Worldwide operations require AFNet remote network access capability. AFNet enterprise forces are engaged to expedite additional remote access capabilities, inform AFNet users of capabilities, and assure access to available capabilities. The Enterprise User Remote Access Modernization (EURAM) VPN client was deployed to AFNet laptops and laptop-like devices on 11 Mar 2020 in accordance with MTO 2020-071-005, EURAM AFNet Deployment, expanding remote VPN capacity by 60,000 concurrent connections.
Below is a listing of current remote access capabilities. As many of the below are shared resources, users are asked to select the one that best fits mission essential functions and disconnect when not required.
Primary option for users needing only email access. Requires AFNet account, CAC reader, personal or government computer.
Outlook Web Access (OWA)
- Internal to AFNet:
- Open browser (Edge/Chrome), go to site: https//webmail.apps.mil/
- Select the email certificate to access your email via the internet
- External to AFNet:
- Open browser (Edge/Chrome), go to site: https//owa.us.af.mil/ External to AFNet:
- Select the email certificate to access your email via the internet
Notes: 1) S/MIME software is required to open encrypted email in OWA for both home and work computers. This was previously pushed to AFNet devices for Edge/Chrome, and requires manual installation for personal devices. Of note, there is not an S/MIME solution for Chrome home use. 2) For additional information see SMIME Instructions in resources section below, NOTAM 2019-255-001 and MTO 2019-350-001.
Blackberry Unified Endpoint Management (BUEM) Devices
The following AFNet resources are available via government furnished, BUEM-enabled devices (phones and tablets). BUEM applications offer many capabilities and features that provide access to AFNet resources and enhance productivity for Air Force mobile device users. The following resources are available to BUEM-enabled devices (phones and tablets) that are updated to the mandated iOS version (iOS 13.2):
- Blackberry Work – AFNet email, contacts, and calendar along with the ability to sign and encrypt messages
- Smart Office for Blackberry – Viewing and editing documents and files, include the digital signing of configured PDF documents
- Blackberry Access Secure Web Browsing – Access to CAC-enabled websites (DTS, AFPC Secure, AF Portal, MyPay, etc)
- Blackberry Tasks and Blackberry Notes – Allows users to create, edit, and manage tasks and notes that sync with their Microsoft Outlook 365/Outlook Tasks
- OneDrive and SharePoint Online – Access to these capabilities can normally be configured through Blackberry Work but are currently unavailable. A full restoral is estimated 23 Mar 20
Notes: 1) BUEM users received a direct email on 12 Mar 20 advertising capabilities available. 2) Some BUEM applications referenced above may require the user to download through the Work application and should automatically configure. 3) For additional information see Blackberry UEM Instructions and How to Guides in the resources section below, NOTAM 2019-268-005 and NOTAM 2020-041-001.
Virtual Private Network (VPN)
Provides full AFNet resources via government-furnished and configured devices. There are now two primary ways for active duty AFNet users to access VPN
Threat Management Gateway (TMG) (legacy): AFNet SSL VPN Client
- Assure laptop is configured to support wireless connectivity
- Establish a functional internet connection (wireless or wired) outside the AFNet
- Open ‘AFNet VPN Client’ or ‘AFNet SSL VPN Client’
- Click ‘Connect’ to establish VPN connection
- If migrated, utilize the “Authentication Cert” (16-digit PIV-Auth certificate) from more choices, if not, continue to use 10-digit “ID Cert” to gain access
EURAM VPN (new): New EURAM VPN capability deployed to AFNet laptops and laptop-like devices on 11 Mar 20.
- Assure laptop is configured to support wireless connectivity
- Establish a functional internet connection (wireless or wired) outside the AFNet
- Double click on the USAF VPN Client icon on the desktop or by selecting BIG-IP Edge Client through the Start Menu
- Click the “Connect” button – the client will attempt to start a VPN connection
- The client will display a DoD monitored resource message. Click ‘Okay, Proceed to App” green button to proceed
- Select the “Authentication Cert” (PIV-Auth) certificate from more choices. Note: Some users who have not migrated may still have to select the 10-digit “ID Cert”\ After VPN session is established, VPN will minimize to the system tray
- After VPN session is established, VPN will minimize to the system tray
- To Disconnect, open the client and select “Disconnect”
Notes: 1) EURAM VPN connectivity will be disconnected after 2 hrs of inactivity, or when the computer goes to sleep—whichever occurs first. 2) EURAM VPN client is not currently deployed to ANG. 3) EURAM capability fielding was expedited; planning and fielding for full capacity continues. 4) Any concerns with client deployment or user access should be reported against Master Remedy Ticket #25594076–The Most common error is inability to access networked shared drives. 5) For additional information see EURAM User Guide and MTO in the resources section below.
Key Reminders:
- Air National Guard (ANG) and Air Force Reserve users should contact local resourcing for additional information on VPN and Desktop Anywhere resource capabilities and requirements
- OWA is a recommended first option if email is the primary requirement
- If not actively working, log off VPN to allow other users to access the AFNET VPN
- Ensure government laptops have wireless functions enabled, wireless settings checked, and correct power cord before users depart their normal duty location
Resources:
- EURAM User Guide
- S/MIME Instructions
- Blackberry UEM Instructions and How to Guides
- EURAM VPN Client SDC Application Repository
- USAF VPN Client Installation Instructions
MTOs and NOTAMs are in the AFIN Compliance Tracker, https://act.af.mil/ACTv2 (SIPR), or ESD Portal, https://esd.us.af.mil (NIPR)
MTO 2020-071-005, EURAM AFNet Deployment
MTO 2019-350-001, Google Chrome S-MIME Deployment
NOTAM 2020-041-001, New Features Now Available on BUEM Connected Mobile Devices
NOTAM 2019-268-005, Blackberry UEM New Features
NOTAM 2019-255-001, OWA Encrypted and Digitally Signed Email Capability (S-MIME)