, (especially Yammer, Microsoft Teams and Skype) and
restart the Cisco Anyconnect Secure Mobility Client. You need to again authorize the Ameren On Premise MFA and System Scan
before you are reconnected to the network.

Why does SVPN seem slow when I’m working at some locations?
Some public Wi-Fi spot put limits on VPN bandwidth and that may impact the speed of your throughput.

Where do I go to for Secure VPN support?

If need additional assistance, contact the Ameren Support Desk at (314) 554-4357.

FAQ 21
Support

For SVPN assistance, please call the Ameren Support Desk at: (314) 554-4357.

Support 22