Overview

---

This guide is intended to provide system administrators and IT support teams with a centralized resource for all support articles related to Secure Connect Network Access Control (NAC) Enforcement.

 On this page: 

• JAMF Guides
• MECM Guides
• Intune Guides
• Security Software
• VPN
• Requesting Exceptions
• Additional Resources
• How can ITS Help You?

Critical Concepts 

---

• Mobile devices, including smartphones and tablets, are currently out of scope for the Secure Connect project.
  • Chromebooks are considered mobile devices for this project. If a Chromebook receives a pop-up for internet-only access when attempting to connect to UCSD-Protected, please refer to the following article: Chromebooks - Internet-Only Captive Portal on UCSD-Protected.
• Only paid employees are included in this phase of Secure Connect NAC compliance.
• Linux devices must go through the Exception Process to gain access to trusted resources.
• Printers can experience connectivity issues with devices when enforced on UCSD-Protected. To improve connectivity when printing, printers and devices can use the Eduroam wireless network. To configure a printer for Eduroam access, please refer to the following article: How to Set Up a Printer on Eduroam Wireless Network.
• Support groups needing additional assistance with customers, such as lab environments, can request help from the ITS Service Desk.

JAMF

---

Document	Audience	Summary
Secure Connect NAC: A JAMF Implementation Guide	Sysadmins, UISLs, Support IT team/agents	General Instructions for sysadmins using JAMF to meet Secure Connect NAC compliance Potential troubleshooting options

MECM

---

Document	Audience	Summary
Secure Connect NAC: A MECM Implementation Guide	Sysadmins, UISLs, Support IT team/agents	General Instructions for sysadmins using MECM (formerly SCCM) to meet Secure Connect NAC compliance Potential troubleshooting options

Intune

---

Document	Audience	Summary
Intune Installation Guide: Windows	UC San Diego Community	Step by step instructions on how to install Intune on a Windows device including a tutorial video.
Intune Installation Guide: Mac	UC San Diego Community	Step by step instructions on how to install Intune on a Mac device including a tutorial video.
Unenroll and Uninstall Intune, Qualys, and Trellix	UC San Diego Community	Step by step instructions on how to unenroll from and uninstall the Intune Company Portal for Mac and Windows, and uninstall Qualys and Trellix from Mac, Windows, and Linux devices.
BitLocker	UC San Diego Community	Information on what BitLocker is, how to check if it is enabled, how to find a recovery key, and how to unlock a device locked by BitLocker, especially targeted towards Windows users enrolled in Intune.
Intune Admin Guide for IT Teams	Sysadmins, UISLs, and Support IT team/agents that are managing their own Intune Admin	Information on how to gain Intune Admin access as well as what you should do after gaining the access.  Potential troubleshooting techniques
Receiving Intune Prompt on iPad	UC San Diego Community	If you are receiving Intune prompts on your iPad, follow these instructions!
Chromebooks - Internet-Only Captive Portal on UCSD-Protected	UC San Diego Community	If you are receiving Intune prompts on your Chromebook, follow these instructions!

Security Software

---

These are instructions on how to manually install the mandated security software. Please note that for the VPN, Qualys will not appear as one of the Security Products under the ISE Posture module.

Document	Audience	Summary
Secure Connect: Trellix Endpoint Security Manual Installation	UC San Diego Internal Community (Please log into support.ucsd.edu access this article)	Step by step instructions on how to manually install Trellix on a Windows, MacOS, and Linux device.
Secure Connect: Qualys Cloud Agent Manual Installation	UC San Diego Internal Community (Please log into support.ucsd.edu access this article)	Step by step instructions on how to manually install Qualys on a Windows, MacOS, and Linux device.

VPN

---

For departments with Intune-managed devices, please contact Laurel Iinuma (liinuma@ucsd.edu) for an Intune app that can push the necessary XML file to the VPN clients on these devices.

Document	Audience	Summary
Virtual Private Networks (VPN) at UCSD	UC San Diego Community	General information about the VPN at UCSD and all groups available to the UC San Diego community, including information about the Secure Connect VPN groups.
Configure VPN Client on your Computer, Tablet, or Phone	UC San Diego Community	Information about how to install the VPN Client.
Duo Two-Step Login on the VPN	UC San Diego Community	Explanation on how to use DUO with VPN with an explanation of the Secure Connect VPN groups.
Secure Connect VPN Troubleshooting	UC San Diego Community	Troubleshooting guide with several known Secure Connect VPN “problems” and their solutions, and steps on how to check the status of the VPN client via the “Message History”.

Exception Process

---

Information on the Exception Process for end users can be found on the Blink article, Exception Process.

Document	Audience	Summary
Submitting the Secure Connect Exception Request Form	UC San Diego Community	Step by step instructions on how to fill out the Secure Connect Exception form.

Additional Resources

---

This is a collection of resources that are published to provide information on the Secure Connect project and related policies.

Document	Audience	Summary
Secure Connect	UC San Diego Community	Main Blink article outlining all parts to the Secure Connect project, goals and reason for the project, and FAQs.
About Trusted Resources	UC San Diego Community	Information on what UC San Diego defines as “trusted resources” and how it impacts the Secure Connect NAC enforcement.
Trellix EDR	UC San Diego Community	Information on what Trellix EDR is and how it will be used by UC San Diego.
Qualys VM	UC San Diego Community	Information on what Qualys VM is and how it will be used by UC San Diego.
Intune MDM	UC San Diego Community	Information on what Intune MDM is, how it works, and how it will be used by UC San Diego.