Intranet Access
The NIEHS Intranet site is available only to personnel registered as NIEHS users with valid NIH user IDs.
If you need to access the NIEHS Intranet site but are unable to, please request that your supervisor, project officer or collaborator (as applicable) pursue access for you through their administrative officer (AO) and their computer support person (CSP).
The NIEHS Internet site is available for use by everyone.
Remotely Accessing NIEHS Resources
2. Library Journals and Databases
NIEHS employees can access library journals and databases from home or while on travel by the following options:
If you have a government-issued computer, you can access journals and databases through your VPN connection (see "Request Remote Access").
Using a non-government computer, you can access journals and databases through:
- The Citrix connection (see "What is Citrix") and then going to Library Resources from the Junction.
- The NIH Library proxy server at http://ezproxy.nihlibrary.nih.gov/login
.
- Click the Next button in the Use NIH credentials box. The usual blue NIH login window will open.
- Enter in your User Name and Password, click Log in.
- Once you log in, the window will open the NIH Library home page.
- Under Quick Links, on the left hand navigation, are links to the Online Databases and Online Journals.
3. The Junction
To access The Junction, navigate to https://Citrix.niehs.nih.gov/ (https://citrix.niehs.nih.gov/).
When using Citrix Services, Remote Access Approval is not required and it is unnecessary to use VPN software.
What is Citrix?
Citrix is a means of accessing NIEHS applications such as Filemaker Pro, Adobe Acrobat, etc. through a fully functional virtual desktop environment. Citrix sessions transparently mimic nearly all every-day functionality for desktop computers. Citrix offers access to various applications and documents stored on NIEHS central storage without the need to create a VPN session. Some of the applications that are accessible via Citrix include but are not limited to Microsoft Office 2007/2010, Filemaker Pro and Internet Explorer 8.
Multiple users can be logged into a Citrix Server simultaneously from various locations throughout the world. It is not necessary to use VPN software when using Citrix Services inside or outside the NIEHS network. Citrix access is provided through a web interface which requires a small plug-in, called the XenApp Plug-in, to be installed on the machine (administrative rights are required to complete the installation). Most NIEHS owned computers should have the plug-in installed on the computer by default. However, if the plug-in needs to be installed on the computer a Warning Notice will be visible "Click install to access your applications" (see below), as well as a button to download and install the plug-in.

How to use Citrix Services
To begin a Citrix session navigate to the following location https://Citrix.niehs.nih.gov/ . The Citrix Web Portal will check your computer for the compatible Citrix Client software otherwise known as the Citrix XenApp Plug-in. If the software is not found, the Citrix Web Portal will display a prompt to install the Citrix Online Plug-in through the following pop-up message. Place a checkmark in the “I agree with the Citrix license agreement.” box. Click the “Install” button to begin the installation process of the Citrix Online Plug-in.

- The operating system will prompt to save the plug-in through the pop-up dialog box as shown below. Click the “Save File” button and the download and installation process will start.

- The operating system will display the installation progress bar while the plug-in is being installed.

- Once the software is properly installed, another pop-up dialogue box will appear indicating that the Citrix Online Plug-in was successfully installed. Also, there will be a green check mark at the bottom of the log in area indicated that an appropriate client software is present on the computer as shown in the following screenshot.

Logging into the Citrix Web Portal
- To log into the Citrix environment, enter your NIH username and password in the proper fields, as shown in the highlighted area of the image below. Ensure that the Domain is NIH and click on the “Log On” button to proceed.

- The Citrix Web Portal screen (shown below) will appear once you have successfully logged in. To access the Citrix desktop, select the Desktops tab.

- To access the Citrix Desktop, click on one of the icons listed on the "Desktop" tab of the Web Portal. See below.

- The Citrix Online Plug-in will begin to launch the Citrix desktop, as noted on the "Citrix Desktop" dialog box. The government computer warning box can be seen in the background, as shown below.

- After you have read the access restrictions, click the "OK" button on the "Warning" dialog box.
- Once you have logged in, the Citrix desktop environment is ready to use! You will have access to files you have stored on central storage as well as other network resources like email, printers, and group/project files stored on the central storage system.

4. Request Remote Access to NIEHS
To request remote access into NIEHS, navigate to the following location: http://inside-www.niehs.nih.gov/ctb/serv-remote.cfm (http://inside-www.niehs.nih.gov/ctb/serv-remote.cfm) (link can be accessed via Citrix and Internet Explorer)
- Step 1: Fill out the Request Remote Access Approval from your Supervisor
- Step 2: Take the Mandatory Secure Remote Access Training (NIH) courses
Also see instructions for the training.
- Step 3: Electronically sign the one-time agreement that must be signed by the employee to obtain remote access. Sign the form within the training in step 2 or sign it now at this link: http://cims.cit.nih.gov/nihforms.cfm?form=remote.access
- Step 4: E-mail your NIEHS Account Sponsor to request the user be added to the NIH Active Directory VPN group through WebSponsor. The Account Sponsor will verify the prior steps before adding the access for the NIH VPN.
5. Obtain the ActivIdentity ActivClient
The ActivIdentity PIV Card software is located at the following location:
- https://citrix.niehs.nih.gov/downloads/PC/Software (https://citrix.niehs.nih.gov/downloads/PC/Software) and select ActivClient v6.2 .
6. Install the ActivIdentity ActivClient
The ActivIdentity ActivClient installation instructions are located at the following location:
7. Obtain the VPN software
Once you receive remote access approval. Navigate to the following website to download the VPN client:
8. Install VPN Software
Installation Instructions
Cisco Systems AnyConnect Client - Windows (PC) XP/Vista/7
General Information
Current Version: Cisco Systems AnyConnect Client
The Cisco AnyConnect Client enables you to establish secure, end-to-end encrypted tunnels. Using Cisco AnyConnect from a remote location allows NIEHS users to access restricted NIEHS network and intranet resources that are normally only accessible from on-site.
NIH is migrating to 2-factor authentication that requires that usage of NIH-issued PIV card for Remote Access VPN to improve NIH’s information security posture. A two-factor authentication process is an authentication approach that requires user to present two different kinds of evidence simultaneously, such as something that a user owns (PIV card) and something that a user knows (PIN number) for accessing an enterprise network.
Cisco AnyConnect VPN Client is required for using PIV card to connect to NIEHS/NIH VPN. This client can be found in the Cisco Folder under the “Start Menu” as shown in the following screenshot.

System Requirements
- Computer with a Pentium®-class processor or greater
- Windows XP/Vista/Windows 7
- Microsoft TCP/IP installed
- 10 MB hard disk space
- 128 MB for Windows XP, Vista and 7P
- Administrator privileges are required
Licensing
Client licenses free for licensed Cisco AnyConnect servers.
Required Items
- Remote access approval
- A broadband connection(RoadRunner, or DSL)
Software Location
Find the Cisco Client most appropriate for your operating system . If you are having difficulties please contact the NIEHS Help Desk at niehssd@niehs.nih.gov or call (866) 319-4347.
Software Installation
After downloading the above file, navigate to the VPN Sharepoint site, in the AnyConnect Installation Instructions section to read the installation instructions for Cisco AnyConnect VPN .
Software Updates
None at this time.
Start the Cisco VPN Client
- After installing and rebooting your computer, go to Start > Programs > Cisco > Cisco AnyConnect VPN Client > Cisco AnyConnect VPN Client. The VPN Client window displays.
- On the Connection window, under the Connection Entry, click the Cisco AnyConnect VPN Client.
- The AnyConnect Client will launch. A login window displays.

- Once you receive the screen below select one of the locations listed below.
The options are:- "niehs-onsitewirelessvpn.niehs.nih.gov" is for the wireless VPN at NIEHS. Select this option for accessing NIEHS wireless network.
- "niehs-remoteaccessvpn.niehs.nih.gov" is for the remote access to NIEHS VPN. Select this option while working remotely and need to access to NIEHS network.
- "onsitewirelessvpn.nih.gov" is for the wireless VPN at NIH. Choose this option while accessing NIH wireless network.
- "remoteaccessvpn.nih.gov" is for the Remote Access VPN at NIH. Select this option while working remotely and need to access NIH network.

- After a desired connection is selected from the drop-down menu, click on "Select" button to start the connection process. The program will prompt for user to insert a PIV card to the card reader if the card cannot be found.
- If the user's PIV card has not been inserted already, the user will see a screen asking to select a card:

- Once your PIV card is inserted and selected, the user will be prompted for their PIN for the PIV card:

If that is successful, the user will be connected automatically to the VPN, and need enter no other information. Look for the icon in the task bar at the lower right to confirm that the client is connected:
- To disconnect from the VPN, right-click on the icon in the task bar and select "disconnect." The PIV card will need to be present in the card reader throughout the connection period. Removal of the PIV card will terminate the connection to VPN.
Cisco Systems AnyConnect Client – Macintosh
General Information
Current Version: Cisco Systems AnyConnect Client
The Cisco AnyConnect Client enables you to establish secure, end-to-end encrypted tunnels. Using Cisco AnyConnect from a remote location allows NIEHS users to access restricted NIEHS network and intranet resources that are normally only accessible from on-site.
NIH is migrating to 2-factor authentication that requires that usage of NIH-issued PIV card for Remote Access VPN to improve NIH’s information security posture. A two-factor authentication process is an authentication approach that requires user to present two different kinds of evidence simultaneously, such as something that a user owns (PIV card) and something that a user knows (PIN number) for accessing an enterprise network.
Cisco AnyConnect VPN Client is required for using PIV card to connect to NIEHS/NIH VPN. This client can be found in Applications folder.
System Requirements
- Mac OS X 10.4 or higher
- Network or Wireless connection capability
- Administrator privileges on local machine
Licensing
Client licenses free for licensed Cisco VPN servers.
Required Items
- Remote access approval
- Active Network Connection through a broadband connection external to NIEHS (Earthlink, RoadRunner, BellSouth DSL, etc.).
Software Location
Find the Cisco Client most appropriate for your operating system . If you are having difficulties please contact the NIEHS Help Desk at niehssd@niehs.nih.gov or call (866) 319-4347.
Software Updates
None at this time.
Software Installation
- Download the Cisco client folder into the Applications folder
- Launch the Cisco Any Connect VPN client by double-clicking on the Cisco Any Connect icon.
- The following will appears as selections. The options are:
- "niehs-onsitewirelessvpn.niehs.nih.gov" is for the wireless VPN at NIEHS. Select this option for accessing NIEHS wireless network.
- "niehs-remoteaccessvpn.niehs.nih.gov" is for the remote access to NIEHS VPN. Select this option while working remotely and need to access to NIEHS network.
- "onsitewirelessvpn.nih.gov" is for the wireless VPN at NIH. Choose this option while accessing NIH wireless network.
- "remoteaccessvpn.nih.gov" is for the Remote Access VPN at NIH. Select this option while working remotely and need to access NIH network.

- Select "NIEHS-remoteaccessvpn.niehs.nih.gov" and press Select.

- At the keychain window enter in your NIH pin and press OK.

- The warning banner will appear, click Accept.

- To disconnect from Cisco AnyConnect, click Disconnect.

If you are having difficulties please contact the NIEHS Help Desk at niehssd@niehs.nih.gov or call (866) 319-4347.



Back to top