IMB Animal Facility

◉ Purpose of Establishing VPN Virtual Connection with Academia Sinica's Network:

All data transmission between your computer and Academia Sinica's VPN server will be encrypted. Even if the packets are intercepted by a third party during transmission, it would be difficult for them to decipher the content.
Your communication device will obtain a dedicated IP address within the Academia Sinica domain. With this IP address, when accessing data from servers within the institute, you can be identified as an institute employee and acquire corresponding access permissions.
Once the VPN connection is established, any website you visit will be routed through VPN servers and other network devices. If you no longer need to access resources within the institute, disconnecting the VPN connection can improve transmission efficiency.

◉ Diagram illustrating the correlation between the applications that need to be installed before using VPN connection and the applications used when establishing the connection:

◉ Applications and their functions used for establishing VPN connections, configuration, and reminders:

No	Configuration, Applications	Functions	Installation and Configuration	Timing of Use	Reminders
1.	Setup "VPN Activation Service"	Allows users to enable or disable VPN service at their discretion. If a user holds an SSO account but has not activated personal VPN service, they will be unable to log in to the VPN server even after passing two-step verification.	Configuration is done via a web page	It is only necessary to use when enabling or disabling VPN service.	If there is no VPN login record for 90 consecutive days, the service will be automatically disabled. Configuration requires the use of an Academia Sinica domain IP address. If unable to visit the Academia Sinica campus for a period of time, pay attention to the duration of VPN service non-usage to avoid unexpected service suspension.
2.	Google Authenticator	Generates one-time dynamic passwords, which are appended to the end of the SSO account password as part of the password for logging into the VPN server. Even if the password of the SSO account is compromised, this mechanism can prevent unauthorized access by the thief.	Download, install, and configure the application	It is required every time a VPN connection is established.
3.	FortiClient VPN	Manages communication between your network devices and the VPN server. It establishes and maintains encrypted communication channels and redirects all network communications to the VPN server.	Download, install, and configure the application	It is required every time a VPN connection is established.	If there is no need to access network resources limited to institute employees, not establishing (disconnecting) the VPN connection can improve transmission efficiency.