SonicWALL Secure Remote Access Appliances SonicWALL SRA SSL VPN 5.
Table of Contents Using This Guide About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Organization of this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Guide Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Icons Used in this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Installing NetExtender on Android Smartphones. . . . . . . . . . . . . . . . . . . . . . . . .63 Using NetExtender on Android Smartphones . . . . . . . . . . . . . . . . . . . . . . . . . . .66 Related Documents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80 Using Virtual Assist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80 Understanding Virtual Assist . . . . . . . . . . . . . . . . . . . . . . .
Using This Guide About this Guide Welcome to the SonicWALL SSL VPN User’s Guide. This manual is a user's guide. It provides information on using the SonicWALL SSL VPN user portal called Virtual Office that allows you to create bookmarks and run services over the SonicWALL SSL VPN SRA security appliance. Note Always check http://www.sonicwall.com/us/Support.html for the latest version of this manual as well as other SonicWALL products and services documentation.
Guide Conventions Guide Conventions The following conventions used in this guide are as follows: Convention Use Bold Highlights dialog box, window, and screen names. Also highlights buttons. Also used for file names and text or values you are being instructed to type into the interface. Italic Indicates the name of a technical manual. Also indicates emphasis on certain words in a sentence. Sometimes indicates the first instance of a significant term or concept.
Guide Conventions SonicWALL Technical Support For timely resolution of technical support questions, visit SonicWALL on the Internet at http://www.sonicwall.com/us/Support.html. Web-based resources are available to help you resolve most technical issues or contact SonicWALL Technical Support. To contact SonicWALL telephone support, see the telephone numbers listed below: North America Telephone Support U.S./Canada - 888.777.1476 or +1.408.752.7819 International Telephone Support Australia - + 1.800.35.
Guide Conventions More Information on SonicWALL Products Contact SonicWALL, Inc. for information about SonicWALL products and services at: Web: Email: Phone: Fax: http://www.sonicwall.com sales@sonicwall.com (408) 745-9600 (408)745-9300 Current Documentation Check the SonicWALL documentation Web site for the latest versions of all SonicWALL product documentation at http://www.sonicwall.com/us/Support.
Virtual Office Overview This chapter provides an overview of the SonicWALL SSL VPN user portal. It also includes an introduction to the SRA appliance and its features and applications.
Browser Requirements • Using the NetExtender SSL VPN client – The SonicWALL SSL VPN network extension client, NetExtender, is available through the SSL VPN Virtual Office portal via an ActiveX control or through stand-alone applications for Windows, Linux, MacOS, Windows Mobile, and Android smartphone platforms. To connect using the SSL VPN client, log into the portal, download the installer application and then launch the NetExtender connector to establish the SSL VPN tunnel.
Browser Requirements The following table provides specific browser requirements. How to read this table: pplication Proxy eatures and Browser Requirements NetExtender Windows XP Windows Vista Windows 7 Linux MacOS X browser browser independent independent (Java 1.6.0_10+)(Java 1.6.0_10+) RDP5 (Java 1.6.0_10) RDP5 (ActiveX) Feature Browser OS Platform RDP5 (Java 1.6.0_10+) Minimum Recommended Browser Versions: 8 9 16 8 9 16 8 9 16 8 9 5 16 VNC (Java 1.6.0_10+) Telnet (Java 1.6.
Web Management Interface Overview Web Management Interface Overview From your workstation at your remote location, launch an approved Web browser and browse to your SRA appliance at the URL provided to you by your network administrator. Step 1 Open a Web browser and enter https://192.168.200.1 (the default LAN management IP address) in the Location or Address field. Step 2 A security warning may appear. Click the Yes button to continue.
Web Management Interface Overview Logging in as a user takes you directly to Virtual Office. The Virtual Office Home page displays as shown here. Note The Virtual Office content will vary based on the configuration of your network administrator. Some bookmarks and services described in the SonicWALL SSL VPN User’s Guide may not be displayed when you log into the SonicWALL SRA security appliance. SonicWALL SSL VPN 5.
Web Management Interface Overview The Virtual Office consists of the nodes described in the following table. 14 Node Description File Shares Provides access to the File Shares utility, which gives remote users with a secure Web interface access to Microsoft File Shares using the CIFS (Common Internet File System) or SMB (Server Message Block) protocols.
Web Management Interface Overview The Home page provides customized content and links to network resources. The Home Page may contain support contact information, VPN instructions, company news, or technical updates. Only a Web browser is required to access intranet Web sites, File Shares, and FTP sites. VNC, Telnet and SSHv1 require Java. SSHv2 provides stronger encryption than SSHv1, requires SUN JRE 1.4 or above and can only connect to servers that support SSHv2.
Web Management Interface Overview 16 SonicWALL SSL VPN 5.
Using Virtual Office Features This chapter provides details on how to use the features in the SonicWALL SSL VPN user portal, including NetExtender, configuring bookmarks, accessing services, and using file shares.
Using Two-Factor Authentication Using Two-Factor Authentication The following sections describe how to log in to the SSL VPN Virtual Office portal using twofactor authentication: • “User Prerequisites” on page 18 • “User Configuration Tasks” on page 18 User Prerequisites Before you can log in using two-factor authentication, you must meet the following prerequisites: • Your administrator has created your user account.
Using Two-Factor Authentication Logging into the SSL VPN Virtual Office Using RSA Two-Factor Authentication To log in to the SonicWALL SSL VPN Virtual Office using RSA two-factor authentication, perform the following steps. Step 1 Enter the IP address of the SRA appliance in your computers browser. The authentication window is displayed. Step 2 Enter your username in the Username field.
Using Two-Factor Authentication Creating a New PIN The RSA Authentication Manager automatically determines when users are required to create a new PIN. will determines that user associated with a particular token requires a new PIN. The SRA appliance prompts the user to enter new PIN. Step 1 Enter the PIN in the New PIN field and again in the Confirm PIN field and click OK. The PIN must be between 4 and 8 characters long.
Using Two-Factor Authentication VASCO Two-Factor User Authentication Process The following sections describe user tasks when using RSA two-factor authentication: • “Logging into the SSL VPN Virtual Office Using VASCO Two-Factor Authentication” on page 21 • “Creating a New PIN” on page 20 Logging into the SSL VPN Virtual Office Using VASCO Two-Factor Authentication To log in to the SonicWALL SSL VPN Virtual Office using VASCO two-factor authentication, perform the following steps: Step 1 Enter the IP a
Using Two-Factor Authentication Other RADIUS Server Two-Factor Authentication Process To log in to the SonicWALL SSL VPN Virtual Office using another type of RADIUS server for two-factor authentication, perform the following steps: Step 1 Enter the IP address of the SRA appliance in your computers browser. The authentication window is displayed. Step 2 Enter your username in the Username field. Step 3 Enter your password in the Password field. Step 4 Select the appropriate Domain.
Using One-Time Passwords Step 7 You will then be prompted to “Please enter the M.ID Passcode.” Enter the passcode received through email or text message in the Challenge field and click OK.
Using One-Time Passwords User Configuration Tasks To use the One-Time Password feature, perform the following steps: Step 1 If you are not logged into the SSL VPN Virtual Office user interface, open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter. Type in your user name in the User Name field and your password in the Password field, then select the appropriate domain from the Domain pull-down. Click Login.
Using One-Time Passwords • Nextel: 4085551212@messaging.nextel.com • Virgin Mobile: 4085551212@vmobl.com • Qwest: 4085551212@qwestmp.com For a more complete list, see the SonicWALL SSL VPN Administrator's Guide. Verifying User One-Time Password Configuration If you are successfully logged in to Virtual Office, you have correctly used the One-Time Password feature.
Using NetExtender Using NetExtender The following sections describe how to use NetExtender: • “User Prerequisites” section on page 26 • “User Configuration Tasks” section on page 28 • “Verifying NetExtender Operation from the System Tray” section on page 47 User Prerequisites Prerequisites for Windows Clients: Windows clients must meet the following prerequisites in order to use NetExtender: • One of the following platforms: – Windows 7 Services Pack 1 – Windows Vista Service Pack 2 (32-bit & 64-bit
Using NetExtender Prerequisites for Linux Clients: Linux 32-bit or 64-bit clients are supported for NetExtender when running one of the following distributions (32-bit or 64-bit): • Linux Fedora Core 15 or higher, Ubuntu 11.10 or higher, or OpenSUSE 10.3 or higher • Java 1.5 and higher is required for using the NetExtender GUI. The NetExtender client has been known to work on other distributions as well, but these are not officially supported.
Using NetExtender Note Only rooted devices are supported for NetExtender Android in SonicWALL SSL VPN. The rooting requirement is due to limitations and restrictions of the Android platform. A layer 3 VPN client like NetExtender requires root permission for certain necessary OS level operations. Until a future version of the Android OS provides a flexible API to do these operations without root access, the rooting requirement will remain. Warning Rooting your phone may void your warranty.
Using NetExtender Windows Mobile Platform • “Installing and Using NetExtender for Windows Mobile” section on page 59 Android Smartphone Platform • “Installing NetExtender on Android Smartphones” section on page 63 • “Using NetExtender on Android Smartphones” section on page 66 Installing NetExtender Using the Mozilla Firefox Browser To use NetExtender for the first time using the Mozilla Firefox browser, perform the following: Step 1 To launch NetExtender, first log in to the SSL VPN portal.
Using NetExtender 30 Step 4 The Firefox Software Installation window displays. Click Install to allow Virtual Office to install NetExtender, Step 5 Firefox may prompt you to restart your browser. If so, close Firefox, relaunch it, and return to the Virtual Office window. Click NetExtender again. Step 6 You may see additional security warnings. A User Account Control window may appear asking “Do you want to allow this program to make changes to this computer?” Click Yes.
Using NetExtender Step 8 When NetExtender completes installing, the NetExtender Status window displays, indicating that NetExtender successfully connected. Closing the windows (clicking on the x icon in the upper right corner of the window) will not close the NetExtender session, but will minimize it to the system tray for continued operation. Step 9 Review the following table to understand the fields in the NetExtender Status window.
Using NetExtender Installing NetExtender Using the Internet Explorer Browser SonicWALL SSL VPN NetExtender is fully compatible with Microsoft Windows 7 32-bit and 64bit, and supports the same functionality as with other Windows operating systems. Note It may be necessary to restart your computer when installing NetExtender on Windows Vista or Windows 7. Internet Explorer Prerequisites It is recommended that you add the URL or domain name of your SSL VPN server to Internet Explorer’s trusted sites list.
Using NetExtender Installing NetExtender from Internet Explorer To install and launch NetExtender for the first time using the Internet Explorer browser, perform the following: Step 1 Log in to the SSL VPN Virtual Office portal. Step 2 Click the NetExtender button. Step 3 A User Account Control window may appear asking “Do you want to allow this program to make changes to this computer?” Click Yes.
Using NetExtender Step 7 If an older version of NetExtender is installed on the computer, the NetExtender launcher will remove the old version and then install the new version. Step 8 When NetExtender completes installing, the NetExtender Status window displays, indicating that NetExtender successfully connected.
Using NetExtender Step 3 The IP address of the last SSL VPN server you connected to is displayed in the SSL VPN Server field. To display a list of recent SSL VPN servers you have connected to, click on the arrow. Step 4 Enter your username and password. Step 5 The last domain you connected to is displayed in the Domain field. Note Step 6 The NetExtender client will report an error message if the provided domain is invalid when you attempt to connect.
Using NetExtender 36 Step 2 The Connection Profiles tab displays the SSL VPN connection profiles you have used, including the IP address of the SSL VPN server, the domain, and the username. Step 3 To create a shortcut on your desktop that will launch NetExtender with the specified profile, highlight the profile and click Create Shortcut. Step 4 To delete a profile, highlight it by clicking on it and then click the Remove buttons. Click the Remove All buttons to delete all connection profiles.
Using NetExtender Step 8 Select Display Connect/Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon. Step 9 Select Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection. Step 10 Select Display precise number in connection status to display precise byte value information in the connection status.
Using NetExtender Note Enabling this feature may cause connection delays while remote client’s printers and drives are mapped. Make sure the domain controller and any machines in the logon script are accessible via NetExtender routes. Step 4 To enable the script that runs when NetExtender connects, select the Automatically execute the batch file “NxConnect.bat” checkbox. Optionally, you may now also select to Hide the console window.
Using NetExtender Step 9 For example, to launch Microsoft Outlook, enter the following command: C:\Program Files\Microsoft Office\OFFICE11\outlook.exe Step 10 To open a Web site in your default browser, enter a command in the following format: start http://www.website.com Step 11 To open a file on your computer, enter a command in the following format: C:\Path-to-file\myFile.doc Step 12 When you have finished editing the scripts, save the file and close it.
Using NetExtender – Use proxy server - Select this option to enter the Address and Port of the proxy server. Optionally, you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server. If required, enter a User name and Password for the proxy server.
Using NetExtender Configuring NetExtender Advanced Properties Within the NetExtender Properties dialog box, click on the Advanced heading in the menu on the left panel. The available options allow you to adjust advanced settings on NetExtender network properties and protocols. NetExtender allows users to customize the link speed that the NetExtender adapter reports to the operating system.
Using NetExtender Viewing the NetExtender Log The NetExtender log displays information on NetExtender session events. The log is a file named NetExtender.dbg. It is stored in the directory: C:\Program Files\SonicWALL\SSL VPN\NetExtender. To view the NetExtender log, right click on the NetExtender icon in the system tray, and click View Log, click on the Log icon on the main status page. To view details of a log message, double-click on a log entry, or go to View > Log Detail to open the Log Detail pane.
Using NetExtender To filter the log by type of entry, go to Filter > Level and select one of the level categories. The available options are Fatal, Error, Warning, and Info, in descending order of severity. The log displays all entries that match or exceed the severity level. For example, when selecting the Error level, the log displays all Error and Fatal entries, but not Warning or Info entries. To view the Debug Log, either click the Debug Log icon or go to Log > Debug Log. SonicWALL SSL VPN 5.
Using NetExtender Note It may take several minutes for the Debug Log to load. During this time, the Log window will not be accessible, although you can open a new Log window while the Debug Log is loading. To clear the log, click on Log > Clear Log. Disconnecting NetExtender To disconnect NetExtender, perform the following steps: Step 1 Right click on the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect. Step 2 Wait several seconds.
Using NetExtender When using releases prior to 2.5, users should periodically launch NetExtender from the SonicWALL Virtual Office to ensure they have the latest version. Prior to release 2.5, the standalone NetExtender does not check for updates when it is launched directly from a user’s computer. Changing Passwords Before connecting to the new version of NetExtender, users may be required to reset their password by suppling their old password, along with providing and re-verifying a new one.
Using NetExtender Once the pin has been accepted, you must wait for the token to change before logging in to NetExtender with the new passcode. During authentication, the SSL VPN server may be configured by the administrator to request a client certificate. In this case, users must select a client certificate to use when connecting. Uninstalling NetExtender The NetExtender utility is automatically installed on your computer.
Using NetExtender Verifying NetExtender Operation from the System Tray To view options in the NetExtender system tray, right click on the NetExtender icon in the system tray. The following are some tasks you can perform with the system tray. Displaying Route Information To display the routes that NetExtender has installed on your system, click the Route Information option in the system tray menu. The system tray menu displays the default route and the associated subnet mask.
Using NetExtender Step 3 Enter NECLI.exe. The NetExtender CLI launches and displays a summary of the available commands. C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender>NECLI.exe Copyright (c) 2011 SonicWALL, Inc. ,,,,,,,,,,,,,,, ,,,mmbbbbbb11111111111111111111111bbbbbmm,,, ,,,b||PPPPPPP||````````````````|PPPPPPPPP111111111111bbm,, `````` `````PPPP111111111bm, ```PP1111111bm, `PP111111b, |111111: Application Version 5.5.155 .1111P|. Copyright (c) 2011 SonicWALL, Inc.
Using NetExtender Table 1 NetExtender CLI Commands NECLI displayprofile Displays all NetExtender profiles. -s server (Optional) Displays only the profiles that are saved for the specified server. -u user-name (Optional) Displays only the profiles that are saved for the specified user name. -d domain-name (Optional) Displays only the profiles that are saved for the specified domain name. NECLI queryproxy Checks the connect to the proxy server. NECLI reconnect Attempts to reconnect to the server.
Using NetExtender To install NetExtender on your MacOS system, perform the following tasks: 50 Step 1 Log in to the SonicWALL Virtual Office. Step 2 Click the NetExtender button. Step 3 The Virtual Office displays the status of NetExtender installation. A pop-up window may appear, prompting you to accept a certificate. Click Trust. Step 4 A second pop-up window may appear, prompting you to accept a certificate. Click Trust. SonicWALL SSL VPN 5.
Using NetExtender Step 5 When NetExtender is successfully installed and connected, the NetExtender status window displays. Using NetExtender on MacOS Step 1 To launch NetExtender, go the Applications folder in the Finder and double click on NetExtender.app. Step 2 The first time you connect, you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field. Step 3 Enter your username and password. Step 4 The first time you connect, you must enter the domain name.
Using NetExtender Step 7 When NetExtender is connected, the NetExtender icon is displayed in the status bar at the top right of your display. Click on the icon to display NetExtender options. Step 8 To display a summary of your NetExtender session, click Connection Status. Step 9 To view the routes that NetExtender has installed, select the Routes tab in the main NetExtender window. Step 10 To view the NetExtender Log, go to Window > Log. 52 SonicWALL SSL VPN 5.
Using NetExtender Step 11 To generate a diagnostic report with detailed information on NetExtender performance, go to Help > Generate diagnostic report. Step 12 Click Save to save the diagnostic report using the default nxdiag.txt file name in your NetExtender directory. Installing NetExtender on Linux SonicWALL SSL VPN supports NetExtender on Linux.
Using NetExtender Step 2 Note Step 3 54 Click the NetExtender button. A pop-up window indicates that you have chosen to open a .tgz file. Click OK to save it to your default download directory. You must be logged in as root to install NetExtender, although many Linux systems will allow the sudo ./install command to be used if you are not logged in as root. To install NetExtender from the CLI, navigate to the directory where you saved the .tgz file and enter the tar -zxf NetExtender.tgz command.
Using NetExtender Step 4 Enter the cd netExtenderClient/ command. Step 5 Enter su -C “ ./install” to install NetExtender. Step 6 Enter your system password. Step 7 The installer will ask if you want non-root users to be able to run NetExtender. Enter either y for yes or n for no. Note To allow non-root users to run NetExtender, the installer will set PPPD to run as root. This may be considered a security risk.
Using NetExtender 56 Step 2 The first time you connect, you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field. NetExtender will remember the server name in the future. Step 3 Enter your username and password. Step 4 The first time you connect, you must enter the domain name. The domain name is casesensitive. NetExtender will remember the domain name in the future. Step 5 To view the NetExtender routes, select the Routes tab in the main NetExtender window.
Using NetExtender Step 6 To view the NetExtender DNS server information, select the DNS tab in the main NetExtender window. Step 7 To configure NetExtender Preferences, select NetExtender > Preferences.
Using NetExtender Step 9 The Advanced tab of the NetExtender Preferences window provides two additional options: • MTU - Sets the Maximum Transmission Unit (MTU) size, which is the largest packet size that a router can forward without needing to fragment the packet. • PPP Sync Mode - Specifies synchronous PPP. By default, this option is disabled and asynchronous PPP is used. Step 10 To view the NetExtender Log, go to NetExtender > Log.
Using NetExtender Installing and Using NetExtender for Windows Mobile SonicWALL SSL VPN now supports NetExtender for the Windows Mobile platform.
Using NetExtender Step 10 Click Connect. When NetExtender successfully connects, the NetExtender Status window displays. Select the Show NetExtender Routes checkbox to see routes. Step 11 Click on the Menu button to see the NetExtender properties menu. Step 12 Select the Sent & Received menu tab to adjust the metric used for sent and received statistics on the status window. Select the Throughput menu tab to adjust the throughput measurement displayed on the status window.
Using NetExtender • System Settings - Provides several configuration options. – Hide NetExtender when closing window - Hides NetExtender when you click the ok button. – Display precise number in status - Displays the exact numbers of sent and receive data. – Automatically establish the underlying connection - Uses the Windows Mobile Connection Manager to establish the device’s connection to the mobile network.
Using NetExtender • Proxy Settings - Provides the ability to manually specify a proxy server. Passwords in NetExtender Mobile NetExtender Mobile supports the ability for users to change passwords. Also, if configured by an administrator, users can be alerted that the their password is scheduled to expire soon. If a user must change their password, a screen prompt will ask for the user’s old password, along with a new password and re-verification of the new password.
Using NetExtender Installing NetExtender on Android Smartphones SonicWALL SSL VPN supports NetExtender on smartphones running the Android operating system. The NetExtender Android client supports the following features: • One-time passwords • Two-factor authentication • HTTP/HTTPS proxy • Connection profiles The NetExtender Android installer is available on MySonicWALL in the standard apk package format. The installer is also available from Android Market as the NetExtender Technology Preview.
Using NetExtender 64 Step 7 On the Android smartphone, pull down the notifications. Step 8 Tap USB connected to connect to the computer. The next screen shows the connection. SonicWALL SSL VPN 5.
Using NetExtender Step 9 Tap Turn on USB storage to prepare for copying the apk installer to the Android smartphone. Step 10 On the computer, copy the apk file to the Android SD card. Step 11 Unmount the Android SD card from your computer. On Windows, it will show up under “My Computer” as a new drive. On Mac, a new drive will show up on the desktop. Step 12 After unmounting the Android SD card from your computer, tap Turn off USB storage.
Using NetExtender Using NetExtender on Android Smartphones Instructions for using NetExtender on your Android smartphone are available in the following sections: • “Connecting to NetExtender” on page 66 • “Exiting or Disconnecting from NetExtender” on page 71 • “Checking Status, Routes, and DNS Settings” on page 73 • “Configuring Profiles, Preferences, and Proxy Servers” on page 74 • “Changing Your Password” on page 78 Connecting to NetExtender To launch NetExtender on your Android smartphone and
Using NetExtender Step 2 Tap Connect to accept the default option (Save user name & password) or select a Save... or Always ask... option from the drop-down list. The available profile options depend on how NetExtender is configured on the SonicWALL appliance. Step 3 The smartphone displays the Login - Initializing engine screen. After a successful connection, the entered values are saved as a profile that you can select when starting NetExtender.
Using NetExtender Step 4 If One Time Password is enabled on the SonicWALL SRA appliance, the One Time Password prompt is displayed. Enter the temporary password that was emailed to your configured account, and tap OK. If your smartphone is synchronized to your email account, you can pull down the email notification from the top bar, or switch to your home page and access your email from there.
Using NetExtender Step 6 If you chose to allow the system to generate the PIN, the display then prompts you to accept the generated PIN. Tap Yes to accept it, or tap No to have the system generate a different PIN. You are prompted each time until you tap Yes. Step 7 If you chose to generate the PIN yourself, type a PIN into the PIN field and again in the second field to confirm it. Typically, PINs are required to be 4 to 8 digits. Tap OK. SonicWALL SSL VPN 5.
Using NetExtender Step 8 After entering the PIN or creating a new PIN, the Two Factor Authentication process requires you to enter the token code shown on your token device. Wait for the token code to change on the device, and then type the code into the field on your smartphone and tap OK. Step 9 If a proxy server is configured in the smartphone (via Preferences), the Proxy Authentication screen is displayed next. Enter the username and password for the proxy and tap OK.
Using NetExtender Step 11 If the NetExtender service running on the smartphone has a problem or has stopped running, the following screen is displayed. Tap Exit to quit the application. You may need to restart the service, possibly by turning the phone off and on again, or you may need to re-install NetExtender. Exiting or Disconnecting from NetExtender EXIT Exiting and restarting NetExtender is useful when NetExtender cannot connect, possibly after a long period of disuse.
Using NetExtender DISCONNECT To disconnect NetExtender, perform the following steps: Step 1 Pull down the notification bar and click NetExtender to open the NetExtender user interface. Step 2 In the NetExtender user interface, tap the Disconnect button and tap OK to confirm. NetExtender notifies you while disconnecting. 72 SonicWALL SSL VPN 5.
Using NetExtender Checking Status, Routes, and DNS Settings While NetExtender is connected, you can view status information, routes, and DNS settings on your smartphone. Step 1 To open the NetExtender user interface, pull down the notification bar and tap NetExtender. Step 2 To view status information, tap the Status tab. You can tap on the Sent, Received, or Throughput fields to change the units between bytes and packets. If you are connected to a SonicWALL SRA appliance running 5.
Using NetExtender Step 3 To view NetExtender routes, tap the Routes tab. The display shows all subnets currently available from the smartphone. Step 4 To view the configured DNS servers, tap the DNS tab. NetExtender Android supports DNS only; WINS or DNS suffix are not supported.
Using NetExtender PROFILES Step 2 To display the NetExtender Profiles screen, start NetExtender and then press the options or menu button on the smartphone and tap Profiles. Step 3 To display the Remove selected, Remove all, and Close options on this NetExtender Profiles screen, press the options button while on the screen. Step 4 Tap Remove selected to remove the profiles that have check marks next to them. Step 5 Tap Remove all to remove all profiles from the smartphone.
Using NetExtender Step 7 To display the Remove this profile, Remove selected profiles, and Remove all profiles options, press and hold the NetExtender Profiles screen. Step 8 Tap Remove this profile to remove the profile that you pressed on to bring up this screen. Step 9 Tap Remove selected to remove the profiles that have check marks next to them. Step 10 Tap Remove all to remove all profiles from the smartphone. Step 11 Tap Close to close the option display on this screen.
Using NetExtender PREFERENCES / PROXY SETTINGS Step 14 To configure NetExtender preferences including proxy and notification settings, select the Preferences option. Step 15 Under General settings, select the Connection notification checkbox to display the NetExtender traffic indicator in the notification bar. Clear the checkbox to prevent the indicator from being displayed.
Using NetExtender NetExtender Android supports basic authentication using a username and password for proxy servers. Microsoft NTLM authentication is not currently supported. Step 20 When finished configuring the proxy server settings, tap OK. Changing Your Password To change your password when prompted by NetExtender, perform the following steps: Step 1 78 After connecting, a password expiration notice may be displayed on your Android smartphone.
Using NetExtender Step 2 If you select Yes, the Change password screen is displayed. Type your password into the Current Password field, then type a new password into the New password field and again into the Type it again field. Tap OK. Step 3 If your password expires before you change it, the Change password screen is displayed when you connect, with the message “Login failed – you must change your password.
Using Virtual Assist Related Documents The following Technical Notes provide more information on advanced NetExtender scenarios: • Running NetExtender on a Different TCP Port: http://www.sonicwall.com/us/support/2134_3154.html • Using the SonicWALL CDP Agent over a SonicWALL NetExtender Connection http://www.sonicwall.com/us/support/2134_3487.html • Using SonicWALL NetExtender to Access FTP Servers http://www.sonicwall.com/us/support/2134_3465.
Using Virtual Assist There are two sides to a Virtual Assist session: the customer view and the technician view. The customer is the person requesting assistance on their computer. The technician is the person providing assistance. A Virtual Assist session consists of the following sequence of events: 1. The technician launches Virtual Assist from the SonicWALL SSL VPN Virtual Office. 2. The technician monitors the Assistance Queue for customers requesting assistance. 3.
Using Virtual Assist 82 Step 3 The first time you launch Virtual Assist, you will be prompted to install the Virtual Assist plugin and client. Step 4 Click on the Allow button. A plugin installation window displays. Click Install Now. The Virtual Assist plugin and client installs. You may be prompted to restart your browser. Step 5 You can now launch Virtual Assist either from the Virtual Office window or from a shortcut that is added your Programs list under Window’s start button.
Using Virtual Assist Configuring Virtual Assist Settings The Virtual Assist Settings window can be accessed either by clicking the Settings button in the top left corner of the application window or by right-clicking on the Virtual Assist icon in the taskbar and selecting Settings. The Virtual Assist Settings window has three panes: • Proxy Settings - Allows users to configure a Proxy server to access the SRA appliance. There are three options for configuring proxy settings.
Using Virtual Assist • Connection Profiles - Displays all of the Virtual Assist connection profiles that have been used on this computer. To remove a profile, select it and click the Remove button. • Connection Settings - Allows users to customize how they are identified in Virtual Assist and the default settings of Virtual Assist customer sessions. – Display Name - The name that will be displayed in the user queue. By default, the users SSL VPN username is displayed.
Using Virtual Assist Selecting a Virtual Assist Mode When you first launch Virtual Assist, by default it will be in customer mode. To change the mode, perform the following steps. Step 1 Click Change Mode to select one of four possible modes. Step 2 Select one of the following four Virtual Assist modes: Step 3 • Customer - Select this mode to request support. For information on customer mode, see the “Initiating a Virtual Assist Session from the Customer View” section on page 94.
Using Virtual Assist Launching a Virtual Assist Technician Session To launch a Virtual Assist technician session to remotely assist customers, perform the following steps. 86 Step 1 Launch Virtual Assist and select the Technician Mode. Step 2 In the Server pulldown menu, select the IP address or domain name of the SonicWALL SRA appliance. Step 3 Enter the Username and Password for the technician account on the appliance. Step 4 Click Login.The Select Domain window displays.
Using Virtual Assist Step 6 The Virtual Assist standalone application launches. The technician is now ready to assist customers. Performing Virtual Assist Technician Tasks To get started, the technician logs into the SonicWALL SRA appliance and launches the Virtual Assist application. Note Each technician can only assist one customer at a time. By default, the Virtual Assist window launches with the Virtual Assist toolbar at the top and the rest of the window dedicated to the customer’s screen.
Using Virtual Assist Inviting Customers by Email Step 1 Note To invite a customer to Virtual Assist, use the email invitation form on the left of the Virtual Assist window. If it is not displayed, click the Invite button in the toolbar. Customers who launch Virtual Assist from an email invitation can only be assisted by the technician who sent the invitation. Customers who manually launch Virtual Assist can be assisted by any technician.
Using Virtual Assist Step 2 The customer’s entire desktop is displayed in the bottom right window of the Virtual Assist application. The technician now has complete control of the customer’s keyboard and mouse. The customer can see all of the actions that the technician performs. During a Virtual Assist session, the customer is not locked out of their computer.
Using Virtual Assist • Trusted/Active - Toggles to the View Only mode, where the technician can view the customer’s computer but cannot control the computer. • Chat - Initiates a chat window with the technician. • End Virtual Assist - Terminates the session. Using the Virtual Assist Taskbar and Tab Controls The Technician’s view of Virtual Assist includes a Taskbar with a number of options. Note • Invite - Displays the Email Invite pane.
Using Virtual Assist • System Info -Displays detailed information about the customer’s computer. • Reboot Customer - Reboot the customer’s computer. Unless you have Requested full control, the customer will be warned about and given the opportunity to deny the reboot. You can select either a basic reboot or to reboot into Safe Mode with Networking. Note When rebooting, you will be prompted to enter the login credentials for the computer.
Using Virtual Assist Using Additional Virtual Assist Technician Commands The Commands pulldown menu in the top left of the Virtual Assist window provides access to several of the options described above along with additional options. 92 • Open Remote System Info Window - Opens the System Info Window on the customer’s computer. • Open Remote Task Manager Window - Opens the Task Manager on the customer’s computer. • Send Ctrl+Alt+Del - Enters Control-Alt-Delete on the customer’s computer.
Using Virtual Assist Viewing Virtual Assist Session Log The Virtual Assist Session Log window can be displayed by clicking the Logging button in the Taskbar. The log displays a history of timestamped events for the session, such as opening Chat or File Transfer, requesting Full Control, etc. Using the Virtual Assist File Transfer The File Transfer window is used to transfer files to and from the customer’s computer.
Using Virtual Assist Note When deleting or over-writing files, the customer is warned and must give the technician permission unless the technician has clicked the Request Full Control button and the customer has confirmed. • New folder • Rename creates a new folder in the selected directory. renames the selected file or directory. When a file is transferring, the transfer progress is displayed at the bottom of the File Transfer window. Click the Exit button to cancel a transfer in progress.
Using Virtual Assist Initiating Virtual Assist on a Windows Client To launch a Virtual Assist customer session to request help on your Windows computer, perform the following steps: Step 1 There are several methods for accessing Virtual Assist: • Navigate to the URL of the Virtual Assist home page that is provided by your support technician. • If you received an email invitation, click on the link in the email or paste the URL into your Web browser.
Using Virtual Assist 96 Step 2 The first time you launch Virtual Assist, you will be prompted to install the Virtual Assist plugin and client. Step 3 Click on the Allow button. A plugin installation window displays. Click Install Now. The Virtual Assist plugin and client installs. You may be prompted to restart your browser. SonicWALL SSL VPN 5.
Using Virtual Assist Step 4 You can now launch Virtual Assist either from the Virtual Office window or from a shortcut that is added your Programs list under Window’s start button. If the Server address is not autopropagated in the login window, enter the Server address and click Request Support. The server address can be either an IP address, IPv6 address, or hostname of the SonicWALL SRA appliance. IPv6 addresses must be enclosed in brackets (the [ and ] symbols).
Using Virtual Assist Step 7 98 The Virtual Assist queue window provides two options: • Click the information to provide the technician with information about your issue. • Click the icon next to the Change Name line in the queue window to specify your name. By default, the computer name is used. Step 8 When the technician initiates the session, the Virtual Assist toolbar appears in the bottom right of your screen. The technician now has control of your computer.
Using Virtual Assist Initiating Virtual Assist on a MacOS Client To launch a Virtual Assist customer session to request help on your MacOS computer, perform the following steps: Step 1 There are several methods for accessing Virtual Assist: • Navigate to the URL of the Virtual Assist home page that is provided by your support technician. • If you received an email invitation, click on the link in the email or paste the URL into your Web browser.
Using Virtual Assist 100 Step 2 The first time you launch Virtual Assist, you will be prompted to allow the Virtual Assist applet to be installed on your computer. Click Allow. Step 3 The Virtual Assist client installs and launches. In the future, you can either launch Virtual Assist either by navigating to the Virtual Office window in your browser, or you can launch it directly from your Applications folder.
Using Virtual Assist Step 5 The list of Available Portals is displayed. To connect to a specific portal, select it and click OK. To have your request be serviceable by all of the portals, click OK without selecting a specific portal. Step 6 You may be prompted to enter an Assistance Code. Step 7 You may be prompted to read and accept a disclaimer. Click OK. Step 8 A pop-up window indicates that you are in the Virtual Assist queue. The technician will be alerted that you are ready.
Using Virtual Assist Step 9 The Virtual Assist queue window provides two options: • Click Add information to provide the technician with information about your issue. • Click the icon next to the Request Name line in the queue window to specify your name. By default, the computer name is used. Step 10 When the technician initiates the session, the Virtual Assist toolbar appears in the bottom right of your screen. The technician now has control of your computer.
Using Virtual Assist Initiating Virtual Assist on a Linux Client Note SonicWALL Virtual Assist is fully tested on the Ubuntu distribution of Linux. It has not been tested on other Linux distributions. To launch a Virtual Assist customer session to request help on your Linux computer, perform the following steps: Step 1 Step 2 There are several methods for accessing Virtual Assist: • Navigate to the URL of the Virtual Assist home page that is provided by your support technician.
Using Virtual Assist 104 Step 3 Optionally, you can enter your name and a summary of your issue and click Request Support. You will then be prompted to install the Virtual Assist client. After the installation is complete, the Virtual Assist client will launch automatically. Step 4 You can now launch Virtual Assist either from a shortcut on your desktop or by typing VirtualAssistGui in the Terminal window.
Using Virtual Assist Step 7 You may be prompted to enter an Assistance Code. Step 8 You may be prompted to read and accept a disclaimer. Click OK. Step 9 A pop-up window indicates that you are in the Virtual Assist queue. The technician will be alerted that you are ready. Click Cancel to cancel the Virtual Assist request. Step 10 The Virtual Assist queue window provides two options: • Click Add information to provide the technician with information about your issue.
Using Virtual Assist Step 11 When the technician initiates the session, the Virtual Assist toolbar appears in the bottom right of your screen. The technician now has control of your computer. Step 12 For information on using Virtual Assist once the session is active, see “Using Virtual Assist” section on page 106. Using Virtual Assist During a Virtual Assist session, you are not completely locked out of your computer.
Using Virtual Assist Changing the Virtual Assist Level of Control There are three levels of control that a customer can grant to the technician: Note • View Only - The technician can view the customer’s computer but cannot control it. To switch to View Only mode, click the Status (Active) button. The Status switches to (View Only).
Using Virtual Assist Using Virtual Assist in Unattended Mode Note Unattended Mode is supported only on Windows clients. Unattended Mode allows customers to set their computer to be accessible by a technician at a later time when the customer will not be available to click to confirm their consent. To set your computer for Virtual Assist Unattended Mode, perform the following tasks: Step 1 Launch Virtual Assist. Step 2 Click Change Mode, select Unattended, and click Change Mode again.
Using Virtual Assist Step 2 Note Step 3 Step 4 A file should download with parameters to install the VASAC.exe file that will provide the needed client for Virtual Access mode. Save and run the file. Running the file directly from this dialog box may not work on some systems. Save the file to the system and then run the application. Fill in the necessary information in the provided fields to set-up the system in Virtual Access mode and click OK.
Using File Shares An administrator can forcibly remove a system from the queue. If this occurs, the Virtual Access system should no longer attempt to connect to the support queue and should display an error message. Using the Request Assistance Feature If the Display Request Help Button option has been enabled on the Virtual Assist tab on the Portals > Portals page of the management interface, users will see the Request Assistance button on the Virtual Office portal.
Using File Shares Using the File Shares Applet The File Shares Applet has a similar look and feel to the Windows Explorer tool, featuring dragand-drop and multiple file selection capabilities. It also provides the user the ability to set up bookmarks to quickly navigate through networks from the portal level. This feature saves time lost moving through network and server paths.
Using File Shares Step 3 Click the New Bookmark tab in the portal page. Step 4 The Add Bookmark screen displays. Enter a friendly name for the bookmark in the Bookmark Name field. Step 5 Enter the IP address and file directory path to the File Share in the Name or IP Address field. Note 112 When using the Java applet, the Name or IP Address field must be to a file directory and end with a / or \ character. Step 6 In the Service pull down menu, select the File Shares (CIFS) option.
Using File Shares Bookmark serve as useful shortcuts to quickly access different network locations. Bookmarks can also be set up from the File Shares Browser, either by clicking the Bookmark button, or using the bookmark option from the right-click menu. Using the Java File Shares Applet While loading the browser interface, warning messages might display. These messages will look different for different browsers. For the purpose of these examples, Internet Explorer 6.0 was used.
Using File Shares The File Shares Applet displays. 114 Note The File Shares Applet window will not automatically refresh when its contents have changed or if it has been previously viewed. To refresh, click the Refresh icon from the toolbar, or use the Refresh option from the right-click menu. Note The remote network can be browsed from the remote window’s address bar. The local directory can not be changed from the address bar. The remote path is capped at 1024 characters.
Using File Shares Note Step 7 Note The File Shares Applet supports overwriting existing files. If a file exists with the same name as the one you are trying to copy over, the Applet will prompt you to rename the file being copied. If the name is kept the same, the copied file will overwrite the existing one. Double click on a file to launch it with the proper application.
Using File Shares Note • Copy: Copies the selected file(s)/folder(s) to the location of the remote window. Clicking this icon displays the “Copy” dialog box that will show the status information of the copy procedure. If the file being copied already exists, a new dialog will display asking the user whether or not the existing file should be replaced. The copy icon is dimmed when there are no selected files/folders to copy (for example, if no drive or domain is selected).
Using File Shares Step 3 To navigate the remote window, double click on a visible computer, or input the name in the address bar preceded by \\ and followed by a \ and press Enter. The File Shares Applet will then navigate to the requested computer. It may take several seconds for the resources to load, depending on the network configuration. Step 4 Once loaded, double click on a folder or enter the target directory path within the address bar.
Using File Shares Step 6 Enter a name for the new bookmark in the New Bookmark window that displays. Step 7 Click OK. The bookmark is added to the Virtual Office portal. Clicking on the bookmark accesses the selected folder or file. Using Bookmarks from Within the File Shares Applet In Addition to accessing bookmarks from the Virtual Office portal, bookmarks can be easily accessed from within the File Shares Applet.
Using File Shares Step 3 Once loaded, click book mark to load the desired file or folder. Moving Files and Folders The File Shares Applet is designed for ease of use. There is more than one way to perform file transfers. This section provides an example of a folder that is copied from a remote machine onto the local machine’s desktop, deleted from the remote machine, and moved back from the local machine unto the remote machine, all from the File Shares Applet.
Using File Shares Note Step 5 Warning 120 The item still exists on the remote machine. To initiate a move, not a copy, you must use the Move command from the right-click menu. To delete the original file or folder, select it by clicking on it once, and press the Delete button on the tool bar. Alternatively, the item can be deleted by using the right-click menu. The File Shares Applet displays a delete confirmation window. Click the Delete button in the pop-up to delete the item.
Using File Shares Step 6 Once the file or folder has been deleted, the File Shares Applet will automatically refresh, removing the item from the current directory. To copy it from the local machine back to the remote machine, click-and-drag like in Step 2, or use the Copy icon from the local machine’s tool bar. Note The Copy icon in the toolbar automatically moves the selected file to whatever directory is currently open.
Using File Shares Launching a File Directly from the File Shares Applet Files can be launched from within the File Shares Applet. This section provides an example where a remote file is queried for its properties, bookmarked and opened. 122 Step 1 Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal. Step 2 Right click the file and select Properties. SonicWALL SSL VPN 5.
Using File Shares The file’s properties will be displayed in a separate window. Step 3 To open the file, double-click on the file. Alternatively, create a bookmark to it, and launch the file from the bookmark menu. To create a bookmark, select the Add Bookmark option from the right-click menu. The name of the file is the default name of the new bookmark, but a new name can be entered if so desired. SonicWALL SSL VPN 5.
Using File Shares Step 4 Then select the bookmark, either from the portal or from the bookmark tab in the toolbar. Note 124 Files launched from within the File Shares Applet must be downloaded to the local machine before they can be opened. The File Shares Applet will store the file in a temporary directory while it is being used. The File Shares Applet will also try to delete the file after use, but may be unable to do so depending on whether or not another program is accessing it.
Using File Shares Using HTML-Based File Shares File shares provide remote users with a secure Web interface to Microsoft File Shares using the CIFS (Common Internet File System) or SMB (Server Message Block) protocols. Using a Web interface similar in style to Microsoft’s familiar Network Neighborhood or My Network Places, File Shares allow users with appropriate permissions to browse network shares, rename, delete, retrieve, and upload files, and to create bookmarks for later recall.
Using File Shares Step 5 Type a valid username in the User Name field and a valid password in the Password field and click Login. Step 6 Virtual Office displays the home File Share screen that you have specified, displaying folders on the network to which you can navigate. Table 2 describes the controls at the top of the File Share window. Table 2 126 File Share Controls Button Description Back Navigate to the previous File Share location.
Managing Bookmarks Table 2 File Share Controls Button Description Rename Renames the selected folders and files. Select items by checking the checkbox next to their name under the Select column. Bookmark Creates a new bookmark to the current File Share location. Logout Logout of the File Share service. Step 7 You can now navigate the folders and files in the File Share as you would through Windows Explorer or other file management systems.
Managing Bookmarks Adding Bookmarks Bookmarks provide a convenient way for you to access Web, FTP, or other services on the remote network that you will connect to frequently. To define bookmarks, perform the following: Step 1 128 In the Virtual Office window at the top of the bookmarks table, click Show Edit Controls and then click Create a new bookmark. SonicWALL SSL VPN 5.
Managing Bookmarks Step 2 In the Add Bookmark screen, enter a descriptive name in the Bookmark Name field. Step 3 Enter the domain name, IP address, or IPv6 address of a host machine on the LAN in the Name or IP Address field. IPv6 addresses should be enclosed in brackets (i.e. the [ and ] symbols). You may also enter the wildcard variable %USERNAME% to display the current user name. Variables are case-sensitive.
Managing Bookmarks Once the configuration has been updated, the new bookmark will be displayed in the Virtual Office Bookmarks table. Click on a bookmark description to go to the bookmark location that you have defined. Citrix Bookmarks For Citrix bookmarks, you can select the following options: • Designate that it be a secure Citrix connection by selecting the HTTPS Mode checkbox. • Select Always use Java in Internet Explorer to use Java to access the Citrix Portal when using Internet Explorer.
Managing Bookmarks Step 4 Continue to configure the RDP ActiveX or Java Bookmark as follows: Option Usage Screen Size Select the default screen size to be used when users execute this bookmark. It is advised that you select a size equal to or smaller than your current desktop screen size. ActiveX RDP bookmarks also have a full-screen option that will display the RDP window in full screen mode. To toggle from the RDP window back to your desktop, press Alt-Tab.
Managing Bookmarks Option Usage Enable Wake on LAN Select this option to send WoL packets to the host. This option also allows entering one or more Mac Addresses (separated by spaces) for the machines to wake and the desired Wait time for boot up before cancelling the WoL operation. To send the WoL packet to the hostname or IP of this bookmark, check the Send WOL packet to bookmark host Name or IP address checkbox, this option can be applied in tandem with a Mac address.
Managing Bookmarks Step 2 Type cmd to open the command interpreter and click OK. Step 3 Type ipconfig. The IP address of your computer is displayed. Configuring Remote Desktop Access on the Remote Computer Complete the following steps to allow remote desktop access to the computer that is the target of the RDP bookmark: Step 1 Right click on the My Computer icon on the desktop, and select Properties. Step 2 Click the Remote tab.
Using Bookmarks SSHv2 Bookmarks For SSHv2 bookmarks, you must have SUN JRE 1.6.0_10 or higher and must be connecting to a server that supports SSHv2. There are also options to Automatically accept host key and to Bypass username. The bypass option should only be used for SSHv2 servers that do not require authentication in the initial connection session (such as SonicWALL security appliances).
Using Bookmarks • “Using Telnet Bookmarks” section on page 143 • “Using SSHv1 Bookmarks” section on page 144 • “Using SSHv2 Bookmarks” section on page 145 • “Using Web Bookmarks” section on page 146 • “Using File Share Bookmarks” section on page 147 • “Using Citrix Bookmarks” section on page 147 • “Global Bookmark Single Sign-On Options” section on page 152 • “Per-Bookmark Single Sign-On Options” section on page 153 Using Remote Desktop Bookmarks Remote Desktop Protocol (RDP) bookmarks enab
Using Bookmarks Tip 136 To terminate your remote desktop session, be sure to log off from the Terminal Server session. If you wish to suspend the Terminal Server session (so that it can be resumed later) you may simply close the remote desktop window. Step 1 Click on the RDP bookmark. Continue through any warning screens that display by clicking Yes or Ok. Step 2 Enter your username and password at the login screen and select the proper domain name from the pull-down menu. SonicWALL SSL VPN 5.
Using Bookmarks Step 3 Note A window is displayed indicating that the Remote Desktop Client is loading. The remote desktop then loads in its own windows. You can now access all of the applications and files on the remote computer. For information on configuring options for RDP bookmarks, see “RDP ActiveX and Java Bookmarks” on page 130. SonicWALL SSL VPN 5.
Using Bookmarks Using VNC Bookmarks Step 1 Note 138 Click the VNC bookmark. The following window is displayed while the VNC client is loading. VNC can have a port designation if the service is running on a different port. Step 2 When the VNC client has loaded, you will be prompted to enter your password in the VNC Authentication window. Step 3 To configure VNC options, click the Options button. The Options window is displayed. SonicWALL SSL VPN 5.
Using Bookmarks Table 3 describes the options that can be configured for VNC. Table 3 VNC Options Option Default Description of Options Encoding Tight Hextile is a good choice for fast networks, while Tight is better suited for low-bandwidth connections. From the other side, the Tight decoder in TightVNC Java viewer is more efficient than Hextile decoder so this default setting can also be acceptable for fast networks.
Using Bookmarks Using FTP Bookmarks Note 140 FTP bookmarks can use a port designation if the service is not running on the default port. Step 1 Click the FTP bookmark. The FTP Session dialog box displays. Step 2 Enter your username and password. If you want to use your Virtual Office username and password, simply leave the fields blank. SonicWALL SSL VPN 5.
Using Bookmarks Step 3 Click Submit. An FTP session displays. . Go to directory Utility Create new folder Utility Delete Marked Rename Utility Step 4 You can use the following utilities in the FTP site: – To manually navigate to a folder, enter the folder name in the Go to directory field and click Submit. – To create new folders in the directory, use the Create new folder fields. – To delete multiple files, click in the checkboxes of files or folders you want to remove and click Delete Marked.
Using Bookmarks Downloading Files To download a file, perform the following: Step 1 Click Download Files in the navigation bar. Step 2 Click on the name of the file in the Filename column. The File Download window displays. Step 3 Click Run to launch the file. Click Save to save it to your computer. Uploading Files To upload a file, perform the following: Step 1 142 Click Upload Files in the navigation bar. The Upload FTP Files window will be displayed. SonicWALL SSL VPN 5.
Using Bookmarks Step 2 The current directory is displayed in the Upload files to: field. To navigate to a different directory, enter the directory name in the Go to directory: field. To create a new folder in the current directory, enter the name of the folder in the Create new folder: field and click submit. Step 3 Select the file you want to upload by clicking the Browse... button and navigating to the file. You can upload up to three files at once.
Using Bookmarks Using SSHv1 Bookmarks Note Step 1 Click on the SSHv1 bookmark. A Java-based SSH window is launched. Step 2 Enter your username and password. Step 3 A SSH session is launched in the Java applet. Tip 144 SSH bookmarks can use a port designation for servers not running on the default port. Some versions of the JRE may cause the SSH authentication window to pop up behind the SSH window. SonicWALL SSL VPN 5.
Using Bookmarks Using SSHv2 Bookmarks Note SSH bookmarks can use a port designation for servers not running on the default port. Step 1 Click on the SSHv2 bookmark. A Java-based SSH window displays. Type your user name in the Username field and click Login. Step 2 A hostkey popup displays. Click Yes to accept and proceed with the login process. SonicWALL SSL VPN 5.
Using Bookmarks Step 3 Enter your password and click OK. Step 4 The SSH terminal launches in a new screen. Using Web Bookmarks Step 1 Note Step 2 146 Click on the HTTP or HTTPS bookmark. HTTP bookmarks can have a port designation and a path. A new window is launched in your default browser that connects to the domain name or IP address specified in the bookmark. SonicWALL SSL VPN 5.
Using Bookmarks HTTP & HTTPS Bookmarks have been tested and verified to support the following web applications: Note • Microsoft Outlook Web Access 2010, Outlook Web Access 2007, and Outlook Web Access 2003. • Windows Sharepoint 2007, Windows Sharepoint Services 3.0 and Windows Sharepoint Services 2.0. • Please note the client integrated features of Sharepoint are not supported. • Lotus Domino Web Access 7.0 • Novell Groupwise Web Access 7.
Using Bookmarks 148 Step 3 The Citrix Web Client begins to install. If prompted, click the banner to grant ActiveX control to the Citrix Web Client. Step 4 Click Yes to the Security Warning message that is displayed. Step 5 The Citrix Web Client installs. SonicWALL SSL VPN 5.
Using Bookmarks Step 6 Click Yes to the Citrix license agreement. Step 7 When the Citrix Web Client has installed, click OK If the Citrix Web Interface login window does not display, restart your Web browser and launch the Citrix bookmark again. Step 8 Enter your username, password, and domain in the Citrix Web Interface login window. SonicWALL SSL VPN 5.
Using Bookmarks Step 9 The Citrix Web Interface home page is displayed. Click on the application you want to use. Step 10 You may be prompted to install additional Citrix software. Step 11 The shared application is now launched. Java Citrix Bookmark When using a non-Internet Explorer web browser, Citrix bookmarks launch the Java Citrix client. The following steps describe how to launch and use the Java Citrix client. 150 Step 1 Click on the Citrix bookmark. The login window displays.
Using Bookmarks Step 3 Click the Log On button. The Citrix Java applet displays. The default applications will display in the Applications section in the middle of the window. Step 4 Click on Messages to view any Citrix messages you have received. Step 5 Click on Preferences to customize the Citrix Java applet settings. Step 6 Select Display Settings to change the language and to specify if Citrix hints should be displayed.
Using Bookmarks Step 8 Step 9 In the Window Size pulldown menu, select one of the following options: • No preference: Uses the default setting configured by your administrator. • Full screen: Resources are maximized to fill your screen. • Seamless: Resources that support resizing appear in resizable windows. • Custom dimensions: Enables you to specify the width and height of the resource window in pixels.
Using Bookmarks Step 2 Under Single Sign-On Settings, select Use SSL VPN account credentials to log into bookmarks to enable SSO for bookmarks. Leave the box unchecked if you do not want to use SSO for bookmarks. Step 3 Click Save to save your changes. Note Fileshares will use the configured domain name of which the user is a member to supply to the backend server. HTTP, HTTPS, FTP, RDP - ActiveX, RDP- Java will supply the username and password that was used to login.
Using Bookmarks Step 5 To use SSO for the bookmark, select the Automatically log in checkbox and then select one of the following radio buttons: • Use SSL-VPN account credentials – allow login to the bookmark using the local user credentials configured on the SRA appliance • Use custom credentials – allow login to the bookmark using the credentials you enter here; when selected, this option displays Username, Password, and Domain fields.
Logging Out of the Virtual Office Step 8 Enter the User name and password for the service. Logging Out of the Virtual Office To end your session, simply return to the Virtual Office home page from wherever you are within the portal and click on the Logout button. Logout Note When using the Virtual Office with the admin username, the Logout button is not displayed. This is a security measure to ensure that administrators log out of the administrative interface, and not the Virtual Office.
Logging Out of the Virtual Office Trademarks SonicWALL is a registered trademark of SonicWALL, Inc. Microsoft Windows 98, Windows NT, Windows 2000, Windows XP, Windows Server 2003/2008, Windows Vista, Windows 7, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation. Netscape is a registered trademark of Netscape Communications Corporation in the U.S. and other countries.
Sonic WALL, Inc. 2001 Logic Drive T +1 408.745.9600 San Jose, CA 95124-3452 F +1 408.745.9300 www.sonicwall.com PN: 232-000744-00 Rev C 01/2012 ©2012 SonicWALL, Inc. is a registered trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Spec ations and descripti ons subject to change without notice.
