Accessing institutional clinical networks securely from outside hospital walls requires specialized digital architecture. The Penn Medicine extranet and remote access infrastructure allow authorized clinicians, staff, and external partners to log into internal systems, manage electronic health records, and exchange patient data safely. Understanding how these portals operate helps medical professionals navigate remote workflows without compromising security or compliance.
Modern healthcare delivery depends on continuous connectivity. When physicians leave physical clinics, they still need access to clinical apps, shared drives, and communication tools. The Penn Medicine network infrastructure bridges this gap by combining virtual private networks, two-factor authentication, and web-based remote portals.
Core Architecture of the Penn Medicine Remote Access Network
The underlying framework supporting remote connectivity for the University of Pennsylvania Health System relies on structured authentication protocols. Before any user views clinical data remotely, the system verifies their identity through multi-factor checks.
Two-Factor Authentication via Duo Mobile
Every login attempt from a personal or off-site device requires enrollment in a multi-factor authentication protocol. Penn Medicine utilizes Duo Mobile to verify users via push notifications or passcodes.
- Registration: Users must register their smartphone or tablet through the initial setup portal.
- Verification: Each session prompt requires secondary approval before clearing access to restricted clinical applications.
- Device Flexibility: Both iOS and Android devices are supported through respective app store downloads.
Web Portal Versus VPN Connections
Depending on whether an individual uses a personal device or an institution-managed laptop, the connection path differs.
- Remote Access Portal: Designed for personal computers, this web-based gateway delivers access to virtual desktops, clinical applications like PennChart, and institutional email without requiring a full system installation.
- Virtual Private Network (VPN): Reserved primarily for organization-managed laptops, the VPN client bridges external networks directly into the internal hospital domain.
Clinical Systems and Applications Available Remotely
Once authentication clears, users enter a centralized dashboard that houses daily operational tools. The architecture organizes applications based on clinical, administrative, and research needs.
PennChart and Citrix Integration
Electronic health record management runs largely through PennChart. Because heavy clinical software requires secure client environments, the extranet uses Citrix integration.
- Users launch the remote access portal via standard web browsers.
- Selecting clinical applications triggers a secure Citrix executable file (.exe) download that initializes the workspace.
- Patient charts, test results, and order entries load inside this virtualized session, preventing local data caching on personal hardware.
Shared Drives and Remote Desktop Protocol (RDP)
Administrative tasks often require files stored on local hospital servers. The network environment provides specific pathways for these requirements:
- Drive Mapping: Staff can expand employee resources to map shared network drives securely.
- Remote Desktop Connection (RDP): If standard portal applications don't cover specific workflow needs, authorized employees can request RDP access to their specific office desktop computer through the service desk. RDP sessions remain virtual and block unauthorized local downloads.
External Provider Collaboration and PhysicianLink
Healthcare systems don't operate in isolation. External community physicians who refer patients to Penn Medicine need streamlined communication channels to exchange medical histories and track ongoing treatments.
Electronic Medical Record Interoperability
To prevent fragmented patient care, Penn Medicine incorporates cross-platform record sharing:
- Penn PhysicianLink: An online portal allowing external medical practices to view patient records, track hospitalizations, and coordinate care plans.
- Carequality and Epic Integration: Practices utilizing Epic electronic health record systems can connect directly via Carequality frameworks to pull authorized clinical summaries.
- Direct Messaging: Secure, encrypted email-like addresses let outside providers send confidential health data directly to Penn clinicians.
Security Best Practices and Common Connection Mistakes
Maintaining HIPAA compliance during remote work requires strict adherence to security rules. Missteps during login procedures often trigger automated lockouts or security flags.
Common Pitfalls to Avoid
- Bookmarking Incorrect URLs: Users frequently bookmark intermediate login redirects like policy acceptance pages rather than the primary entry point (
pennmedaccess.uphs.upenn.edu), causing authentication loops. - Skipping Duo Registration: Attempting to bypass multi-factor setup steps results in immediate connection failure. All devices must finish registration before remote tools become visible.
- Using Unapproved Shared Hardware: RDP access is strictly limited to dedicated employee computers; logging into clinical portals from public kiosks or shared family computers violates institutional security policies.
For official updates and technical support guidelines, refer to the Penn Medicine Network Remote Access Guide. To learn more about patient-facing record management, visit MyChart by myPennMedicine. External practices looking to coordinate patient care can review options on the Penn Medicine Physician Resources Portal.
Frequently Asked Questions
What should I do if my Duo push notification doesn't arrive?
Check your internet connection or switch from push notification to entering a passcode manually generated inside the Duo Mobile app. If issues persist, contact the internal IT service desk for profile re-synchronization.
Can I access PennChart from a tablet or smartphone?
Yes, authorized clinical staff can access mobile-optimized clinical applications through supported remote portals and dedicated clinical apps, provided the device is enrolled in institutional security management.
How do external doctors request a PhysicianLink account?
External medical practices can apply for access by contacting the provider support line listed on the official Penn Medicine physician resource pages, supplying necessary practice credentials and NPI numbers.
Are shared network drives downloadable to personal computers?
No. Security protocols block direct downloads from virtualized shared drives onto unmanaged personal devices to protect sensitive health information and maintain strict data governance.
