Accessing clinical applications, email, and files away from the hospital network requires navigating specific security protocols. Penn Med remote access setup links your personal device or organization-issued laptop to internal networks through encrypted portals. Knowing the exact technical prerequisites saves time and prevents annoying login lockouts.
This guide covers how to connect securely using the official Penn Medicine Remote Access Portal. You'll find step-by-step connection sequences for personal computers, multi-factor authentication steps, and practical fixes for common Citrix or browser errors.
Understanding the Connection Options
Penn Medicine provides two primary pathways for remote connectivity, depending on whether you are using a hospital-managed laptop or a personal computer. Choosing the correct route prevents authentication errors right from the start.
The Remote Access Portal for Personal Devices
If you are logging in from a personal Windows computer or Mac, you must use the web-based Remote Access Portal. This environment utilizes Citrix technology to deliver a secure workspace without exposing the broader health system network to unmanaged hardware.
Through this portal, authorized clinical staff and administrative personnel can launch PennChart (Epic), check Outlook web mail, view shared network drives, and open virtual desktop sessions. Chromebooks and mobile phones have limited compatibility for heavy clinical apps, so a standard desktop or laptop running modern operating systems is required.
Virtual Private Network for Managed Laptops
Employees issued a dedicated Penn Medicine laptop should bypass the web portal for routine tasks. Instead, you connect directly via the organization's virtual private network client.
- Turn on your managed laptop and look for the Penn Medicine VPN shortcut on your desktop.
- If the shortcut is missing, type Big-IP Edge Client into your taskbar search bar.
- Enter your network credentials and complete the secondary verification prompt.
- Once connected, your device behaves as if it's plugged directly into an office Ethernet port.
Step-by-Step Connection Guide for Personal Computers
Connecting from a personal machine requires setting up security layers before launching clinical software. Follow this sequence to establish your first successful session.
Step 1: Enroll in Multi-Factor Authentication
Every remote connection requires two-factor verification to block unauthorized access. Penn Medicine uses Duo Mobile authentication for identity confirmation.
- Download the Duo Mobile app on your smartphone or tablet through the Apple App Store or Google Play Store.
- Complete the initial registration using the instructions provided on the internal network portal.
- Set up a secondary backup method, such as a hardware security key or text message passcodes, in case your primary phone is unavailable.
Step 2: Install the Required Citrix Client
Web applications on the portal run inside virtualized environments that require local client software.
- Navigate to the Penn Medicine Network page.
- Download and run the appropriate Citrix Workspace App or receiver for your Windows or Mac operating system.
- Complete the installation wizard and restart your web browser to ensure the plugin registers correctly.
Step 3: Log In to the Portal
- Open your web browser and go directly to the official Penn Med Remote Access Portal. Bookmark this specific address rather than intermediate redirect links to avoid session errors.
- Enter your network username and password.
- Respond to the Duo Push notification sent to your mobile device to verify your identity.
- Select the PennChart & Citrix Apps menu to launch clinical workflows. When prompted to download a small configuration file (such as a launch.exe), open it immediately to initialize your workspace.
Accessing Advanced Workspaces and Files
Once logged into the portal, you aren't limited to just email and web tools. You can also interact with shared internal storage and remote desktop sessions.
Navigating Shared Network Drives
To view departmental files from a personal computer, expand the Employee Resources tab on the portal dashboard. Click on the link for Drives and Remote Access on the right side of the screen.
This view provides secure access to mapped network directories. Keep in mind that virtual drive mapping lets you open and edit compatible file types directly, but security policies block downloading sensitive patient or corporate data onto unmanaged personal hard drives.
Requesting Remote Desktop Protocol Access
If web applications don't meet your specific daily requirements, you can request Remote Desktop Protocol (RDP) access through the service desk. This links your session directly to your physical office computer.
- Locate your physical work computer's exact Computer Name, which is usually tagged on a sticker on top of the tower or monitor.
- Submit this name to the IT service desk to expedite your configuration.
- RDP access is strictly restricted to dedicated employee machines and is prohibited on shared clinical devices.
Troubleshooting Common Login Roadblocks
Remote connections occasionally throw errors due to browser caching, outdated plugins, or security timeouts. Applying these fixes resolves most technical failures quickly.
- Single Browser Session Rule: Always stick to a single browser window with multiple tabs during your remote session. Opening multiple separate windows often triggers authentication token conflicts and session drops.
- Citrix Launch Failures: If clicking PennChart does nothing, look at the bottom of your Chrome or Edge browser window for a downloaded
.exeor.icafile. Click it manually to force the virtual session to open. - Duo Push Delays: If your phone doesn't receive the verification prompt, check your cellular or Wi-Fi data connection, or open the Duo Mobile app manually to generate a six-digit offline passcode.
- Stale Bookmarks: Avoid saving dynamic policy URLs or redirect strings. Always start your workflow from the root access link to prevent 403 forbidden errors.
Frequently Asked Questions
Can I access Penn Medicine remote systems from a Chromebook?
No. Chromebooks lack the operating system architecture required to run the mandatory Citrix client plugins needed for clinical apps like PennChart. You must use a standard Windows PC, Mac, or a hospital-issued device.
What should I do if my Duo device is lost or replaced?
If you get a new phone or lose your authenticated device, you cannot approve your own login prompt. Contact the internal IT service desk or your local PennKey support administrator to reset your multi-factor authentication enrollment securely.
Why am I unable to download files from shared drives to my personal computer?
Penn Medicine security architecture blocks direct file downloads onto unmanaged personal hardware to maintain strict patient privacy standards and prevent data leaks. You can view and edit documents inside the virtual session, but local saves are restricted.
How do I fix an infinite loading loop when launching Citrix?
Clear your browser cache, close all open browser windows entirely, and start a fresh single session. If the problem persists, uninstall your current Citrix Workspace App, download the newest installation package from the official network page, and reinstall.
