Pulse Secure client – fast and stable remote network access
Project:
Client Security
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 1 of 15
Content
1
BASF internal VPN network.......................................................................................... 3
2
Connect to the BASF VPN network via Pulse Secure using a smart card ................ 4
3
Disconnect from the BASF VPN network .................................................................... 6
4
Using Pulse Secure while traveling in other regions.................................................. 7
5
Switch to Smart card authentication mode / Empty list of Connections ................... 8
6
Connect to VPN without a smart card / Switch to RSA authentication mode ........... 9
7
Switch to Contractors VPN authentication mode ..................................................... 12
8
Additional information ................................................................................................ 14
9
Document control ....................................................................................................... 15
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 2 of 15
1 BASF internal VPN network
When on business trips or working at home, BASF employees need remote access to the
BASF network to check e-mails, use internal programs like SAP or browse the BASF
Intranet. All BASF laptops are equipped with a Virtual Private Network (VPN) connection
which provides secure access to the company network. The software tool Pulse Secure
(Junos Pulse was the former standard with similar functionality) is used to provide
employees with BASF network access which is secure, user-friendly, fast and extremely
stable.
To ensure that remote access is available when needed, the new infrastructure has VPN
servers in every region. If your default server is not available due to technical problems,
you can use the server of a different region. And while on a business trip, you can
increase the performance of your VPN connection by switching to the local VPN server.
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 3 of 15
2 Connect to the BASF VPN network via Pulse Secure using a
smart card

Make sure that you are logged in to your computer with inserted smart card or
insert your smart card into your already logged in PC and connect it to the internet

Press the Windows key, type in pulse and open Pulse Secure or open Pulse
Secure via Start menu  Pulse Secure  Pulse Secure
Start Pulse Secure on Win8.1

Start Pulse Secure on Win7
When the Pulse Secure client opens, establish the connection by clicking on the
Connect button of your regional VPN server.
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 4 of 15

As soon as the connection status has been changed to Connected you can hide
the Pulse Secure client by clicking on the Close button

An established VPN connection is being indicated by a small icon in the taskbar
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 5 of 15
3
Disconnect from the BASF VPN network

To disconnect from the BASF network, the current running VPN connection has to
be disconnected via right-click on the Pulse Secure symbol in the taskbar or just
press the Disconnect button within the Pulse Secure Connections list.

Disconnect a VPN connection via taskbar icon
Disconnect a VPN connection within Connections list
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 6 of 15
4
Using Pulse Secure while traveling in other regions

If you are away from your home region, you can increase the performance of your
VPN connection by switching to the local VPN login gateway.

Just start Pulse Secure as usual and select the Connect button next to your
current region.
Choose your local VPN login Gateway
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 7 of 15
5
Switch to Smart card authentication mode / Empty list of
Connections

If the Connections list does not show any Gateways or you want to switch them
back from the RSA / Contractor to the Smart card authentication mode, press
the Windows key, type in smart card auth and choose Smart card
authentication or select it via Start menu  Pulse Secure  BASF
Configuration.
Switch to Smart card login on Win8.1

Switch to Smart card login on Win7
A message box will appear which informs you that the authentication mode of the
VPN client has been switched to Smart card authentication. Click OK to confirm.

See chapter 2 Connect to the BASF VPN network via Pulse Secure using a
smart card for further information.
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 8 of 15
6
Connect to VPN without a smart card / Switch to RSA
authentication mode

Make sure that your PC is connected to the internet

Press the Windows key, type in rsa and choose Forgot my smart card (RSA) or
select it via Start menu  Pulse Secure  BASF Configuration
Switch to RSA login on Win8.1

Switch to RSA login on Win7
A message box will appear which informs you that the authentication mode of the
VPN client has been switched to RSA. Click OK to confirm.

When the Pulse Secure client opens, establish the connection by clicking on the
Connect button of your regional VPN RSA server:
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 9 of 15

To use the RSA authentication mode, you have to type in your BASF user name
and a password (passcode), which here is a combination of your VPN PIN and a
token code. The token code can be created / received via the following options:
o Temporary Fixed Passcode from the IS Service Desk
o RSA hardware token stick (if available)
o OnDemand Email solution (if ordered / configured for you)
o Soft token RSA app on smart phone (if ordered / configured for you)
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 10 of 15
Type in your BASF user name and the passcode (PIN + token code combination)
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 11 of 15
7
Switch to Contractors VPN authentication mode

This option should just be used by external employees

Make sure that your PC is connected to the internet

Press the Windows key, type in contractors and choose Contractors VPN or
select it via Start menu  Pulse Secure  BASF Configuration
Switch to Contractors login on Win8.1

Switch to Contractors login on Win7
A message box will appear which informs you that the authentication mode of the
VPN client has been switched to Contractors VPN / 3rd-Party. Click OK to
confirm.

When the Pulse Secure client opens, establish the connection by clicking on the
Connect button of the 3rd-Party VPN server (for more info  see chapter 8):
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 12 of 15
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 13 of 15
8
Additional information

Documentation for 3rd -Party VPN access for contractor users, see document
Functional Specification 3rd Party VPN v1.3.docx
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 14 of 15
9
Document control
Persons involved
Name, Org-Code
Acting
Information
Thomas Förster, G-FSI/IBB
Creation
16.01.2017
Change history
Date
Author
Version Change topics
Document acceptance / Handover
From Name, Org-Code
To Name, Org-Code
Version, Date
Document template
Version
1.0 from 18.08.2009
File storage
Author: Thomas Förster / G-FSI/IBB.
Documentation
Pulse Secure client – fast and stable remote network access, Version 1.0
Page 15 of 15