UTC Aventail 10 pre-installation Checklist Version 2.

2 11/29/2010

UTC ITSS Proprietary 1
UTC Aventail ver. 10.x client pre-installation Check List

In order to ensure successful Aventail installations, several items need to be examined
before your perform Aventail 10 client installation.

Network Connectivity

This requirement is critical to check when you are in a office environment with a local
firewall in your network. If you are running Aventail in a home office environment that
without a strict Firewall policy, this step may be skipped and go straight to the PC
Readiness section below.

1. Your PC should be able to reach following UTC Aventail systems on TCP port 80
and 443 directly without using a proxy. This normally should be verified if you are
in an office environment. If a proxy server is normally defined in a user's Internet
Explorer web browser (select menu Tools->Internet Options->Connections->LAN
Settings), it is important to note that such network connectivity must be established
without using your local web proxy server. If any UTC web applications are required
to your Aventail users, you may also consider to reconfigure your Aventail users' PC
browser, set up proxy bypass exception rule for *.utc.com resources or your required
utc.com domain resources (or simply *.utc.com). This proxy exception rule on your
users browser will ensure your users access UTC web applications through Aventail
tunnel, not via your local proxy. Please note this proxy bypass exception rule is
extremely important to allow your Aventail users to access their local resources,
internet and UTC resources at the same time while in a Aventail session. All required
UTC resources should be defined and processed through our UTC BPAR process.
You may contact your UTC User Administrator for more details on our
BPAR(Business Partner Access Request) process.

UTC Aventail V10 DNS name IP Address Site Name Site Location
extranet-v10.utc.com 159.82.150.15
UTC-
Americas1 Newington
mdextranet-v10.utc.com (DR only) 159.82.166.15
UTC-
Americas2 Meriden
sgextranet-v10.utc.com 192.249.41.99 UTC- Asia Singapore
ukextranet-v10.utc.com 192.249.36.99 UTC- Europe Maidstone

2. Your PC should resolve UTC Aventail DNS names

To verify your Firewall is allowing your PC directly communicate UTC Aventail server
is to issue a DOS Command telnet extranet-v10.utc.com 443. If a blank screen is
displayed and receives no error message, it means your network is ready.

Tip: A simple way to verify whether your PC satisfy the above two requirements and
with a valid Aventail certificate is to use web browser to browse those web sites listed
above (e.g. https://extranet-v10.utc.com). However, you must make sure your browser
UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 2
proxy server settings to be off while performing such connectivity verifications. If
your local office firewall policy is ready, you should be able to see following
authentication prompt through your web browser directly without using a web prox.

Note: Please do not try to install any Aventail on-demand components when prompted
here. Otherwise, this could result some installation problems later on. In stead, you
should just simply close the web browser after verifying your network connectivity with
UTC Aventail systems.



PC Readiness

Local PC administrator right is required during Aventail program installation process
Aventail 10.03 client or above supports Windows XP, Vista and Windows 7. For
Vista or Windows 7 users, both 32 and 64bit are supported. Local PC administrator
right is required during Aventail program installation process.
Starting from Aventail 10.04.35 client or above, UTC has a universal Windows
Aventail installation program. The universal installation program is applicable on all
Windows 32bit or 64 bit OS platform currently. It means user can run this universal
installation client on XP, Vista and Windows 7, either 32 or 64 bit. To download the
Universal client, user can go to Megapath User Center
https://connect.megapath.net/utc or UTC Aventail support Wiki page download
section.
For the multi-language Windows PC international users, please refer to our special
instruction document for installation instructions. Those users should follow our
UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 3
special instruction and choose special installation image to install UTC Aventail 10
client on their non-English OS Windows PC.
Microsoft Remote Access Connection Manager service must be running or set to
Automatic. This service must be running to allow Aventail client to select VPN
system to connect, otherwise, users cant not see any pre-configured UTC Aventail
VPN system configuration.

Microsoft Plug and Play service should be enabled and running during the installation
process. But the Plug and Play service is not required to run Aventail program after
installation.


UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 4
A valid Aventail SSL VPN client certificate must be stored in your MS Windows
personal certificate store, which can be verified from your Windows Internet
Explorer. In 5.x client, your Aventail client certificate can be stored in different
location but this has changed since 9.x Aventail release. To be able to authenticate
through UTC Aventail servers, a valid Aventail client certificates must be stored in
users personal certificate store. To verify this, you may launch your Internet Explorer
web browser, and then choose the menu Tools-Internet Options- The tab Content
and then the Certificate button under the Certificates section. A valid certificate
means that your Aventail cert is not expired. If your certificate is obsolete, please
delete all invalid ones, and then go to Megapath Aventail User Center
https://connect.megapath.net/utc to download a new one. For further assistance,
please login your current Aventail VPN and browse our UTC Aventail Support portal
for further information. You may also contact your UTC Business Unit Aventail User
Administrator or refer to our Aventail Certificate Wiki Page. For instructions on how
to remove an obsolete certificate, please visit our Aventail 10 installation
troubleshooting page. Do note that UTC Aventail Support portal can only be viewed
after you sign in UTC Aventail. The Megapath support and UTC User Administrators
should be able to provide you the documents if you cant reach our Aventail support
Wiki page.
To troubleshoot Aventail certificate authentication issue, please visit our certificate
authentication troubleshooting wiki page.
For Vista and Windows 7 user, UAC (user access control) should be disabled during
installation. See our Wiki page for instructions on how to disable UAC on a Vista or
Windows 7 PC.
For Aventail 9.01 client users, the Aventail 9.01 client must be uninstalled before
installing Aventail 10 client. However, this doesnt apply to Aventail 5.3. Both
Aventail 5.3x client version and Ver 10 version can coexist. As a result, the ver 5.3x
client users can have both 5.3x and ver 10 client on their PC for a period of time. If
you run into some problems in the version 10 client, you may simply go back to your
old 5.3 client without performing any changes on your PC. In fact, most of our UTC
Aventail users are currently running version 5.3. Therefore, removing exiting
Aventail client should only apply to small number of users.
To validate you Aventail version, one simple way is that Ver.5 client has a dark green
Icon on users desktop; the version 9 clients has a blue Aventail connection icon
instead. Of course, you may verify by launching your Aventail client. Then right click
the Aventail icon from your system tray and select the About button to find out
your Aventail client version. For 9.01 client, your should select the properties icon
during the authentication prompt and then select the about tab to validate your
Aventail client version

UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 5


Post-Installation Verification

Post-Installation verifications
You should able to see Aventail folder installed in your start menu. An Aventail
program short cut is also placed in your desktop. In addition, you should see
following four new UTC Aventail 10 VPN adaptors installed in your Network
Connections folder:



UTC Aventail 10 pre-installation Checklist Version 2.2 11/29/2010

UTC ITSS Proprietary 6



To start your Aventail connection, you may either launch the UTC Remote Access
Selector program or double click the preferred UTC Aventail SSL VPN adaptor