Home

SonicWALL Sleep Apnea Machine SSL VPN 5.5 User's Manual

1. Icons Used in this Manual These special messages refer to noteworthy information and include a symbol for quick identification She ru Tip Useful information about security features and configurations on your SonicWALL Note Important information on a feature that requires callout for special attention 7 G d SonicWALL SSL VPN 5 5 User Guide Guide Conventions WV SonicWALL Technical Support For timely resolution of technical support questions visit SonicWALL on the Internet at http www sonicwall com us Support html Web based resources are available to help you resolve most technical issues or contact SonicWALL Technical Support To contact SonicWALL telephone support see the telephone numbers listed below North America Telephone Support U S Canada 888 777 1476 or 1 408 752 7819 International Telephone Support Australia 1 800 35 1642 Austria 43 0 820 400 105 EMEA 31 0 411 617 810 France 33 0 1 4933 7414 Germany 49 0 1805 0800 22 Hong Kong 1 800 93 0997 India 8026556828 Italy 39 0 2 7541 9803 Japan 81 0 3 3457 8971 New Zealand 0800 446489 Singapore 800 110 1441 Spain 34 0 9137 53035 Switzerland 41 0 1 308 3 977 UK 44 0 1344 668 484 Note Please visit http www sonicwall com us support contact html for the latest technical support telephone numbers SonicWALL SSL VPN 5 5 User Guide ONE amp Guide Conventions More I
2. For example if the server name is engineering the printer name is color print1 the domain name is eng and the username is admin the command would be the following net use LPT1 engineering color printl user eng admin To disconnect a network printer enter a command in the following format ner use LPT1 delete To launch an application enter a command in the following format C Path to Application Application exe 7 3B d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 9 For example to launch Microsoft Outlook enter the following command C Program Files Microsoft Office OFFICE11 outlook exe Step 10 To open a Web site in your default browser enter a command in the following format start http www website com Step 11 To open a file on your computer enter a command in the following format C NPath to fileMmyFile doc Step 12 When you have finished editing the scripts save the file and close it Configuring Proxy Settings SonicWALL SSL VPN supports NetExtender sessions using proxy configurations Currently only HTTPS proxy is supported When launching NetExtender from the Web portal if your browser is already configured for proxy access NetExtender automatically inherits the proxy settings To manually configure NetExtender proxy settings perform the following tasks Step1 Right click on the icon MN in the task bar and click on Preferences The NetExtender Preferences window is layed
3. Note SonicWALL SSL VPN One Time Passwords can be configured to be sent via email directly to SMS capable phones Contact your cell phone service provider for further information about enabling SMS Below is a list of SMS email formats for selected major carriers where 4085551212 represents a 10 digit telephone number and area code These SMS email formats are for reference only These email formats are subject to change and may vary You may need additional service or information from your provider before using SMS Contact the SMS provider directly to verify these formats and for further information on SMS services options and capabilities e Verizon 4085551212 vtext com e Sprint 4085551212 messaging sprintpcs com e AT amp T 4085551212 mobile att net e Cingular 4085551212 mobile mycingular com e T Mobile 4085551212 tmomail net 7 A d SonicWALL SSL VPN 5 5 User Guide Using One Time Passwords W amp e Nextel 4085551212 messaging nextel com e Virgin Mobile 4085551212 vmobl com e Qwest 4085551212 9qwestmp com For a more complete list see the SonicWALL SSL VPN Aaministrator s Guide Verifying User One Time Password Configuration If you are successfully logged in to Virtual Office you have correctly used the One Time Password feature If you cannot login using the One Time Password feature verify the following e Are you able to login to the Virtual Office without being prompted to check your email for a o
4. Step4 Click OK Web Bookmarks For HTTP S bookmarks you can select Use SSL VPN account credentials to log in or configure custom credentials for use with Single Sign On To disable the use of SSO clear the Automatically log in checkbox Select the Forms based Authentication checkbox to use this method and then fill in the following fields that are exposed e Configure the User Form Field to be the same as the name or id attribute of the HTML element representing User Name in the Login form for example input type text name userid gt e Configure the Password Form Field to be the same as the name or id attribute of the HTML element representing Password in the Login form for example lt input typezpassword namez PASSWORD id PASSWORD maxlength 128 gt For External Web Site bookmarks select HTTPS Mode to encrypt Web communication with SSL External Web Site bookmarks are used to access an offloaded Web site or portal using a bookmark Select Disable security warning if you do not want a security warning dialog box to be displayed when a user clicks this bookmark If left unchecked the warning dialog will allow the user to select a Do not show this warning again option if the user has permissions to edit this bookmark set above YOU are about to be redirected to a vVvaeb site that may not be secure Do you want to continuer i Do not show this veernimg aga ms Yes Cancel For
5. e System Info Displays detailed information about the customer s computer gL La eles e System Information File Cot view Took eb Sytem Duar reni mn T tj Heban Aramees OS Hame Mirinsoft windows XP Prodrssinnal Cinik th Ss hanng Miri 2 7 2810 Senos Pack z E usd Sou DMA Ur M sra scher Miciosoft Lorpeation Friced Horne Sytem Home SWEIGAMD T0206 Syslem Mara acu IE utem Model eee System Type SEE bend PE Picasa ab Fandy b Medel 13 Sleeper 8 Germaresdri BIOS Viersen Dr abs IBM TE TEAS W 1 27 Stier 2005 m Solare Enorme SHEIDS Version 233 E riara Sellers Windows Draci CM OS D Mie PG Anian S ysiem Dein CIN DH S she Ecol Denne Wema s H abel lure Locale Litad 518a Hardee Ahstraction Loyer Versinn amp 51 25DID 2182 ppap sp rtm na Uia Hase SV erm id Time Zone Pace D suat Tie Total Phil Merny 10024 OO MB a amp EI Find what Chose Fire Bench selected caiegery ody _ Seach caiegorp names only Reboot Customer Reboot the customer s computer Unless you have Requested full control the customer will be warned about and given the opportunity to deny the reboot You can select either a basic reboot or to reboot into Safe Mode with Networking ir Reboot Customer cm A M Reboot F uy eboot to Safe Mode Note When rebooting you will be prompted to enter the login credentials for the computer i 09 Pitias enwer in your Logn Credentials for Butirmane logn
6. AED SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wax Configuring Virtual Assist Settings The Virtual Assist Settings window can be accessed either by clicking the Settings button in the top left corner of the application window or by right clicking on the Virtual Assist icon in the taskbar and selecting Settings The Virtual Assist Settings window has three panes Proxy Settings Allows users to configure a Proxy server to access the SRA appliance There are three options for configuring proxy settings C Settings Prey Settings Connection Proks Conredtian Seti J Enable Proxy sebtings Automatica detect settings Lie aubna congu akin script Leer Prony Server Address 10 1 2 3 Bypass Proxy Leer Meme helper Persei hak Ir ernet Explorer prtocy settings Automatically detect settings To use this setting the proxy server must support Web Proxy Auto Discovery Protocol WPAD which can push the proxy settings script to the client automatically Use automatic configuration script If you know the location of the proxy settings script select this option and enter the URL of the scrip in the Address field Use proxy server Select this option to enter the Address and Port of the proxy server Optionally you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server If required enter a User name and Pas
7. Hae f Connection Singh Hanin aa Semina Brea Fs Ext ren rtu Lane epa Leg m Appa me areas rna aped 15 C15 Ahamed Lepse nec spese mi Eagan Be 05 Advanced habe Propeta Kihia etter ee ware rue Achat Ale Fic crue mp beet ede performance miii functionality tie recommended to make changes heer only i he b do ien by See MEAE app hetB snder Przizacl Satira d irene Feng A Cachan aphmasbeona HOTE The seing in ie page may maa HetDaender pelormance plena be crad vir Seas Pere Meche vil lake ppd eus Re dee 5 exer rad ee OK Cac E NetExtender allows users to customize the link speed that the NetExtender adapter reports to the operating system To select a virtual link speed to report select either the Report the underlying network speed to OS radio button or select the Report a fixed speed radio button and designate a speed Users can click on the Advanced Network Properties button to make adjustments However modifying these settings may impact NetExtender performance and or functionality It is recommended to only make changes here if advised to do so by SonicWALL support Users may enable or disable Framing and Caching optimizations using the checkbox under NetExtender Protocol Settings This option is only effective when connecting to a SSL VPN server running on 3 5 or later firmware SonicWALL SSL VPN 5 5 User Guide VEND amp Using NetExtender Viewing the NetExtender Log The NetExtende
8. OOOO FIF fetilin b Cave LET TETUR Files and Folders Saacan Pala Klp d Go to a i 44 directory RP E Utility Li E prr Cle arr Iia Data tu Create new rim folder Utility af n m J Tai i a ete Delete 5 IDT Marked t winie Tr Ban at i TUE z m Rename zn pu M Utility Delete tarked Rian Step 4 You can use the following utilities in the FTP site To manually navigate to a folder enter the folder name in the Go to directory field and click Submit To create new folders in the directory use the Create new folder fields To delete multiple files click in the checkboxes of files or folders you want to remove and click Delete Marked To rename a file or folder click in the checkbox of a file or a folder and click Rename Step5 Toinitiate another FTP session click the Add New Session button To return to the initial FTP session click the link for it in the form username ipaddress under the Add New Session button SonicWALL SSL VPN 5 5 User Guide BUB WY Using Bookmarks Downloading Files To download a file perform the following Step1 Click Download Files in the navigation bar Step2 Click on the name of the file in the Filename column The File Download window displays Vile eowriload Security Warning Do you want to run or save this file Name MetEstendeg 1 Windes 1 0 2 abu enn From 100 867 89 Bn sw I V hides
9. Step 2 Step 3 Step 4 Within the NetExtender Properties dialog box click on the Log heading in the menu on the left panel The available options provide basic control over the NetExtender Log and Debug Log 3 Sons WALL Het xtender Properties s am Dininin Peel let Leg Setting Connedien Sonmgli Hint oer Log Bron B Liebe aie ae Set mandmum log fie sioe fo MB Eo ee LiT j 1 paces Peed tee ede Cigars Les Tha logie in cumenty 1 52 ME Ces Dehua Lig luzg Werner ox Cm As To establish the size of the NetExtender Log select either the Unlimited log file size radio button or the Set maximum log file size to radio button If you choose to set a maximum size use the adjoining arrows To clear the NetExtender Log select the Clear NetExtender Log button To Enable the NetExtender Debug Log select the corresponding checkbox To clear the debug log select the Clear Debug Log button Click the Log Viewer button to view the current NetExtender log Click Apply AIL SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Configuring NetExtender Advanced Properties Step 1 Note Step 2 Within the NetExtender Properties dialog box click on the Advanced heading in the menu on the left panel The available options allow you to adjust advanced settings on NetExtender network properties and protocols Gon WALL Netxiender C nnsenian Fro he Adored Setn
10. Step2 Click on Proxy Seni WALL Netixtender Properties Connection Profiles Proxy Settings Connection Scripts Enable oruxy seitangs Praa B Atomai detect stings Leg ee automate conhigarsbon scnpt Advanced Lips proxy pero Step3 Select the Enable proxy settings checkbox Step 4 NetExtender provides three options for configuring proxy settings Automatically detect settings To use this setting the proxy server must support Web Proxy Auto Discovery Protocol WPAD which can push the proxy settings script to the client automatically Use automatic configuration script If you know the location of the proxy settings script select this option and enter the URL of the scrip in the Address field SonicWALL SSL VPN 5 5 User Guide EN amp Using NetExtender Step 5 Use proxy server Select this option to enter the Address and Port of the proxy server Optionally you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server If required enter a User name and Password for the proxy server If the proxy server requires a username and password but you do not specify them in the Properties window a NetExtender pop up window will prompt you to enter them when you first connect Click the Internet Explorer proxy settings button to open Internet Explorer s proxy settings Configuring NetExtender Log Properties Step 1
11. Continue through any warning screens that display by clicking Yes or Ok The web site s certificate is invalid D you want t coni bine Parr IO 0 57 56 Publisher 10 0 67 33 giar trust coment from Els publiitier Te N The certilcyte cannot be verified by atrusied source Orly continue if Step 2 Enter your username and password at the login screen and select the proper domain name from the pull down menu 7 136 d SonicWALL SSL VPN 5 5 User Guide Using Bookmarks Wh Step3 A window is displayed indicating that the Remote Desktop Client is loading The remote desktop then loads in its own windows You can now access all of the applications and files on the remote computer Naor Micreantl lateret Explarms provide T BECTUS TIE MIptual tice Hb Lie peepee FP Meade walt shite the Bente Desktep Tau Cheni iradi Serm pee per terete IP 3 hiipi 10 0081 tt Testi Senreices DE Lonla Micrmnft jo X e i j ie Note For information on configuring options for RDP bookmarks see RDP ActiveX and Java Bookmarks on page 130 SonicWALL SSL VPN 5 5 User Guide Wa WY Using Bookmarks Using VNC Bookmarks Step1 Click the VNC bookmark The following window is displayed while the VNC client is loading Note VNC can have a port designation if the service is running on a different port LF Yirtual Setwurk Computing YNE Microsolt Internet Explorer provide
12. What is Virtual Assist Virtual Assrsl allows you to remotely support customers by taking control of their computers while the customer observes How can add more bookmarks Click Show Eds Controts above the bookmark table toward the right hand sje then click Mew Bookmark If either of these opbons are missing your administrator may not have given you permission t ada pookmarks 7 128 d SonicWALL SSL VPN 5 5 User Guide Managing Bookmarks Wh Step2 In the Add Bookmark screen enter a descriptive name in the Bookmark Name field Aull Boaokrnauk Tips Help a gl What is the File Shares Java Mare or EP Address m Applet 3 Tier ap i s genera iy hie prem gt i Description e version ot File Shares It supports T features We drag and drop and rabs E copying multiple filis at a tine If vow do not have Java installed you can diam File Shares CIFS v d amp s3nie the appel and use the nas browser based interface instead O Use File Shares Java Applet 7 Automabrcagy log in G Use SSL VPN account credentials Ligg custom rredentials Step3 Enter the domain name IP address or IPv6 address of a host machine on the LAN in the Name or IP Address field IPv6 addresses should be enclosed in brackets i e the and symbols You may also enter the wildcard variable USERNAME to display the current user name Variables are case sensitive Step4 Inthe Description field optionally en
13. machine and then open it Note The File Shares Applet will not always be able to delete the temporary file after use Use caution when opening files with sensitive material File opened in temporary directory be sure to save any modifications in an accessible location File saved under C DOCUME haliLocalse 1 Tempy Stolen vehicle Mv File Shares Applet Browser Overview Each window local and remote contains a set of buttons for commonly used operations in the toolbar Hovering the mouse cursor over these icons displays convenient tool tips to the user Dragging the toolbar by the dotted line on the left side of it undocks the toolbar into its own window To re dock the toolbar close the window These are the same functions as those in the right click menu Here is a list of the buttons on the task bar and their respective function e Back Traverses back in the history Sets the current view of the window to the previous location in history This icon is dimmed if there is no previous history location e Forward Traverses forward in history This icon is dimmed if there are no forward locations in history e Up Traverses up the directory tree to the parent directory of the current view This icon is dimmed if the current view is of the root directory or if the parent directory cannot be resolved e Refresh Refreshes the current view by either polling the local file system or remote network via the SSL VPN The refres
14. netExtenderGui dartagfi14 vm netExtenderclient s Jj Step6 Enter your system password Step7 The installer will ask if you want non root users to be able to run NetExtender Enter either y for yes or n for no Note To allow non root users to run NetExtender the installer will set PPPD to run as root This may be considered a security risk Using NetExtender on Linux To use NetExtender on a Linux computer perform the following tasks Step1 After NetExtender is installed there are two methods to launch it Click the NetExtender icon in the Applications menu under either the Internet or Network category Enter the netExtenderGui command SonicWALL SSL VPN 5 5 User Guide VIEN amp Using NetExtender Step2 The first time you connect you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field NetExtender will remember the server name in the future SONICWALL NetExtender Server 10 5 1065 145 E ln em QP Username ecdmin Password rereana Domain LocalDomain en aaa BEL name and password Of alowed jh 0 ip FOU Sante WALL ine Step 3 Enter your username and password Step4 The first time you connect you must enter the domain name The domain name is case sensitive NetExtender will remember the domain name in the future Step5 To view the NetExtender routes select the Routes tab in the main NetExtender window SON
15. palork F eirnis tice Loa hull control geared Lanham enl nao be ported For raton chon Using the Virtual Assist File Transfer The File Transfer window is used to transfer files to and from the customer s computer The file directory of the technician s computer is shown on the left and the customer s computer on the right File Transfer Manager h p EN OU mns ge TECHMICIAN ff T zA CUSTOMER cia T Me MACHINE e a MACHINE EL sa Path Path Nar Sae Modfied B Mame Sat Modified cs Loza Disk Ses A Removeable en D CD ROM M ete Local Disk Por Netw rk ww D CD ROM CO Desktop COIDesktop 2 My Documents iE My Documents L2 Network Favorites CO Network Favorites Parce Comm ecsnon pr The File Transfer window functions in much the same manner as Windows Explorer or an FTP program Navigate the File Transfer window by double clicking on folders and selecting files The File Transfer window includes the following controls Desktop jumps to the desktop of the technician s or customer s computer Up E navigates up one directory on either the technician s or customer s computer Download transfers the selected file or files from the technician s computer to the customer s computer Upload l transfers the selected file or files from the customer s computer to the technician s computer Delete Bl deletes the selected file or files SonicW
16. uy QUI Welcome to the SonicWALL Virtual Office i 4 Tips Help Husli q Sonic WALL S Virtual Office provides easy and secure remote access to the corporate network from anywhere on te internet What is NetExtender Met xtender creates a secure network ali LI me rafi m 1 r LI OT CF in if i j b fi Ti ae L W Wf ah p k 2 cK a pre denned bookmark OF create vor own To SECLE access a corporate nemwork connection ali ws you to access PERUULE nelwork resources servers and Launch Me1Extender to create a secure network cannerction to The corporate network for websites as If you were on the local full network access nernaors What Is File Shares Netextender Mu File Shares E Virtual Assist File Shares allows you to remotely Disconnectedq P rhe ghanecd Ties A333 amp 5meone py access ne in Tre fecal ner TOL voee ee computer to the local network What is Virtual Assist 7 152 d SonicWALL SSL VPN 5 5 User Guide Using Bookmarks Wa Step 2 Under Single Sign On Settings select Use SSL VPN account credentials to log into bookmarks to enable SSO for bookmarks Leave the box unchecked if you do not want to use SSO for bookmarks User Options Single Sign On Settings m Daire a kj Fil i B km gl Step3 Click Save to save your changes Note Fileshares will use the configured domain name of which the user is a member to supply to the backend server HTTP HTTPS FTP RDP ActiveX RDP Jav
17. 10AM E 7T NetExterwipr Ditconnecting Eierung mila iinne 7 R2 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Checking Status Routes and DNS Settings While NetExtender is connected you can view status information routes and DNS settings on your smartphone Step1 To open the NetExtender user interface pull down the notification bar and tap NetExtender August 15 2010 E FII A3 6 48 Pm AT amp T in NetExtender Connected 10 0 61 8 6 45 FM hae Battery Information Voltage 4 153 Temp 22 C Li ion Batter 6 46 PM d USB debugging connected Select to disable USB debugging iH USB connected Select to copy files to from your computer Firg L ee Step 2 To view status information tap the Status tab You can tap on the Sent Received or Throughput fields to change the units between bytes and packets ORG i E f 43 aor SONKWALI NetrExtender Status Routes DAS Connected O Days 00 00 15 Sever ssoncwall sonmcwalltom User seng Client IP 10 128 1 107 Sent 40 bytes Received 64 bytes Throughput O bytes Sec If you are connected to a SonicWALL SRA appliance running 5 0 or higher and you have an Active Directory account the User field contains your display name such as Sonia Eng If you are connected to an appliance running the 4 0 release or you do not have an Active Directory account the User field displays the login name such as seng S
18. 111 Sent 182 63 KB Received 3 06 MB Throughput 412 bytes Sec x Disconnect n D 2011 Sanip ALL Ina Launching NetExtender Directly from Your Computer After the first access and installation of NetExtender you can launch NetExtender directly from your computer without first navigating to the SSL VPN portal To launch NetExtender complete the following procedure Step 1 Navigate to Start gt All Programs Step2 Select the SonicWALL SSL VPN NetExtender folder and then click on SonicWALL SSL VPN NetExtender The NetExtender login window is displayed ay SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 3 The IP address of the last SSL VPN server you connected to is displayed in the SSL VPN Step 4 Step 5 Note Step 6 a Y Tip Server field To display a list of recent SSL VPN servers you have connected to click on the arrow Bi ScnxWALL Heide cl E SONICWALL gt NetExtender Bev sshpn eng sonicwallcom Username gw Password Dena mw us sonicwsall com at Conmect Save user name amp paceword if carver allows Save user nane only sereer abows Ahaya ask for user nam f password i E PAH Mi ME bea WR lt Enter your username and password The last domain you connected to is displayed in the Domain field The NetExtender client will report an error message if the provided domain is invalid when you attempt to connect Please keep in
19. 147 e Using Citrix Bookmarks section on page 147 e Global Bookmark Single Sign On Options section on page 152 e Per Bookmark Single Sign On Options section on page 153 Using Remote Desktop Bookmarks Hemote Desktop Protocol RDP bookmarks enable you to establish remote connections with a specified desktop SonicWALL SSL VPN supports the RDP5 standard with both Java and ActiveX clients RDP5 ActiveX can only be used through Internet Explorer while RDP5 Java can be run on any platform and browser supported by the SonicWALL SSL VPN The basic functionality of the two clients is the same however the Java client is a native RDP client and supports the following features that the ActiveX client does not e Redirect clipboard e Redirect plug and play devices Display connection bar e Auto reconnection e Desktop background e Window drag e Menu window animation e Themes e Bitmap caching If the Java client application is RDP 6 it also supports e Dual monitors Font smoothing e Desktop composition Note RDP bookmarks can use a port designation if the service is not running on the default port SonicWALL SSL VPN 5 5 User Guide bp 135 N 4 Using Bookmarks Q i Tip To terminate your remote desktop session be sure to log off from the Terminal Server session If you wish to suspend the Terminal Server session so that it can be resumed later you may simply close the remote desktop window Step 1 Click on the RDP bookmark
20. 66 e Exiting or Disconnecting from NetExtender on page 71 e Checking Status Routes and DNS Settings on page 73 e Configuring Profiles Preferences and Proxy Servers on page 74 e Changing Your Password on page 78 Connecting to NetExtender To launch NetExtender on your Android smartphone and connect to the network through the SonicWALL SRA appliance perform the following steps Step 1 On your Android smartphone start NetExtender by tapping the application icon The NetExtender connection options screen displays Enter the information into the Server User Password and Domain fields ta FI GU 12 07 AM Dens FI 4 09 e T TIT i Connect NMetExtendel Son wall Ca NetExtendei duc s5onicwall sonicwall com seng sonic sonicwall com Saveusername amp password W Aun 1 Y C Profiles Preferences Qo OQ Export Log About Exit 7 6 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 2 Tap Connect to accept the default option Save user name amp password or select a Save or Always ask option from the drop down list The available profile options depend on how NetExtender is configured on the SonicWALL appliance Boat BAD 12 23 AM Profile Options Save user name amp password Save user name only Always ask user name amp password Step3 The smartphone displays the Login Initializing engine screen After a successfu
21. 85 e Launching a Virtual Assist Technician Session section on page 86 e Performing Virtual Assist Technician Tasks section on page 87 e Initiating a Virtual Assist Session from the Customer View section on page 94 e Using Virtual Assist section on page 106 e Using Virtual Assist in Unattended Mode section on page 108 Enabling a System for Virtual Access section on page 108 e Using the Request Assistance Feature section on page 110 Understanding Virtual Assist Virtual Assist is fully supported on Windows platforms Virtual Assist is certified to work on Windows 7 Windows Vista and Windows XP The Virtual Assist client is also available for Linux and Mac OS Note When a user requests service as a customer Virtual Assist can be run while connected to the system over an RDP session for Windows 7 and Windows Vista platforms however Virtual Assist over RDP will have a limited set of features 7 s0 d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh There are two sides to a Virtual Assist session the customer view and the technician view The customer is the person requesting assistance on their computer The technician is the person providing assistance A Virtual Assist session consists of the following sequence of events 1 2 3 SY Ge demo 6S The technician launches Virtual Assist from the SonicWALL SSL VPN Virtual Office The technician monitors the Assistance Queue for customers requesting ass
22. Inc warrants that commencing from the delivery date to Customer but in any case commencing not more than ninety 90 days after the original shipment by SonicWALL and continuing for a period of twelve 12 months that the product will be free from defects in materials and workmanship under normal use This Limited Warranty is not transferable and applies only to the original end user of the product SonicWALL and its suppliers entire liability and Customer s sole and exclusive remedy under this limited warranty will be shipment of a replacement product At SonicWALL s discretion the replacement product may be of equal or greater functionality and may be of either new or like new quality SonicWALL s obligations under this warranty are contingent upon the return of the defective product according to the terms of SonicWALL s then current Support Services policies This warranty does not apply if the product has been subjected to abnormal electrical stress damaged by accident abuse misuse or misapplication or has been modified without the written permission of SonicWALL DISCLAIMER OF WARRANTY EXCEPT AS SPECIFIED IN THIS WARRANTY ALL EXPRESS OR IMPLIED CONDITIONS REPRESENTATIONS AND WARRANTIES INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE NONINFRINGEMENT SATISFACTORY QUALITY OR ARISING FROM A COURSE OF DEALING LAW USAGE OR TRADE PRACTICE ARE HEREBY EXCLUDED TO THE M
23. PocketPC version e Windows Mobile 6 Professional Classic version Windows Mobile 5 Smart Phone version and Windows Mobile 6 Standard version are not currently supported To use NetExtender on your Windows Mobile device perform the following tasks Navigate to the URL or IP address for your SSL VPN Virtual Office using the browser in your Windows Mobile device Log in with your username and password Click on the NetExtender icon Follow the on screen instructions to install NetExtender When NetExtender is installed you may be prompted to restart your device Click Yes From your Windows Mobile device launch NetExtender The NetExtender login screen displays Enter the IP address or domain name for your SSL VPN server in the Server field The IP address of the last SSL VPN server you connected to is displayed by default To display a list of recent SSL VPN servers you have connected to click on the arrow Enter your username and password The last domain you connected to is displayed in the Domain field The pulldown menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password SonicWALL SSL VPN 5 5 User Guide EN 4 Using NetExtender Step 10 Click Connect When NetExtender successfully connects the NetExtender Status window displays Selec
24. Shares Applet This section provides an example where a remote file is queried for its properties bookmarked and opened Step1 Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal d Remote Network GOR FG c lk Hot LL Step2 Right click the file and select Properties 7 12 d SonicWALL SSL VPN 5 5 User Guide Using File Shares Wh The file s properties will be displayed in a separate window jn aba x il Hamasaki Ayana BE AIRD m Locate fall erp H amas aka Pour Cine 100037312 bytes Last Modhed FriJun 16 054050 POT 2006 Hamasaki Ayumi BLUC B0N avi Pr Step3 To open the file double click on the file Alternatively create a bookmark to it and launch the file from the bookmark menu To create a bookmark select the Add Bookmark option from the right click menu The name of the file is the default name of the new bookmark but a new name can be entered if so desired P Remote Network gt OSG Ji clik Herina wor el nal p F BIRD ss Mew Hookmark T Hew Dokar Mame Hanasaki Fora BLUE HRD an _ pd I gen em E Derita AlL erdian Trade a_i perg pad IE Soret wALL enkoo Trade ss bert pid TE Sore ALL eno Trades Hal pid ij Sonic prian Trate pran Ea moien Vetus Ley LR Thrakia urane re Ms unt w SonicWALL SSL VPN 5 5 User Guide b 123 3 amp Using File Shares Step4 Then select the bookmark either from the
25. Virtual Office environment TEL SonicWALL SSL VPN 5 5 User Guide Web Management Interface Overview Wb The Home page provides customized content and links to network resources The Home Page may contain support contact information VPN instructions company news or technical updates Only a Web browser is required to access intranet Web sites File Shares and FTP sites VNC Telnet and SSHv1 require Java SSHv2 provides stronger encryption than SSHv1 requires SUN JRE 1 4 or above and can only connect to servers that support SSHv2 Terminal Services requires either Java or ActiveX on the client machine As examples of tasks you can perform and environments you can reach through Virtual Office you can connect to e Intranet Web or HTTPS sites If your organization supports Web based email such as Outlook Web Access you can also access Web based email e he entire network by launching the NetExtender client e FTP servers for uploading and downloading files e The corporate network neighborhood for file sharing Telnet and SSH servers e Desktops and desktop applications using Terminal Services or VNC e Email servers via the NetExtender client The administrator determines what resources are available to users from the SonicWALL SSL VPN Virtual Office The administrator can create user group and global policies that disable access to certain machines or applications on the corporate network The administrator may also
26. What information should be accessible to the user is determined by access policies configured by the SonicWALL SSL VPN administrator Accessing Virtual Office Resources Remote network resources can be accessed in the following ways Using a standard Web browser To access network resources you must log into the SSL VPN portal Once authenticated you may access intranet HTTP and HTTPS sites offloaded portals Web based applications and Web based email In addition you may upload and download files using FTP or Windows Network File Sharing All access is performed through a standard Web browser and does not require any client applications to be downloaded to remote users machines Using Java thin client access to corporate desktops and applications The SONICWALL SRA security appliance includes several Java or ActiveX thin client programs that can be launched from within the SonicWALL SRA security appliance Terminal Services and VNC Java clients allow remote users to access corporate servers and desktops open files edit and store data as if they were at the office Terminal Services provides the ability to open individual applications and support remote sound and print services In addition users may access Telnet and SSH servers for SSH version 1 SSHv1 and SSH version 2 SSHv2 from the SSL VPN portal SonicWALL SSL VPN 5 5 User Guide b 9 S amp Browser Requirements Using the NetExtender SSL VPN client The Soni
27. What is NetExtender MelExIender crees a secure mietwork Bk a pi Var c dle your o ret Es aparat network Art Chick a pre defined bookmark r create your own 1o securety access a corporate network connection allows you to access d I s 1 i aiik network resources servers and Launch MetExtender to create a Secure network conne pon To dne cormporade network for websiles us il you were on Ine local a full nebirrk access network What is File Shares HetExtender Jm File Shares e Virtual Assist 9 File Shares amows you to remotely Connecting WE rws shared fees Ache omen py access fies in the kx al network You M p a ey Cee ee can also copy files from your remote ott te computer io the local network R o Aetna e What is Virtual Assist aj A MEC ACCESS Virtual Assisi allows you fo remotely hri atri nim Sein Pix apoio det Support customers by taking control of ae eran rami Loreen Msc thea computers while ine customer GELEES SonicWALL SSL VPN 5 5 User Guide PN 4 Using NetExtender Step4 The Firefox Software Installation window displays Click Install to allow Virtual Office to install NetExtender Software installation jos 1 Install add ons only from authors whom you trust Maliciaus software can damage your computer or violate your prilcy You have asked te install the following iterne MetEtender launcher 5585i7RL ire httpzc sslypn eng sonicwall cam npMWELaunch ypi ASSAI i r Cancel St
28. after reboot Be sure the infomation is correct or the reboot prices we be ntwrued Note Same Regster y changes voll be made please alu al changes Liner Name uia Pap ees DIET Active Screens Allows the technician to switch to a second monitor if the customer s computer has more than one monitor configured or display all monitors e Request Full Control Technicians can request full control of a customer s desktop allowing them to reboot the system delete files or over write files on the customer s computer without the customer being repeatedly prompted for permission Select Request Full Control under the Commands menu to issue a request that will appear on the customer s desktop Regal Fall Cont ral Permission Grark Full contro permissonsz You wil rok receive prions peice bo oer Lan acho such a lie brane ers d pein grand OK Cancel SonicWALL SSL VPN 5 5 User Guide VIDE amp Using Virtual Assist Using Additional Virtual Assist Technician Commands The Commands pulldown menu in the top left of the Virtual Assist window provides access to several of the options described above along with additional options Commands Get PC Control Request Full Control Active Screen Open Remote System Info Window Open Remote Task Manager Window Send Ctrl Alt Del Open Remote Run Window pen Remote Start Menu Send Alt Tab To Remote Ctrl Key Down Ctrl Key Up Alt Key Dawn Alt Key Up
29. allow Virtual Assist traffic through the Windows firewall t Windows Security Alert mu To help protect sour computer Window Firewall hos bbocked iq FIC SNDCIUI MU INL IS Do pou want to keep blocking tha program Publisher lrir M inelewa Fresa hee blocked this png Iram accepting comasinna from ihn Weare ce Greek 1 ua pascere the progr n or tits fee publi ner pog can wuribiack 3 Shen ghouk urio a iem A pop up window indicates that you are in the Virtual Assist queue The technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request Wasting Joe an A Tech chars voll Ges ane aab bio Furio yau Selby Pou H ay raa en dog EE a atten Tour current kims in queue b etl kiama Cam ase inform Ehe prschnicion of sour kiirt TO located below heck Bnforrostion Shave bo provide sd danional deris Tour Fiet I FORCE kgm Homi Le r SonicWALL SSL VPN 5 5 User Guide DD M Using Virtual Assist Step7 The Virtual Assist queue window provides two options Click the information to provide the technician with information about your issue Add Information Issue Description i computer done broke Technician Comments BED You can change the issue description below no longer than 127 characters Now there is smoke coming out of my keyboard e Click the icon next to the Change Name line in the queue window to specify your name By default the comp
30. are some tasks you can perform with the system tray Displaying Route Information To display the routes that NetExtender has installed on your system click the Route Information option in the system tray menu The system tray menu displays the default route and the associated subnet mask 10 51 0 0 255 255 0 0 172 1 110 255 255 255 0 1 2 15 200 22 255 255 2554255 Show Sonic WALL MetExtender 152 168 144 0 255 255 255 0 Disconnect 132 168 181 0 255 255 255 0 Connection Status 197 158 200 0 255 255 255 0 Roule Information k Mute logan Properties About Exit Displaying Connection Information You can display connection information by mousing over the NetExtender icon in the system tray 451 PM TL 2011 c wr Cl iw ul 4 Using the NetExtender Command Line Interface b Note The NetExtender command line interface is only available on Windows platforms To launch the NetExtender CLI perform the following tasks Step1 Launch the Windows Command Prompt by going to the Start menu select Run enter cmd and click OK Step2 Change directory to where NetExtender is installed To do this you first must move up to the root drive by entering the cd command Repeat this command until you are at the root drive Then enter cd Program Files SonicWALL SSL VPN NetExtender Note The specific command directory may be different on your computer Use Windows Explorer to find the directory path where NetExt
31. available to click to confirm their consent To set your computer for Virtual Assist Unattended Mode perform the following tasks Step1 Launch Virtual Assist Step2 Click Change Mode select Unattended and click Change Mode again L Virtual Airset Login 5 0 0 15 Pasicoevor d m L Liner herder Support Logan Enhe your nassvaned Step3 Select or enter the IP address or domain name of the SSL VPN server Step4 Enter a Password and click Login The Waiting window displays and shows the length of time you have been in the queue Step5 You need to provide the technician with the password you just defined An easy way to do this is to click Add Information and give the technician your password Enabling a System for Virtual Access Note Virtual Access is supported only on Windows clients Virtual Access is similar to Virtual Assist Unattended Mode in that administrator privileges are required to install these client features and a technician is prompted to provide the password established during set up to gain access to the system If Virtual Access has been enabled on the Virtual Assist tab on the Portals Portals page of the management interface users should see a link on the Virtual Office portal to set up a system for Virtual Access The following process allows Virtual Access to be set up on a system Step1 Login to the Virtual Office portal through the system you wish to set up for Virtual Ac
32. contains the following subsections e Using the File Shares Applet section on page 111 e Using HTML Based File Shares section on page 125 7 0 d SonicWALL SSL VPN 5 5 User Guide Using File Shares W amp Using the File Shares Applet The File Shares Applet has a similar look and feel to the Windows Explorer tool featuring drag and drop and multiple file selection capabilities It also provides the user the ability to set up bookmarks to quickly navigate through networks from the portal level This feature saves time lost moving through network and server paths The File Shares Applet leverages Sun s Java platform browser plug in to increase usability by mimicking the common Windows Explorer interface With the help of the HTTPS protocol the applet securely transfers encrypted files and information to and from the SRA appliance The appliance communicates this data to the individual machines on the remote network This section contains the following subsections e User Prerequisites section on page 111 e Configuration Overview section on page 111 e Configuration Examples section on page 116 User Prerequisites The SonicWALL SSL VPN File Shares Applet is a Java application that supports Java 1 3 1 and newer and the JRE Version 5 0 Update 10 or newer is recommended To download the latest Java and JRE versions visit http www java com Internet Explorer 6 0 Firefox 1 5 or newer Opera 8 or newer and Safari RSS are recomm
33. deleteprofile Deletes a saved NetExtender profile S Server The IP address or hostname of the SSL VPN Server U user name The username for the account d domain name The domain to connect to NECLI disconnect timeout Disconnects Optional Timeout duration after which the session is disconnected 7 B d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wh Table 1 NetExtender CLI Commands NECLI displayprofile Displays all NetExtender profiles S Server Optional Displays only the profiles that are saved for the specified server u user name Optional Displays only the profiles that are saved for the specified user name d domain name Optional Displays only the profiles that are saved for the specified domain name NECLI queryproxy Checks the connect to the proxy server NECLI reconnect Attempts to reconnect to the server NECLI showstatus Displays the status of the current NetExtender session NECLI setproxy Configures proxy settings for NetExtender t 0 1 2 3 There are three options for setting proxy settings 0 Disable proxy 1 Automatically detects proxy settings The proxy server must support Web Proxy Auto Discovery Protocol WPAD e 2 Uses a proxy configuration script e 3 Manually configure the proxy server S proxy address The address of the proxy script or proxy Server O port The port
34. do these operations without root access the rooting requirement will remain Rooting your phone may void your warranty Consult your contract or User s Guide or call your service provider for more information User Configuration Tasks SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network drives upload and download files and access resources in the same way as if they were on the local network The following sections describe how to use NetExtender on the various supported platforms Windows Platform Installation Installing NetExtender Using the Mozilla Firefox Browser section on page 29 e Installing NetExtender Using the Internet Explorer Browser section on page 32 Windows Platform Usage e Launching NetExtender Directly from Your Computer section on page 34 e Configuring NetExtender Properties section on page 35 e Configuring NetExtender Connection Scripts section on page 37 e Configuring Proxy Settings section on page 39 e Configuring NetExtender Log Properties section on page 40 e Disconnecting NetExtender section on page 44 e Upgrading NetExtender section on page 44 e Authentication Methods section on page 45 e Verifying NetExtender Operation from the System Tray section on page 47 e Using the NetExtender Command Line Inte
35. factor authentication perform the following steps Enter the IP address of the SRA appliance in your computers browser The authentication window is displayed SONICWALL SSL VPN Login Username Llear Pid Donan BEA AUTH v Loin Enter your username in the Username field The first time you log in to the Virtual office your entry in the password field depends on whether your system requires a PIN f you already have a PIN enter the passcode in the Password field The passcode is the user PIN and the SecurlD token code For example if the user s PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 f a PIN is required but you do not yet have a PIN enter the SecurlD token code in the Password field You will be prompted to create a PIN lf the RSA server does not require a PIN simply enter the SecurlD token code Consult with your network administrator to determine if your configuration reqiures a PIN Select the appropriate Domain If manually entering the Domain it is case sensitive Click Login SonicWALL SSL VPN 5 5 User Guide b 19 3 4 Using Two Factor Authentication Creating a New PIN The RSA Authentication Manager automatically determines when users are required to create a new PIN will determines that user associated with a particular token requires a new PIN The SRA appliance prompts the user to enter new PIN Step1 Enter the
36. here causes NetExtender to save them so that you can automatically connect to the proxy server during subsequent logins without being prompted for credentials SonicWALL SSL VPN 5 5 User Guide UE amp Using NetExtender NetExtender Android supports basic authentication using a username and password for proxy servers Microsoft NTLM authentication is not currently supported Step 20 When finished configuring the proxy server settings tap OK Changing Your Password To change your password when prompted by NetExtender perform the following steps Step1 After connecting a password expiration notice may be displayed on your Android smartphone Tap Yes to change your password or No to delay until a later time NetExtender will remind you each time you connect Oe EB FI 4 20 Your password will expire in 14 days Do you want to change it now 7 B d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp If you select Yes the Change password screen is displayed Type your password into the Step 2 Current Password field then type a new password into the New password field and again into the Type it again field Tap OK OR B Fi 5 025 Change password Step 3 If your password expires before you change it the Change password screen is displayed when you connect with the message Login failed you must change your password B Han ases D Change password Type your old password
37. menu button on the smartphone and tap Profiles H PIOS 6 43 Pm m s55onicwall sonicwall com Step3 To display the Remove selected Remove all and Close options on this NetExtender Profiles screen press the options button while on the screen BimKEWEexr Ld Nod d a m Ti T puri ars BMD 6 44 PM ER E Ber Protites ssonicwall sonicwall com Tm 78s m nm x Remove selected Remove all Close Step 4 Tap Remove selected to remove the profiles that have check marks next to them Step5 Tap Remove all to remove all profiles from the smartphone Step6 Tap Close to close the option display on this screen SonicWALL SSL VPN 5 5 User Guide b 75 N 4 Using NetExtender Step7 To display the Remove this profile Remove selected profiles and Remove all profiles options press and hold the NetExtender Profiles screen PITE HAD esr ssonicwall sonicwall com Remove all profiles Step8 Tap Remove this profile to remove the profile that you pressed on to bring up this screen Step9 Tap Remove selected to remove the profiles that have check marks next to them Step 10 Tap Remove all to remove all profiles from the smartphone Step 11 Tap Close to close the option display on this screen EXPORT LOG Step 12 To export the log file of NetExtender Android activity select the Export Log option and enter the requested information ABOUT Step 13 To view NetExtender version information select the About optio
38. mind that domain names are case sensitive The pulldown menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password Having NetExtender save your user name and password can be a security risk and should not be enabled if there is a chance that other people could use your computer to access sensitive information on the network Configuring NetExtender Properties Step 1 Complete the following procedure to configure NetExtender properties Right click on the icon SI in the system tray and click on Properties The NetExtender Properties window is displayed SonicWALL SSL VPN 5 5 User Guide b 35 9 4 Using NetExtender Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 The Connection Profiles tab displays the SSL VPN connection profiles you have used including the IP address of the SSL VPN server the domain and the username Sonic WAI MethtenderPmperhes 8 etm Ss Connection Profiles Settings Connection Scripts Prony Connecpon Profiles Leg Denver Demam Leer Advanced zahi amp ng sonicwall com fv Ls soncwell com polock To create a shortcut on your desktop that will launch NetExtender with the specified profile highlight the profile and click Create Shortcut To delete a profile highlight it by clicking on
39. must be installed and configured according to the directions provided in the SonicWALL SRA Getting Started Guide for your model Browser Requirements The following Web browsers are supported for the SSL VPN Virtual Office portal B Internet Explorer 8 0 9 0 d Firefox 9 04 Safari 5 0 e Chrome 16 0 For administrator management interface Web browser compatibility refer to the SonicWALL SSL VPN Aaministrator s Guide 7 0 d SonicWALL SSL VPN 5 5 User Guide Browser Requirements W The following table provides specific browser requirements Windows XP Winches Vista Windows 2 e I browar O Q ieee es e e e e e e e e e ROPS Lava 15 0 10 amp a a e e e e e e e e e VNC Java 1 6 0 104 wo J a e a e o e e e a e e em Telnet Java 16 0 109 d Se Se eo e e e e e e e e e SSHw2ilava 1 0 Lu i eS o o e e e e o e e B t HTTPS FTP Browser e a L1 e E e e e e B e e e e File Sharing Browser GM o a e Ge e e e BN Sees ee e q e E Vini imn ara Cer ie syitern ibaring lava 14 0 109 y a I e e e e e e e e Citrix ActiveX Citrix ava 1 56 0 toe Virtual Assist independent independent Uma not equine lave 1560 10 awa 1 50 10 HET HeT 9e9 JET 9 0 9 To configure SonicOS SSL VPN firmware an administrator must use a Web browser with JavaScript cookies and SSL enabled Virtual Assist is fully supported on Windows platforms Virtual Assist is ce
40. osculie dirai gan berigi Leg Advanced J Automated execube te batch file d onnect bat Ede ML onnect bat dr ene nnnanie wane When Nel xd ender beanies diore J locally exmada deba e NxDesorremd ba Edi hh ennai ha ice rhe console wanda Step3 To enable the domain login script select the Attempt to execute domain logon script checkbox When enabled NetExtender will attempt to contact the domain controller and execute the login script Optionally you may now also select to Hide the console window If this checkbox is not selected the DOS console window will remain open while the script runs SonicWALL SSL VPN 5 5 User Guide WE amp Using NetExtender b Note Step 4 Step 5 Step 6 Enabling this feature may cause connection delays while remote client s printers and drives are mapped Make sure the domain controller and any machines in the logon script are accessible via NetExtender routes To enable the script that runs when NetExtender connects select the Automatically execute the batch file NxConnect bat checkbox Optionally you may now also select to Hide the console window If this checkbox is not selected the DOS console window will remain open while the script runs To enable the script that runs when NetExtender disconnects select the Automatically execute the batch file NxDisconnect bat checkbox Click Apply Configuring Batch File Commands Step 1 Step 2 Step 3 Ste
41. portal or from the bookmark tab in the toolbar a 6 SOMIRCWAALE File shares Remote meteo x My Computer GOR 0m ei BOG Gis c he W imi i wie Litas Pelr mp main E ain Lira ipari ELLE 6 n A LU iurm AL ea Time an layers irre iiid E ira a a Tie am Dnm md E Dork aAa Tia Flut pod b Files launched from within the File Shares Applet must be downloaded to the local machine before they can be opened The File Shares Applet will store the file in a temporary directory while it is being used The File Shares Applet will also try to delete the file after use but may be unable to do so depending on whether or not another program is accessing it Use caution when opening files with sensitive material aay SonicWALL SSL VPN 5 5 User Guide Using File Shares V Using HTML Based File Shares File shares provide remote users with a secure Web interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall Note The server can be specified either by name or by IP address for example moosedc or 10 50 165 2 For names to work it is necessary that DNS and or WINS be properly config
42. prior to accessing the system through the support queue Virtual Access Settings jame ne Server mySRAServer z Portal VirtuaiOffice Computer Name Homeec Danar Name Remoteiicer Taryo d HomeiC Access cx Cancel Step4 After installation the VASAC client should be left running in the desktop tray This system s identifier name should now appear in the technician s support queue displayed on the Virtual Assist Status page within the management interface Upon double clicking the system listing the technician will be prompted to provide the password established during system set up to gain Virtual Access to the system Ending Virtual Access Mode Disconnecting from a Virtual Access session will place the system back in the support queue for later access by the technician From the personal system side the user technician may uninstall or terminate the application from the tray option icons SonicWALL SSL VPN 5 5 User Guide p 109 N W Using File Shares An administrator can forcibly remove a system from the queue If this occurs the Virtual Access system should no longer attempt to connect to the support queue and should display an error message Using the Request Assistance Feature If the Display Request Help Button option has been enabled on the Virtual Assist tab on the Portals Portals page of the management interface users will see the Request A
43. sssictva sconicwall com He E z L Lar mr nil ml View Tooke Corema pa goed age Oa ed ee EET reer a ay Emal invite Genice a Cus Emal Teka iO E Tachrican Seals Tima Dei hen Desciptar Crnmenia y In Service Techrscin Ema m TODADA hSaice RISI TOM h Semia 2045 Additiones Message Mohborall Sm TOOS06 i Senice CES i i i Paddy Frata ou mna connected Ip mssssiwvm sareaceall cam deed SON ICWA L Curr rnify yeu ane nci tertating any cisions To serae a customer please select ana Iram the Eence queue Virtual Assist ATY E d m TET j To ine a custamar to service fill m the customers e men nthe mae section aad click the Traila bation The technician is now ready to assist customers Performing Virtual Assist Technician Tasks To get started the technician logs into the SonicWALL SRA appliance and launches the Virtual Assist application b Note Each technician can only assist one customer at a time By default the Virtual Assist window launches with the Virtual Assist toolbar at the top and the rest of the window dedicated to the customer s screen To display the most common panes either click Expand or click View Classic Layout This will display the following panes e Email Invite Logging e Chat e Service Once the technician has launched the Virtual Assist application the technician can assist customers by performing the following tasks Invit
44. the Virtual Assist home page that is provided by your support technician e f you received an email invitation click on the link in the email or paste the URL into your Web browser e The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SONICWALL gt SSL VPN Login Lernen f Pons icm LecelDiamain Loni Looking Tor Ferias eee Psy pend frei vith YE un e Or you may need to login to the Virtual Office and click the Request Assistance button X Request 9 Assistance Get assistance from a live technician SonicWALL SSL VPN 5 5 User Guide VD amp Using Virtual Assist Step2 The first time you launch Virtual Assist you will be prompted to install the Virtual Assist plugin and client TEENS Mirbual Aisi Launcher Mozilla Farelix nem s ESSE bitkpesi Aentual senicwall corncgr bin zupp rtexpertrstand dorie ztrue page Install hhissimg Plusgiris Firefox prevented this pte E datil sonicwall c n from afbing you te install software on your computer h virtual Assist manually Alora ie filisnzirrue Afer saving to disk rur lhe applicaliam fom lhe Same Virtual Assist Installer Instructions Step 1 Apila infanmatian bar MIY ge Firetcn prevented this site 201218221 T Irem asking you to install etter en you computer x ie appear aie top of the brows ent i does please click dili on tht wel
45. this setting a Citrix ActiveX client or plugin must be used with IE This setting lets users avoid installing a Citrix client or plugin specifically for IE browsers Java is used with Citrix by default on other browsers and also works with IE Enabling this checkbox leverages this portability Select Always use specified Citrix ICA Server to explicitly specify the Citrix ICA Server Address for the Citrix ICA Session By default the Bookmark uses the information provided in the ICA configuration on the Citrix server RDP ActiveX and Java Bookmarks ActiveX and Java RDP bookmarks offer several features that are not available in other bookmarks ML Tip The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with SonicWALL SSL VPN Step1 Enter the desired Bookmark Name Step2 Enter the Name or IP Address of the resource you are trying to reach You can also use an IPv6 address Step3 Select Terminal Services RDP ActiveX or Terminal Services RDP Java from the Services list AREE SonicWALL SSL VPN 5 5 User Guide Step 4 Managing Bookmarks W Continue to configure the RDP ActiveX or Java Bookmark as follows Add Bookmark Bockmark Name amwxDus 5 Marie ce IP Adis 10 17 71 17 E Senice Terninal Serices ROP ActiveX ET Senar Sino Posaze x Collars High Color 1B bi e Appbcation on
46. to the requested computer It may take several seconds for the resources to load depending on the network configuration SONAL Fue Shares O0 ue MIU oi Bo Gi cz Li cured anl 5 TEE Ls iif arie I P Wena Tw ra Pru pesti fo Det conten reek kaan x Bul runsoaes 1n a ree i hes 7g Fii Fir chan anplel _j monem Herea Hate Pesce Magee a cereal Once loaded double click on a folder or enter the target directory path within the address bar This can take some time as the File Shares Applet must browse through the network after every change Note Only the remote window can use the address bar to navigate through a computer s file hierarchy To set a bookmark to the current directory right click in an empty location in the remote directory and select Add Bookmark Note To set a bookmark for a specific file or folder select it prior to selecting Add Bookmark from the right click menu Sof Gis k G oi Ute a Caney arci Same hia Des ip J UL II nm Hit SonicWALL SSL VPN 5 5 User Guide Wa amp Using File Shares Step6 Enter a name for the new bookmark in the New Bookmark window that displays Er ATTI File Share H Remote Network opon G amp si e cg o el We bodes E Docume and Setingy thal Deatiap Jh m eren Fe fee Fa How Hookrnark Step 7 Click OK The bookmark is added to the Virtual Office portal Clicking on the bookmark accesse
47. 10 5 and higher e Java 1 5 and higher Both PowerPC and Intel Macs are supported Ty SonicWALL SSL VPN 5 5 User Guide Using NetExtender W Prerequisites for Linux Clients Linux 32 bit or 64 bit clients are supported for NetExtender when running one of the following distributions 32 bit or 64 bit e Linux Fedora Core 15 or higher Ubuntu 11 10 or higher or OpenSUSE 10 3 or higher e Java 1 5 and higher is required for using the NetExtender GUI The NetExtender client has been known to work on other distributions as well but these are not officially supported Note Open source Java Virtual Machines VMs are not currently supported If you do not have Java 1 5 or higher you can use the command line interface version of NetExtender Prerequisites for Apple iOS Clients SonicWALL Mobile Connect is supported on Apple iPhone iPad and iPod Touch devices running Apple iOS e iPhone 4S running Apple iOS 5 or higher e iPhone 4 running Apple iOS 4 2 or higher e iPhone 3GS running Apple iOS 4 2 or higher e iPhone 3G running Apple iOS 4 2 or higher e iPad 2 running Apple iOS 4 2 or higher e iPad running Apple iOS 4 2 or higher e iPod Touch 2nd Generation or later running Apple iOS 4 2 or higher Mobile Connect acts as a NetExtender client when connecting to the SonicWALL SRA For Mobile Connect access to succeed the portal must be set to allow NetExtender connections and the user account and gr
48. ALL SSL VPN 5 5 User Guide b 3o S amp Using Virtual Assist Note When deleting or over writing files the customer is warned and must give the technician permission unless the technician has clicked the Request Full Control button and the customer has confirmed New folder a creates a new folder in the selected directory Rename I renames the selected file or directory When a file is transferring the transfer progress is displayed at the bottom of the File Transfer window Click the Exit button to cancel a transfer in progress Note File Transfer supports the transfer of single or multiple files It does not currently support the transfer of directories To select multiple files hold down the Ctrl button while clicking on the files Initiating a Virtual Assist Session from the Customer View The following sections describe how to use Virtual Assist on the three supported client platforms e Initiating Virtual Assist on a Windows Client section on page 95 e Initiating Virtual Assist on a MacOS Client section on page 99 e Initiating Virtual Assist on a Linux Client section on page 103 7 A d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Initiating Virtual Assist on a Windows Client To launch a Virtual Assist customer session to request help on your Windows computer perform the following steps Step1 There are several methods for accessing Virtual Assist e Navigate to the URL of
49. AXIMUM EXTENT ALLOWED BY APPLICABLE LAW TO THE EXTENT AN IMPLIED WARRANTY CANNOT BE EXCLUDED SUCH WARRANTY IS LIMITED IN DURATION TO THE WARRANTY PERIOD BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS THE ABOVE LIMITATION MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS AND YOU MAY ALSO HAVE OTHER RIGHTS WHICH VARY FROM JURISDICTION TO JURISDICTION This disclaimer and exclusion shall apply even if the express warranty set forth above fails of its essential purpose 7 156 d SonicWALL SSL VPN 5 5 User Guide Sonic WALL Inc 20 ac T 1 4087459600 SONICWALL San Jose CA 95124 3452 F 1 408 745 9300 www sonicwall com PN 232 000744 00 Rev C 01 2012 2012 SonicWALL Inc is a registered trademark of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice gt
50. Android operating system The NetExtender Android client supports the following features e One time passwords e Two factor authentication e HTTP HTTPS proxy e Connection profiles The NetExtender Android installer is available on MySonicWALL in the standard apk package format The installer is also available from Android Market as the NetExtender Technology Preview The following features are not supported or not applicable on NetExtender Android in SonicWALL SSL VPN e Automatic connection of NetExtender before Windows login e Automatic proxy support and Internet Explorer proxy synchronization e Connection scripts e Pv6 support e Client certificate support e Exit client after disconnect To install NetExtender on an Android smartphone using the apk package from MySonicWALL perform the following tasks Step1 On a computer log in to http mySonicWALL com Step2 Click on Downloads Step3 In the Software Type pulldown menu select one of the following e SRA 4200 Firmware e SRA 1200 Firmware e SRA VM Step 4 Click on the NetExtender Android link Step5 Save the apk file onto your computer Step6 Using the USB cable connect your computer to the Android smartphone SonicWALL SSL VPN 5 5 User Guide UN amp Using NetExtender Step7 On the Android smartphone pull down the notifications November5 2010 Q BAG 1 27 Ed USB connected Select to copy fies to Trom your computer Step8 Tap USB connected to conn
51. Extender 8 PIN accepted Please vat lor token to change then login with thu new pasecode Password T ak Cancel During authentication the SSL VPN server may be configured by the administrator to request a client certificate In this case users must select a client certificate to use when connecting A The SSL VPN Server requests dient corticata please select ene to use when cennecang Iccued to Sonic VW ALL Vermsign Class 3 Code Inc ngung 2005 2 CA Admuistrato eagle Jotad Ck CEW Uninstalling NetExtender Step 1 Step 2 Step 3 Step 4 The NetExtender utility is automatically installed on your computer To remove NetExtender click on Start gt All Programs click on SonicWALL SSL VPN NetExtender and then click on Uninstall You can also configure NetExtender to automatically uninstall when your session is disconnected To do so perform the following steps Right click on the NetExtender icon in the system tray and click on Properties The NetExtender Properties window is displayed Click on the Settings tab Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session Click Apply ALB SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Verifying NetExtender Operation from the System Tray To view options in the NetExtender system tray right click on the NetExtender icon in the system tray The following
52. Fxtendrer Lowk in usr share meiExziender for a desktop shortcut and icon Tiles ek netFxtenderClient s B 7 54 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp Step4 Enter the cd netExtenderClient command Step5 Enter su C install to install NetExtender datrazfli vm Downloads netEztendercilent file Edit View Search Terminal Help dattagfl4 vm Downlaads amp cd netExtendertlient E dattagfl4 vm netExtenderclient su c install Password SONLCWALL HetExtender 5 5 7856 Installer Checking library dependencies Checking pppd Do you want n n ro t users to he able to run NetExtender If so I can set pppd to run as root but this could be considered security risk Set pppd to run as root y H y mode of J usr sbin pppd retained as 4555 r sr ur x node of usr shin pppd retained as 4555 r sr xr x mode of etc ppp retained as 0755 rwxr xr x node of etc ppp peers retained as 6755 rwxr xr x mode of etc npp peers sslvpn retained as 8644 rw r r mode of etc ppp peers wvdial retained as 0644 rw r r mode of J etc ppp peers retained as 0755 rwxr xr x Copying files SUSE Ubuntu compatibility made off ote eben eens eee eee eens NSTALLATIOM SUCCESSFUL 2 To Launch MetExtender do one of the following 1 Click the NetExtender icon under the Applications menu look under the Internet of Metwork category or 2 Type
53. ICWALL NetExtender Status Routes CNS Mestia Metrriask P retis E 105 252 0 255 255 282 D Disconnect 5 D tiii SanleWALL ine 7 56 d SonicWALL SSL VPN 5 5 User Guide Step 6 Step 7 Step 8 Using NetExtender Wx To view the NetExtender DNS server information select the DNS tab in the main NetExtender window ET E MetExtender Window Hel SONICWALL NetExtender Status Routes DNS DNS Sewers 10 195 160 10 191 350 DAS Suffix Discnnneit 5 D ip S00 Sanli WALL ine To configure NetExtender Preferences select NetExtender Preferences 5S ertinigs Settings Advanced When Fri using RetFxtendrer Auzomatically reconnect when the connection is verminated Then exit SrIExteraler Uninstall FHerEvTender automatica DAS srIVPIS P PRERMIALE DENT Fi Ungm TI Ind nly use bende Dus urs Iil use lii iu AA T a ul A Ok Cancel The following NetExtender settings can be configured e Automatically reconnect when the connection is terminated e Uninstall NetExtender automatically when exiting the application e DNS server options Try remote DNS servers first then try local DNS servers Only use remote DNS servers Only use local DNS servers SonicWALL SSL VPN 5 5 User Guide lb amp Using NetExtender Step9 The Advanced tab of the NetExtender Preferences window provides two additional options e MTU Sets the
54. Inttalnang engine To view the Debug Log either click the Debug Log icon or go to Log gt Debug Log SonicWALL SSL VPN 5 5 User Guide VET 4 Using NetExtender Note It may take several minutes for the Debug Log to load During this time the Log window will not be accessible although you can open a new Log window while the Debug Log is loading NetExtender Log Viewer Diebug Log h Leg View Filter About me el i a Pa ee 2011 03 18 11 29 25 NetExtender Core Proc OxDD4A Thr 0x1 498 DLE ersion Oe 1000032 SUD VAS 11 29 78 MEL NEL Verio Uae TOO z01 1 3 18 11 29 29 NetExtender Core Proc xDDA Thr xl 490 RasGetlEntryProperties return entry size 2940 i 2011 03 18 11 29 25 NetEstender Core Proc xDDA Thr 01498 Status update statCode A0000 stepData 0 SUD VST 11 29 78 Nel xtenader Care Poot 4 Thr Dx 1 498 Inte Windows Visti ar Up Deleted z01 1 03 18 11729723 NetExtender Core Proc UxDDA Thr xl 4907 Status update statCode Ox4010600 stepData 0 4 2011 03 18 11 29 32 NetExtender Core Proc Ox004 Thr O1 498 Info needflelnstall needfiasEntryfteinstall ZD 1 3 18 11 29 32 NetExtender Core Proc xDDA Thr xl 4907 Status update statCode Ox4020600 stepData 0 2011 03 18 11 23 32 MetExtender Core Proc Ox004 The Ox1 498 Error HemoveltASEntry Success Z2UT1 A 318 11 29 32 Nel xtender Care Poot Thr Dx 1 498 Salus update slallode Ube Sl
55. Maximum Transmission Unit MTU size which is the largest packet size that a router can forward without needing to fragment the packet e PPP Sync Mode Specifies synchronous PPP By default this option is disabled and asynchronous PPP is used SonicWALL Netextender Preterences S eitirirs Advanced wan MIT Le 1280 PRP sync made 9 caneu Step 10 To view the NetExtender Log go to NetExtender Log NetExtender Log homesdatta netextenderlog ID7 20 2011 11 05 11 B79 connect info 28358 Dimati Localbomain D7 20 2011 11 05 11 B79 ronnert ufo 2835 Servert 10 5 105 145 443 ID7 20 2011 11 05 11 E83 general notice 2835 Connecting t 10 5 1065 145 443 D7 20 2011 11 05 11 9 amp general notice 2835 Connected D7 20 2011 11 05 11 59 amp general notice 2835 Luggtng in D7 20 2011 11 05 12 038 general notice 2835 Login successful D700 11 05 12 487 general notice 2835 SI Connection 5 ready D7 20 2011 11 05 13 495 general info 25835 Using new PPP frame encoding mechanism Dz 20 2011 11 05 12 5 03 general info 2835 Using PPP async mode chosen fly server D7 20 2011 11 05 12 523 general iuf A35 Comnecting Ethel D7 02 2011 11 05 1 amp 8 757 connect info 2877 MerEwrtenmder interface up D7 20 2011 11 05 17 759 fdas notice 2877 Setting up ONS D7 29 2011 11 05 17 957 general info 2885 Munitoring processes
56. OEREEEEET T Tips Help jsarenHalp a sonic WALL s Virtual Office provides easy and secure remote access to ihe corporate Te network from anywhere an the Internet What is NetExtender l i HetExtender creates a secure network EMELE network resources servers and Launch NetExtender to create a secure network connection to the corporate network for websites as If you were on the local full network access network Whatis File Shares re NetExtender Pop File Shares Virtual Assist d File Shares alis you to remotely Brarennerten ca Browne shared fins ASIA nnmenns By access files in the local network You Nr Cici lp coi un din c EG aln laking cunt of ieee tan aio copy tile Thani WoL renal eoo Computer computer to the local nebwork TOS What is Virtual Assist Request D Virtual e HOT AURA ERE IE Assistance Access Virtual Assist dows you t remotely Gel assistance trom Setup thea system tor support customers by Taking control of observes What ls Virtual Access AllHoockmarks Desklop Web Hiis AN ntm Virtual Access buthon will sefup your WF ADP iPay Statements Site Mote Uter dm username eacecw MI current system for Virtual Access mode i Which will aow you ihe ability to access gF Agile Product Likety tie Management thes System from another kw ation P mai LE YI Ihouwgh Ie Virtue Assest lec hwnician M Citrix to home Ca COTTPSE interface Note The Virtual Office content will vary based on the
57. Open Remote System Info Window Opens the System Info Window on the customer s computer Open Remote Task Manager Window Opens the Task Manager on the customer s computer e Send Ctrl Alt Del Enters Control Alt Delete on the customer s computer e Open Remote Run Menu Opens the Run menu on the customer s computer Open Remote Start Menu Opens the Start menu on the customer s computer e Send Alt Tab to Remote Enters Alt Tab on the customer s computer to toggle between open windows e Ctrl Key Down Engages the Control key on the customer s computer Ctrl Key Up Disengages the Control key on the customer s computer Alt Key Down Engages the Alt key on the customer s computer Alt Key Up Disengages the Alt key on the customer s computer 7 R2 d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wax Viewing Virtual Assist Session Log The Virtual Assist Session Log window can be displayed by clicking the Logging button in the Taskbar The log displays a history of timestamped events for the session such as opening Chat or File Transfer requesting Full Control etc Primin bre Sall errie denarii LI Luibones mant confine belore gala actors ie be Lakers 17 5 jipoiak F eirnis tio Los hull corral geared Ludi eel ral be pred Dos raton acne 1252 ipelock Full ow teal Farr Fuse Dese car geben iy cushion Pissar mura with Ehe bull asrina button il sou need hull cono farce add 17 5
58. PIN in the New PIN field and again in the Confirm PIN field and click OK The PIN must be between 4 and 8 characters long SONICWALL SSL VPN Login Erter a nese POM hng From 4 En digits Lx Cancel Step2 The RSA Authentication Manager verifies that the new PIN is an acceptable PIN If the PIN is accepted the user is prompted to log in with the new passcode SONICWALL SSL VPN Login FAN accepked Please vani For bakren bn change them kagir vlr Ehe Peu nosse Ps send Lt Waiting for the Next Token Mode If user authentication fails three consecutive times the RSA server requires the user to generate and enter a new token To complete authentication the user is prompted to wait for the token to change and enter the next token SONICWALL gt SSL VPN Login Please vanit For the Ecken bo change Ehen enber Ehe nest code ee 7 20 d SonicWALL SSL VPN 5 5 User Guide Using Two Factor Authentication Wh VASCO Two Factor User Authentication Process The following sections describe user tasks when using RSA two factor authentication e Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication on page 21 e Creating a New PIN on page 20 Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication To log in to the SonicWALL SSL VPN Virtual Office using VASCO two factor authentication perform the following steps Step1 E
59. RA appliance in your computers browser The authentication window is displayed SONICWALL SSL VPN Login Domain mid Enter your username in the Username field Enter your password in the Password field Select the appropriate Domain If manually entering the Domain it is case sensitive Click Login You will be prompted to enter additional information the details of which will depend on the type of RADIUS server used The example below shows an M ID RADIUS server which first prompts you to Please enter the M ID PIN Enter the PIN in the Challenge field and click OK SONICWALL SSL VPN Login Please enter the M ID PIN 7 2 d SonicWALL SSL VPN 5 5 User Guide Using One Time Passwords W Step7 You will then be prompted to Please enter the M ID Passcode Enter the passcode received through email or text message in the Challenge field and click OK SONICWALL SSL VPN Login Please enter the M ID Passcode OK Using One Time Passwords The following sections describe how to use one time passwords e User Prerequisites page 23 e User Configuration Tasks page 24 e Verifying User One Time Password Configuration page 25 e Troubleshooting Common Errors page 25 User Prerequisites Users must have a user account enabled in the SSL VPN management interface Only users enabled by the administrator to use the One Time Password feature will need to perform the following configurat
60. Select this mode to service customers by remotely controlling their systems For information on technician mode see the Launching a Virtual Assist Technician oession section on page 86 e Virtual Access Select this mode to make your computer remotely accessible at all times from the SSL VPN appliance For information on Virtual Access mode see the Enabling a oystem for Virtual Access section on page 108 Step3 Click Change Mode again to login with the selected mode SonicWALL SSL VPN 5 5 User Guide LN amp Using Virtual Assist Launching a Virtual Assist Technician Session To launch a Virtual Assist technician session to remotely assist customers perform the following steps Step1 Launch Virtual Assist and select the Technician Mode Virtual Assist Login 5 5 0 8 Setting Helin Server virbual ionima com Lerman beh haven etel Step2 In the Server pulldown menu select the IP address or domain name of the SonicWALL SRA appliance Step3 Enter the Username and Password for the technician account on the appliance Step4 Click Login The Select Domain window displays Mirtual Assist Login 5 5 0 8 Setting Helin Cancel 5 elect Dionem nace hor authentic shen Step5 Select the Domain that the username is configured for and click OK Ty SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wax Step6 The Virtual Assist standalone application launches J Virtual Assist
61. SonicWALL SRA SSL VPN 5 5 User s Guide SONICWALL Table of Contents Using This Guide About Gr UI S sd oudob n et dioc 0 d Roa DRACO honed t ae D O Taanizationjor tS G Ude ae steer TER EA ET A Ed D Guide CONVENON cocto dit act p E EEE EEEO EEE E E 6 Icons Used in this Manual eee ore e UE reto eco do Ee aro ad Eee eeu 6 Current Documentation sudor erac em e C a RC Ej OR aep ad O Important Information You Need cc ce cece cece teen eee ees 8 Virtual Office Overview Virtual Office Overview lesse Hem 9 Accessing Virtual Office Resources cece cece eee n eens 9 Browser ROeguremellts x22 9a OQ E TEE E RENE RRYIN PEE Pda 10 Web Management Interface Overview 0 ec cee te etn t neces 12 CC Stal NG A ears save se th ies eg EE ea wk ETE RED EE D C 15 Using Virtual Office Features Ipod Cor Cales 6o settee eer bedava ate LORD Sd Rete 17 Using Two Factor Authentication 0 0 ccc ccc ect ee eee cent neces 18 User Prog IES eunen orale Societe iota gece uw steals arius Dosen iato 18 User Configuration Tasks c tes tacita ar ed to ae Bo eines erae 18 Using One Time Passwords sess 23 User PIerBuisile5 soo dedu Sa Dedi oomen dde UE aad 23 User ConnguranOn Tasks 2 decer Gus S erexe d Ce Rees shee EUR 24 Verifying User One Time Password Configuration e eee eeee 25 Troubleshooting Common ETTOTS ccc ce cect tenets 25 USMO NGENUT eerren attori t Eee ee E th E Ue 26 User Prere
62. The r cnmmeneed settings cick Oe fault level Enatye Protected Mods year ri Lar ung Internet Exgiurer e n Virtual e pustom mem Defaut ievel Access z Ceip fos nyilem fol eset all zones to defautt bevel entre Web ties Hide Edit Camir W Crne Creabe dew booker i m a Enter the URL or domain name of your SSL VPN server in the Add this Web site to the zone field and click Add Step 5 Click Ok in the Trusted Sites and Internet Options windows 7 32 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Installing NetExtender from Internet Explorer To install and launch NetExtender for the first time using the Internet Explorer browser perform the following Step 1 Log into the SSL VPN Virtual Office portal Step 2 Click the NetExtender button NetExtender i r Disconnected A Click to connect Step 3 A User Account Control window may appear asking Do you want to allow this program to make changes to this computer Click Yes Step4 The first time you launch NetExtender you must first add the SSL VPN portal to your list of trusted sites If you have not done so the follow message will display SonicWALL Virtual Office Microsoft Internet Explorer provided by SonicWALL INC Em aj E hilps silvpnoeng sonmcwalbcom cg ben ssp o entrlauncherrarzieprotected HetExtender has detected that Intermet Explorer is running in Pro
63. Using File Shares Wax Bookmark serve as useful shortcuts to quickly access different network locations Bookmarks can also be set up from the File Shares Browser either by clicking the Bookmark button or using the bookmark option from the right click menu Using the Java File Shares Applet Step 1 Step 2 Step 3 Step 4 While loading the browser interface warning messages might display These messages will look different for different browsers For the purpose of these examples Internet Explorer 6 0 was used If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain pull down Click Login Launch File Shares Applet by clicking the File Shares button or clicking on a link with the File Shares Applet enabled The File Shares Applet will launch in a new window separate from the Virtual Office portal Depending on available browser and Java plug in a warning may display click OK to continue Windows Internet Explorer 2 Warning vou may not be running Ehe optimal browser and Java Version For this product Some Features may not be available while running the File Shares Java Applet From this machine Click OK to continue x Note Toavoid this warning upgrade
64. a will supply the username and password that was used to login If the server is expecting a domain prefixed username SSO will fail In some cases a default domain can be specified at the server to allow SSO to succeed Per Bookmark Single Sign On Options SonicWALL SSL VPN supports per bookmark single sign on for the following bookmark services e Terminal Services RDP Active X e Terminal Services RDP Java e Web HTTP e Secure Web HTTPS File Shares CIFS e File Transfer Protocol FTP Per Bookmark SSO allows users to enable or disable SSO for individual bookmarks This flexibility in specifying login credentials is useful in the following cases e Users who use multiple accounts to access a variety of resources e Users who use two factor authentication to log in to the SSL VPN Virtual Office but use a static password to access other resources e Users who need to access servers that require a domain prefix To configure per bookmark SSO perform the following tasks Step1 Before enabling SSO on an individual bookmark you must first enable SSO globally as described in the Global Bookmark Single Sign On Options section on page 152 Step2 On the Virtual Office page click on the Create a new bookmark button Step3 Select one of the service types that supports per bookmark SSO Terminal Services RDP Active X Terminal Services RDP Java Web HTTP Secure Web HTTPS File Shares CIFS or File T
65. at the technician performs During a Virtual Assist session the customer is not locked out of their computer Both the technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time The customer has a small tool bar in the bottom right of their screen with three options kJ hates musta S C3 Open Chat Disko Fiet Vihas Assist Press Clb d T lo change in Acier Sent Ho pronis ral accu while iri Trusted Slate The customer has the following options during a Virtual Assist session SonicWALL SSL VPN 5 5 User Guide Ur amp Using Virtual Assist Trusted Active Toggles to the View Only mode where the technician can view the customer s computer but cannot control the computer e Chat Initiates a chat window with the technician e End Virtual Assist Terminates the session Using the Virtual Assist Taskbar and Tab Controls Note The Technician s view of Virtual Assist includes a Taskbar with a number of options BBEBOSS o robs Chet 5ennce Logg Viewer Opten Expand Abou I e Invite Displays the Email Invite pane e Chat Displays the chat window to communicate with the customer e Service Displays the service queue of customers awaiting service Logging Displays the log window e Viewer Displays or hide the entire Virtual Assist window e Options Displays Connection Profile and Connection Set
66. ation is enabled on the SonicWALL SRA appliance you may be prompted to update your PIN Personal Identification Number or create a new one If no PIN has yet been configured or if the administrator has reset the account the following screen asks if the system should generate a new PIN To allow the system to generate it tap Yes To type in a PIN yourself tap No and skip to Step 7 D T Ba n 9 13 pM A new PIN is required Do you want system to generate your new PIN y n ay SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp Step6 If you chose to allow the system to generate the PIN the display then prompts you to accept the generated PIN Tap Yes to accept it or tap No to have the system generate a different PIN You are prompted each time until you tap Yes D T B Fla 914 PM Are you satisfied with system generated PIN 1536 y ny Step7 lf you chose to generate the PIN yourself type a PIN into the PIN field and again in the second field to confirm it Typically PINs are required to be 4 to 8 digits Tap OK oO B n 215m PIN accepted Please wait for token to change then login with the new passcode SonicWALL SSL VPN 5 5 User Guide b 69 amp Using NetExtender Step 8 Step 9 Step 10 After entering the PIN or creating a new PIN the Two Factor Authentication process requires you to enter the token code shown on your token device Wait for the token code to change o
67. bit and supports the same functionality as with other Windows operating systems It may be necessary to restart your computer when installing NetExtender on Windows Vista or Windows 7 Internet Explorer Prerequisites Step 1 Step 2 Step 3 Step 4 It is recommended that you add the URL or domain name of your SSL VPN server to Internet Explorer s trusted sites list This will simplify the process of installing NetExtender and logging in by reducing the number of security warnings you will receive To add a site to Internet Explorer s trusted sites list complete the following procedure In Internet Explorer go to Tools Internet Options Click on the Security tab Click on the Trusted Sites icon and click on the Sites button to open the Trusted sites window A Corrwecbuns Prog ams Puis ames Yea car add amd neni websites from the porre Al veebelieskg the pone will uae the mnr a security singa Genma Security Privacy Content Select pann be wine nr change seniity sertngs Q T Jf Adi fis wrhsite tn the pone Iriternet Lern mant Trsirddte 3 Aestricted stes dirhama Trusted sites i tlg 10 202 4 421 Jl hes fone conbra webates hab you E xe ust rial da damage your compuler ui your files Tou nane wees n tres Tore Security level for thes zune J eque server verifientinn hipe fer al sites in this rene Lustom Custom setius Tuo dhan ihe pele dk Cusbsm bevel Tous
68. browser to Internet Explorer 7 0 or newer Firefox 3 0 or newer Chrome 6 0 or newer or Safari 5 0 or newer Also updates to Java 5 0 Update 10 or newer are recommended Depending on the networks configurations and browser one or more security warnings may display Follow the instructions to accept the certificate for the server This Connection is Untrusted Yau hare mhed Firelas bo cwrel ser etr lis ss pm so ralli ann Gul ves xam cord em Lost Our cannection is secure Ramak when veu try bo connect secuneby sibes will prer busied identificabion bo pees Ear yeu Are gorata be wight place However Ghet he s Idennty cant be veed What Should I Do If iu ususdy connect bo this ate valfiut problems this enor cok mean hat someone id fry bo ipee stab Eg he ard noa ua krea iet nre Git of hesi Techa Deraiis I Understand the Risks SonicWALL SSL VPN 5 5 User Guide amp Using File Shares The File Shares Applet displays File Shares lt My Computer GOB Ja s Dy AIITOEXFE RAT 34 BOOT IH E BOOTLOG Phy i BOOTLEG TT BOOTSECT DOS dH ccmec wer Th comic et rnkma ev a ri Ll Helios mg Hebat Renere Please a Note The File Shares Applet window will not automatically refresh when its contents have changed or if it has been previously viewed To refresh click the Refresh icon from the toolbar or use the Refresh option from the right click menu Note The remote netwo
69. cWALL SSL VPN network extension client NetExtender is available through the SSL VPN Virtual Office portal via an ActiveX control or through stand alone applications for Windows Linux MacOS Windows Mobile and Android smartphone platforms To connect using the SSL VPN client log into the portal download the installer application and then launch the NetExtender connector to establish the SSL VPN tunnel The NetExtender Android client has a different installation process described in this guide Once you have set up the SSL VPN tunnel you can access network resources as if you were on the local network The NetExtender standalone applications are automatically installed on a client system the first time you click on the NetExtender link in the Virtual Office portal The standalone client can be launched directly from users computers without requiring them to log in to the SSL VPN portal first Using the SonicWALL Mobile Connect app SonicWALL Mobile Connect is an app for iPhone and iPad that like NetExtender uses SSL VPN to enable secure mobile connections to private networks protected by SonicWALL security appliances For information about installing and using SonicWALL Mobile Connect see the SonicWALL Mobile Connect User s Guide available on www sonicwall com at http www sonicwall com app projects file_downloader document_lib php t PG amp id 482 For SSL VPN to work as described in this guide the SonicWALL SRA security appliance
70. cess and click the Virtual Access link Virtual e Access Setup fee rien for Weta Access More 7 108 d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Step2 Afile should download with parameters to install the VASAC exe file that will provide the needed client for Virtual Access mode Save and run the file File Download Security Warning fm Uo you want to nun or save thes file B Name 2g saonicweall c m 143 admim VirtualOffice 10 exe Iype Application 1 1 2MB From ssivpn eng sonicwall com Hun Sat Ville fles from the Intemet can be useful this fle type can potentially ham your computer E yeu do ner trust the source donot run or aoe Dis solbwere VY hat a tes nak Note Running the file directly from this dialog box may not work on some systems Save the file to the system and then run the application Step3 Fill in the necessary information in the provided fields to set up the system in Virtual Access mode and click OK e Server This should be the name or IP address of the appliance the technician normally accesses the Virtual Office from outside the management interface Do not include https Portal The name of the portal the technician would normally login to Computer Name This is an identifier for the system to help differentiate between other systems that may be waiting for support in the queue e Password This is a password the technician must enter
71. cian SonicWALL SSL VPN 5 5 User Guide b 9 3 amp Using Virtual Assist Step2 The first time you launch Virtual Assist you will be prompted to allow the Virtual Assist applet to be installed on your computer Click Allow Vitti Asset Launcher w java In re Tusure you can launch Virtual Asset from your Aplications folder without resarning to mis web page Close this windew p An applet from sslvpn eng sonicwall com is requesting A access to your computer The digital pignature from SonicWALL lnc hag been verified Allow all anoles foam ssia anemie wah this signaiure gt Show Details Deny Allow n P Step 3 The Virtual Assist client installs and launches In the future you can either launch Virtual Assist either by navigating to the Virtual Office window in your browser or you can launch it directly from your Applications folder Step4 Ifthe Server address is not auto propagated in the login window enter the Server address and click Request Support The server address can be either an IP address IPv6 address or hostname of the SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols A Air VirtualAssist Server Request Request Support Support ay SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Step5 The list of Available Portals is displayed To connect to a specific portal select it and cl
72. configuration of your network administrator Some bookmarks and services described in the SonicWALL SSL VPN User s Guide may not be displayed when you log into the SonicWALL SRA security appliance SonicWALL SSL VPN 5 5 User Guide VEN 4l Web Management Interface Overview The Virtual Office consists of the nodes described in the following table Node Description File Shares NetExtender Provides access to the File Shares utility which gives remote users with a secure Web interface access to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall Provides access to the NetExtender utility a transparent SSL VPN client for Windows MacOS Linux Windows Mobile or Android smartphone users that allows you to run any application securely on the remote network It acts as an IP level mechanism provided by the virtual interface that negotiates the ActiveX component on Windows with IE using a Point to Point Protocol PPP adapter instance On non Windows platforms except Android Java controls are used to automatically install NetExtender from the Virtual Office portal After installation NetExtender automat
73. customer being repeatedly prompted for permission To switch from View Only mode to Active mode click the Status View Only button e Trusted The technician has complete control of the customer s computer To toggle between Trusted mode and Active mode enter Ctrl Alt T Vitus Absint EJ Salus Mier Uri Ka Salus Fare EJ okai uel end x Ofan Chat Dining Ln g C3 Et Vatus sr Fi Open Chat Dialog ER ovs Vah Are D pen Chat Dining lo El Malus Pus Prets Cote T 10 Frese Dubl E lo charge bo Trusted Status Change in Asie Sus Ha piomprr wall occur He pops ral aaa wee m wed Slalud hie iri Tasted Cae Note By default Virtual Assist sessions are launched in Trusted mode To modify this click the Settings button on the top left corner of the window select the Connection Settings tab and select either Auto View Only or Active Mode Ending a Virtual Assist Session You can end the Virtual Assist session at anytime by clicking on the Exit Virtual Assist button in the bottom right corner of the screen or by entering Alt q This will end the technician s control of your computer SonicWALL SSL VPN 5 5 User Guide b 107 N amp Using Virtual Assist Using Virtual Assist in Unattended Mode N Note Unattended Mode is supported only on Windows clients Unattended Mode allows customers to set their computer to be accessible by a technician at a later time when the customer will not be
74. d Pat C Logn as console admin session he Enable wake on Lan Vail Fieri Tos Geet onck ET send WO packet to host mame or IP address 7 Show chent redrect opnon BAL BRodeoct pinto fe Redrect ports gp Enable plugin OULs IA nAutamabcaly loa in C use custam credentials Option Redrect dewes Q3 Rocks Seti nck Usage Screen Size Select the default screen size to be used when users execute this bookmark It is advised that you select a size equal to or smaller than your current desktop screen size ActiveX RDP bookmarks also have a full screen option that will display the RDP window in full screen mode To toggle from the RDP window back to your desktop press Alt Tab Colors Select the default color depth to be used when users execute this bookmark Application and Path Start in the following folder To have the RDP session launch an application when the bookmark is initiated enter the path to the application in the Application and Path optional field For example C Program Files Example app exe optional Enter the local folder to execute application commands in optional Login as console admin Check this option to enable console and admin commands on login session SonicWALL SSL VPN 5 5 User Guide b 131 3 4 Managing Bookmarks ML t Tip Step 5 Option Usage Enable Wake on LAN Select this option to send WoL packets to the host Thi
75. define bookmarks or preconfigured links to Web sites or computers on the intranet Additional bookmarks may be defined by the end user SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network drives upload and download files and access resources in the same way as if they were on the local network Certificates If the SRA appliance uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page SonicWALL SSL VPN 5 5 User Guide b 15 3 4I Web Management Interface Overview 7 6 d SonicWALL SSL VPN 5 5 User Guide Using Virtual Office Features This chapter provides details on how to use the features in the SonicWALL SSL VPN user portal including NetExtender configuring bookmarks accessing services and using file shares This chapter contains the following sections e Importing Certificates section on page 17 Using Two Factor Authentication section on page 18 e Using One Time Passwords secti
76. e Note To navigate between uploads click the Sessions link Step4 Click Upload to upload the files Using Telnet Bookmarks Step1 Click on the Telnet bookmark Note Telnet bookmarks can use a port designation for servers not running on the default port Step2 Click OK to any warning messages that are displayed A Java based Telnet window launches epe anat CURE Pa Ll Step 3 If the device you are Telnetting to is configured for authentication enter your username and password SonicWALL SSL VPN 5 5 User Guide p 143 N 4M Using Bookmarks Using SSHv1 Bookmarks Note SSH bookmarks can use a port designation for servers not running on the default port Step1 Click on the SSHv1 bookmark A Java based SSH window is launched EECITPTT oT BSH fustharizaliar riequiniid ser name Passer Cancel Lagin Java Applet Window Canmnmecled t 10 0 393 31 ssh Step2 Enter your username and password Step3 A SSH session is launched in the Java applet some versions of the JRE may cause the SSH authentication window to pop up behind the SSH window 7 14 d SonicWALL SSL VPN 5 5 User Guide Using Bookmarks Wh Using SSHv2 Bookmarks b Note SSH bookmarks can use a port designation for servers not running on the default port Step1 Click on the SSHv2 bookmark A Java based SSH window displays Type your user name in the Username field and click Login A ips 00 0 8 igh bi
77. e set up another login and password for you that has only user privileges SONICWALL virtual Office Welcome to the SonicWALL Virtual Office SonicWALL Virtual Office pravdes secure Imtemet access for remote users to log in and access private network resources via SSL VPN technology Deomm LocaiDomain r The default page displayed is the Virtual Office home page The default version of this page shows a SonicWALL logo although your company s system administrator may have customized this page to contain a logo and look and feel of your company Go to the Virtual Office Overview page 9 to learn more about the Virtual Office home page From the Virtual Office portal home page you cannot navigate to the administrator s environment If you have administrator s privileges and want to enter the administrator environment you need to go back to the login page and enter a username and password that have administrator privileges and login again using the LocalDomain domain Only the LocalDomain allows administrator access to the management interface Also note that the domain is independent of the privileges set up for the user 7 2 d SonicWALL SSL VPN 5 5 User Guide Web Management Interface Overview Wh Logging in as a user takes you directly to Virtual Office The Virtual Office Home page displays as shown here SONICWALL Virtual Office sec seremyromer oe 8 Welcome to the SonicWALL Virtual Office JUKEETUSEUDT
78. ect 2n u E 22 1 oval Ina Closing the windows clicking on the x icon in the upper right corner of the window will not close the NetExtender session but will minimize it to the system tray for continued operation Step9 Review the following table to understand the fields in the NetExtender Status window Field Description Status Indicates what operating state the NetExtender client is in either Connected or Disconnected Server Indicates the name of the server to which the NetExtender client is connected Client IP Indicates the IP address assigned to the NetExtender client Sent Indicates the amount of traffic the NetExtender client has transmitted since initial connection Heceived Indicates the amount of traffic the NetExtender client has received since initial connection Throughput Indicates the current NetExtender throughput rate Step 10 Additionally a balloon icon in the system tray appears indicating NetExtender has successfully installed Connected Server sslvpn eng sonicwall com IP 10 128 1 111 Sent 121 74 KB Recerved 80 21 KB 4 51 PM 7 18 2011 gt F E IL am ull i Step 11 The NetExtender icon M is displayed in the task bar L SonicWALL SSL VPN 5 5 User Guide b 31 3 4 Using NetExtender Installing NetExtender Using the Internet Explorer Browser Q Note SonicWALL SSL VPN NetExtender is fully compatible with Microsoft Windows 7 32 bit and 64
79. ect to the computer The next screen shows the connection B BMT USB connected Turn on USB storage 7 A d SonicWALL SSL VPN 5 5 User Guide Step 9 Step 10 Step 11 Step 12 Step 13 Step 14 Using NetExtender W Tap Turn on USB storage to prepare for copying the apk installer to the Android smartphone Lu id i a 1 36 0M USB storage in use Tum off USB storage On the computer copy the apk file to the Android SD card Unmount the Android SD card from your computer On Windows it will show up under My Computer as a new drive On Mac a new drive will show up on the desktop After unmounting the Android SD card from your computer tap Turn off USB storage On your Android smartphone launch a file browser application Using the file browser locate the apk file and run it to install NetExtender Android After installation the NetExtender icon appears on the applications page of the smartphone F en Q B Fl d 159m HN mw Map Market Messagin EB EM PRE mP Wise Nas gati Ies and We HELE ste Negwon Lite O AONI Settings UE TDTTI 5 GUDE Speech Record Fats Terminal Ernaulat in Fag Untangle SonicWALL SSL VPN 5 5 User Guide Hr 4 Using NetExtender Using NetExtender on Android Smartphones Instructions for using NetExtender on your Android smartphone are available in the following sections e Connecting to NetExtender on page
80. ended Web browsers of optimal performance of the Java File Shares feature The administrator must enable the File Shares Applet for users to use it There must be a computer with open access for the SonicWALL SSL VPN File Shares Applet to log into The remote computer must have shared folders for files to be copied or moved sharing policy must be set from within the remote computer s own operating system Configuration Overview The SSL VPN File Shares Applet is easy and intuitive to use User should be aware of its functions and limitations Setting up bookmarks and the browser interface are covered in this section along with an overview of the browser and sample use cases This section contains the following subsections e Setting up Bookmarks section on page 111 e Using the Java File Shares Applet section on page 113 File Shares Applet Browser Overview section on page 115 Setting up Bookmarks Bookmarks can be set up for folders and for files A file bookmark will not launch the Applet but instead will download and launch the file directly Bookmarks must be enabled by the administrator To set up bookmarks from the Virtual Office Portal perform the following steps Step 1 Open a Web browser and log into the SSL VPN Virtual Office interface by typing the URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain f
81. ender is located SonicWALL SSL VPN 5 5 User Guide VEN amp Using NetExtender Step 3 commands C Program Files Copyright c IO FrFTVVLrTrVTvT TL VJ TTTT Y Enter NECLI exe The NetExtender CLI launches and displays a summary of the available x86 SonicWALL SSL VPN NetExtender gt NECLI exe 2011 SonicWALL r MMbbbbbb11111111111111111111111bbbbbmm NNN ON ON ON NON ON ON ON ON ON ON ON ON ON ON ON NON GN Application Version 5 5 155 Copyright c 2011 SonicWALL Inc PPPP111111111bm PP1111111bm PP111111b 111111 DEBE BiPbq pbi Table 1 describes the commands available in the NetExtender CLI and their options Table 1 NetExtender CLI Commands Command Options Description NECLI addprofile Creates a NetExtender profile S Server The IP address or hostname of the SSL VPN Server U user name The username for the account p password The password for the account d domain name The domain to connect to NECLI connect Initiates a NetExtender session S Server The IP address or hostname of the SSL VPN server u user name The username for the account p password The password for the account d domain name The domain to connect to clientcertificatethumb The SSL Client Certificate thumbprint value thumb clientcertificatename The SSL Client Certificate name name NECLI
82. entication external domains do not provide a direct facility to store such information as bookmarks Rather than requiring administrators to manually create local users for external domain users wishing to use personal bookmarks SonicWALL SSL VPN automatically creates a corresponding local user entity when an external domain user logs in to the Virtual Office The following sections describe basic bookmark tasks e Adding Bookmarks section on page 128 Editing Bookmarks section on page 134 e Removing Bookmarks section on page 134 e Using Bookmarks section on page 134 SonicWALL SSL VPN 5 5 User Guide b 127 N W Managing Bookmarks Adding Bookmarks Bookmarks provide a convenient way for you to access Web FTP or other services on the remote network that you will connect to frequently To define bookmarks perform the following Step1 In the Virtual Office window at the top of the bookmarks table click Show Edit Controls and then click Create a new bookmark SONICWALL virtual Office admin e Q i Exclu dear for 1 riii Dptong Heap Welcome to the SonicWALL Virtual Office SOME WALL S Virtual ONCE provides easy and secure remote access to ihe corporate network Tom anywhere on m Inteme1 Click a pre defined bookmark or create your own to securety access a corporate network Feu ge Launch HetExtender to create a secure network connection to the corporate network for full network access NetExtender yor F
83. ep5 Firefox may prompt you to restart your browser If so close Firefox relaunch it and return to the Virtual Office window Click NetExtender again Step6 You may see additional security warnings A User Account Control window may appear asking Do you want to allow this program to make changes to this computer Click Yes Step 7 A Windows Security window may appear asking Would you like to install this device software Click Install WM SonicWALL Virtual Office Mozilla Firefox iss EXT Een httpss sshenn eng snnicwall cem egi bin sshepnelientTlxunchnetestenderz yes M Installing NatExtendar Pita wail 77 Windows Security E Would you like to install this device software Name MetFsitender A Publisher Sonic WALL Ine Always trust software from Sonic WALL Ine jns Dont Install M You should only anstall drreer softeene from publishers you trust Hoy cen T decide which device software is safe to install 7 30 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 8 When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected SonicWALL Netitender 0000000 SONICWALL WetExtender onne i i Days OES Ealus Rules DNS Server sslvpn eng sonicwall com Cllent IP 10 128 1 111 Sent 182 63 KB Received 7 96 MB Throwahput 412 bytes Sac x Disconn
84. es Applet displays a delete confirmation window Click the Delete button in the pop up to delete the item PAN Warning The File Shares Applet will completely delete the file or folder from the remote machine In the case of a folder nested items will also be deleted These items will not be sent to the recycle bin on either machine and are not recoverable G64 U4 su BOS GS Sik Hram Cicer and amlee bh T Inr gy 7 nie a Fld hie share spiel i GUS 4 7 debate roles Hrs E riesen 4 J niim 7 120 d SonicWALL SSL VPN 5 5 User Guide Using File Shares Wh Step6 Once the file or folder has been deleted the File Shares Applet will automatically refresh removing the item from the current directory To copy it from the local machine back to the remote machine click and drag like in Step 2 or use the Copy icon from the local machine s tool bar Note The Copy icon in the toolbar automatically moves the selected file to whatever directory is currently open To move an item to a different folder either drag and drop it into the desired destination or open the desired destination prior to clicking Copy pue MT eM EN ee ios o C Documenti arci Dairi bar Deris 2 FEMI iij arx Gh Haramai um DLUE DTID ai hoien bit cde bored FE ni B a SonicWALL SSL VPN 5 5 User Guide Wi amp Using File Shares Launching a File Directly from the File Shares Applet Files can be launched from within the File
85. ga Puce e Or you may need to login to the Virtual Office and click the Request Assistance button o Request 09 Assistance Get assistance fram a live technician Step2 You will be prompted to click the Virtual Assist Client Download for Linux button It will prompt you to download the VACLinux x86 tgz file Unpackage the file and run the Install file You can now launch Virtual Assist either from a shortcut on your desktop or by typing VirtualAssistGui in the Terminal window SonicWALL SSL VPN 5 5 User Guide VEI M Using Virtual Assist Step3 Optionally you can enter your name and a summary of your issue and click Request Support You will then be prompted to install the Virtual Assist client After the installation is complete the Virtual Assist client will launch automatically Tour Request Assistance Wait for Tech Install Software Receve Assistance 3 Take the Tour to learn how Virtual Assist works FAQ To begin a virtual assist session with your technician please enter your name and click the Why do have to install Request Assistance button In just a few moments there will be an established remote software to receive desktop connection between your computer and your technician assistance What if deal with sensitive information How do install the bro pa abu 0o neice Virtual Assist Client Download for Linux More FAQs gt Request help directly by saving the Virtua
86. gene Engine Engene Engene Engine Engene Engene Engine Engene Engene Engene Engine Service Engene Engine Engene Engene Engine Engen Engene Engine Engen Engene m D Descnplion MetExtender Starting Version 410 171 Inetialinng engine lrig diver Initializing security functions Connecting Connected successfully Disrannecting Relessing security functions Disconmnected successfully Initializing engine Checking updates A new version gl Hetkxberider ri required be conmect be the S5L VEHN serves Downloading updates HMetExtender i5 mating te perform upgrading Netixtender Starting Version 5 0 1453 lirai engine Checking updates Inetialining drrzer liali sexurity Paniki Connecting Connected successfully Discunimectinig Waking up Resuming the connection Inetalnang engine mui To save the log either click the Export icon or go to Log Export To filter the log to display entries from a specific duration of time go to the Filter menu and select the cutoff threshold AID SonicWALL SSL VPN 5 5 User Guide o e Using NetExtender W amp To filter the log by type of entry go to Filter Level and select one of the level categories The available options are Fatal Error Warning and Info in descending order of severity The log displays all entries that match or exceed the severity level For example when selecting the E
87. h icon will be dimmed in the remote window if its contents are currently being refreshed e New Folder Creates a new folder within the respective file system Clicking this icon displays the New Folder dialog box allowing the user to assign a name to the new folder This icon is dimmed when the location of the window is such that a new folder cannot be created for example Root of a Windows filesystem domain list machine list SonicWALL SSL VPN 5 5 User Guide b 115 X 4a Using File Shares Note Copy Copies the selected file s folder s to the location of the remote window Clicking this icon displays the Copy dialog box that will show the status information of the copy procedure If the file being copied already exists a new dialog will display asking the user whether or not the existing file should be replaced The copy icon is dimmed when there are no selected files folders to copy for example if no drive or domain is selected It is also dimmed if the remote location cannot accept files copied to it for example Domain List Machine List Copying a folder also copies everything within the folder Delete Deletes the selected file s folder s Deleting a folder will delete everything within the folder Files deleted this way are fully removed from the original machine they were on These files are not sent to the recycling bin and are in no way recoverable Configuration Examples The following configuration e
88. he domain name is case sensitive Step5 Click Connect Step6 You can instruct NetExtender remember your profile server name in the future In the Save profile pulldown menu you can select Save name and password if allowed Save username only if allowed or Do not save profile SonicWALL SSL VPN 5 5 User Guide EN 4 Using NetExtender Step7 When NetExtender is connected the NetExtender icon is displayed in the status bar at the top right of your display Click on the icon to display NetExtender options Routes Disconnect Quit L Step8 To display a summary of your NetExtender session click Connection Status Step9 Io view the routes that NetExtender has installed select the Routes tab in the main NetExtender window e Routes Available Routes 1 10 0 0 0 255 255 0 0 2 10 50 0 0 255 255 0 0 3 10 200 0 0 255 254 0 0 4 10 202 0 0 255 255 0 0 5 10 208 0 0 255 252 0 0 b 10 2 0 0 255 255 0 0 7 10 1 1 0 255 255 255 0 8 192 168 4 0 255 255 255 0 9 192 168 181 0 255 255 255 0 10 10 203 0 0 255 255 0 0 Step 10 To view the NetExtender Log go to Window Log aoe NetExtender Log Dob Yr rN POUNDER ELLUN Le TCECMLNATEU Loading saved profiles Loaded profile sslvpn eng sonicwall com Done Connecting to SSL VEPN Server sslvpn com 443j Connected Logging in Login successful Using SSL Encryption Cipher DHE RSA AES256 SHA You now have access to the following 10 remote net
89. hen NetExtender starts Maintains a single NetExtender log file that is overwritten with each new NetExtender session Disabling this option will create a separate log file for each NetExtender session SonicWALL SSL VPN 5 5 User Guide DN 4 Using NetExtender Proxy Settings Provides the ability to manually specify a proxy server Cancel Passwords in NetExtender Mobile NetExtender Mobile supports the ability for users to change passwords Also if configured by an administrator users can be alerted that the their password is scheduled to expire soon If a user must change their password a screen prompt will ask for the user s old password along with a new password and re verification of the new password fou must change your passend before Cid Passed New Passwort New Password apsn 1 Another screen prompt will be presented to the user if their password is scheduled to expire within a configured number of days by the administrator Click Yes to enter updated password information I et sil egubet Server 19 0 61 A N tili ETE pe You pasrword wi expre in 14 days Do you want to change it now ves eal The process for updating password information is the same as above 7 2 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W Installing NetExtender on Android Smartphones SONICWALL SSL VPN supports NetExtender on smartphones running the
90. ically launches and connects a virtual adapter for SSL secure NetExtender point to point access to permitted hosts and subnets on the internal network Virtual Assist Virtual Access if configured by administrator Provides access to Virtual Assist an easy to use tool that allows SonicWALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Virtual Assist is a lightweight thin client that installs automatically using Java from the SonicWALL SSL VPN Virtual Office without requiring the installation of any external software For computers that do not support Java Virtual Assist can be manually installed by downloading an executable file from the Virtual Office Virtual Access allows technicians to gain access to systems outside the LAN of the SRA appliance After downloading and installing the thin client for Virtual Access mode the system will appear only on that technician s Virtual Assist support queue within the SRA s management interface Bookmarks Provides a list of available bookmarks which are objects that enable you to connect to a location or application conveniently and quickly Options Provides the option to change user password and use single sign on if enabled by the administrator Online Help Launches online help for Virtual Office Tips Help Provides a short list of common questions and tips about the Virtual Office Logout Logs you out of the
91. ick OK To have your request be serviceable by all of the portals click OK without selecting a specific portal ANLO Available Portals Please select the portal associated with your techncian for service select none to have your request serviceable to all technicians Portal Name TestPortal VirtualOffice OK Cancel Step6 You may be prompted to enter an Assistance Code mno Assistance Code OK Cancel wv Step 7 You may be prompted to read and accept a disclaimer Click OK Step 8 A pop up window indicates that you are in the Virtual Assist queue The technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request A technician will be available to help you shortly You i may cancel your request anytime by clicking the Cancel button Your current time in queue is 0 24 Add information i Cancel Please inform the technician of your ticket ID located below Click Add information above to provide additional details Your Ticket ID TOO020 Request Name derek y fad SonicWALL SSL VPN 5 5 User Guide b 101 3 M Using Virtual Assist Step9 The Virtual Assist queue window provides two options Click Add information to provide the technician with information about your issue Supportnformation information maximum 128 characters Click the icon next to the Request Name line in the queue window to specify your name By default the computer na
92. ick the banner to grant ActiveX control to the Citrix Web Client T PG NOH a Ss I X M PM rud 1h https I0 61 150 Citrix Installation Microsoft Internet Fxplaner E lul xl Q This site might require the following Activex conte tris Wiel Chee from Citrix Systems Tne i here to instal 5 Please wait while the Citrix Web Client is installed After installation vou will be automatically redirected to the Citrix portal Step4 Click Yes to the Security Warning message that is displayed Securily Warning Step5 The Citrix Web Client installs Citrix Web Client InstallShield Wizard Exliachng Filas The contents of ts package are being extracted TEL SonicWALL SSL VPN 5 5 User Guide Using Bookmarks Wh Step6 Click Yes to the Citrix license agreement Lilrix License Agreement MAY CONTACT THE AUTHORIZED CITRIX RESELLER FROM WHICH YOU OBTAINED THE PRODUCT FOR A FULL REFUND IF YOU RECEIVED E mn RENI Step7 When the Citrix Web Client has installed click OK If the Citrix Web Interface login window does not display restart your Web browser and launch the Citrix bookmark again Citrix Web Client Setup completed successfully You may need to restart your web browser to activate changes Step8 Enter your username password and domain in the Citrix Web Interface login window CITRIX Web Interface a for MetaFrame Presen
93. ile Shares Virtual Assist 4 Duzconnected E Browse ahared tea In agi timide by Aw Cik i camen en your corperane UE iming conten of thee iwi compulit Al Bookmarks Daenkbop Weh Files Terminal Show dit Controls ig 10 0 61 62 vinh HTTP G 10 0 61 62 cifs Fin Ehares HTML WP cact eng sonicwall com vinh HTTP 2 elirix ps 4 0 Cine HTTP 9 download citrix Fin Transfer Prehsesi e hp F r Transfer Perseel i g secure bank com MC tentes sweingbabone corn bna Costificale Secure Vinh external Vieh fiir Ky google Www gnngle com ee myspam eng soniewall cam Secure Web HTTPS Ky own 2007 Wh HTTP 1a Rdp Terminni Senses ROP AetteX M secure bank com Secure Web External Web m Ke sonicds Secure Web HTTPS imi ashe Secure fhei Version 2 S3Hv21 KD tuernysim test This ix for EDENE Ky test Web HTTP ig IEST SSI Secure Wet External Viel Sia Beaute Weal HTTPS Tips Help SemechH a How can change my password You may be able to change your password 1Througn a Remote Desktop session or a webpage Please contac your administrator for Specific instructions What is NetExtender HetEXxtender creates a secure network connection amows vou ft access network resources servers and websites as If you were on the local network What is File Shares File Shares allews you to remotety access fies in the local rebwork You Can also copy files from your remote computer to Thie bor al network
94. ing BOO KAM an Sais e toad ero an bee ee te tae ta load eat anna do 127 Adding BOOKMAMS i4 5 hcsor ne Pe darte d ba does Pb dacdos 128 ECU BOOKMARKS eretada ree oe tee e dotate oral o dote o ios dien 134 Removing Bookmarks 0 cc ccc cette tee een e net n eens 134 Using BOOKMARK 52 7 dot bedebatriccdaee sade canes AE 134 Using Remote Desktop BookmarkS 0 cc cece cee eee 135 Using VNG Bookmarks 14 05 5s soc E nee dO orte oes ares 138 Using EEP BOOKMARKS 225 3 50992493 aoa edt eR de URS Rd eo RR NICA 140 Using Telnet Bookmarks ates dice x eua e pcne o CERE er b Sees 143 Using Sor Vl BOOKMARKS s 2 16 asp oto S e t etor une EEE rece Dos Ri 144 Using 55H y2 DOOEIBGI KS q unus oe ab legem eU PEE A oe deca 145 Using Web Bookmarks sese eee n tne nn eens 146 Using File Share Bookmarks 0 0 ccc cece cee ete e ee en eens 147 Using CMX BOOKIMGIKS ouo sexe Re ENNX RV NURSES E RE 147 Global Bookmark Single Sign On Options 0 00 ccc e eee eee ee 152 Per Bookmark Single Sign On Options 0 cece cee tees 153 Logging Out of the Virtual Office a sec ep tdt ic e RES tue neh ee 155 Taden 0S 5 25 05 duh ail IRE TOT Wein art haha We es atau 156 Te WTOC Waranty ed 621p a thats ss do ica E ioi ode iis oes eases ar 156 TTE SonicWALL SSL VPN 5 5 User Guide Using This Guide About this Guide Welcome to the SonicWALL SSL VPN User s Guide This manual is a user s guide It provides information on using
95. ing Customers by Email on page 88 e Assisting Customers on page 88 e Using the Virtual Assist Taskbar and Tab Controls on page 90 e Using the Virtual Assist File Transfer on page 93 e Changing the Virtual Assist Level of Control on page 107 e Ending a Virtual Assist Session on page 107 SonicWALL SSL VPN 5 5 User Guide Urb amp Using Virtual Assist Inviting Customers by Email Step1 To invite a customer to Virtual Assist use the email invitation form on the left of the Virtual Assist window If it is not displayed click the Invite button in the toolbar Note Customers who launch Virtual Assist from an email invitation can only be assisted by the technician who sent the invitation Customers who manually launch Virtual Assist can be assisted by any technician Step2 Enter the customer s email address in the Customer E mail field Step3 Optionally enter Technician E mail to use a different return email address than the default technician email Some mail servers require that an email address be entered and that it be on a valid domain Step4 Optionally enter an Additional Message to the customer Step5 Click Invite The customer will receive an email with an HTML link to launch Virtual Assist Customers requesting assistance will appear in the Assistance Queue and the duration of time they have been waiting will be displayed Assisting Customers A pop up window in the bottom right task bar aler
96. ing optimizations v Enable NetExbender log Cwerwrie the previous log when NetExteruer sharks Cancel Hide NetExtender when closing window Hides NetExtender when you click the ok button Display precise number in status Displays the exact numbers of sent and receive data Automatically establish the underlying connection Uses the Windows Mobile Connection Manager to establish the device s connection to the mobile network The Connection Manage is designed to determine the optimum network type such as 3g or wi fi If this option is disabled the user manages the connection manually Connection Manager compatibility mode This mode is enabled by default to make NetExtender Mobile work with applications calling the Microsoft Connection Manager API In limited cases server applications may not work properly through NetExtender Mobile so users can use this selection to disable the compatibility mode Note Ifa user disables the Connection Manager compatibility mode a confirmation message will prompt the user that this may cause some applications using the Connection Manager API to not work properly Enable Framing amp Caching optimizations This setting increases the performance of NetExtender Mobile when it is under a heavy load such as when downloading big files over NetExtender Enable NetExtender log Records log entries for NetExtender events Overwrite the previous log w
97. into the Current Password field then type a new password into the New password field and again into the Type it again field Tap OK SonicWALL SSL VPN 5 5 User Guide VEN amp Using Virtual Assist Related Documents The following Technical Notes provide more information on advanced NetExtender scenarios e Running NetExtender on a Different TCP Port http www sonicwall com us support 2134 3154 html e Using the SonicWALL CDP Agent over a SonicWALL NetExtender Connection http www sonicwall com us support 2134 3487 html e Using SonicWALL NetExtender to Access FTP Servers http www sonicwall com us support 2134 3465 html e Resolving NetExtender Error With McAfee Enterprise 8 5 http www sonicwall com us support 2134 6813 html Using Virtual Assist Virtual Assist is an easy to use tool that allows SonicWALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Virtual Assist is a lightweight thin client that installs automatically using the SonicWALL SSL VPN Virtual Office Virtual Assist can also be installed as a standalone client that can be launched directly from the client s computer The following sections describe how to use Virtual Assist e Understanding Virtual Assist section on page 80 e Installing and Launching Virtual Assist section on page 81 e Configuring Virtual Assist Settings section on page 83 e Selecting a Virtual Assist Mode section on page
98. ion tasks The administrator must enable a correct email address that is accessible by the user Users cannot enable the One Time Password feature and they must be able to access the SSL VPN Virtual Office portal SonicWALL SSL VPN 5 5 User Guide PN 4 Using One Time Passwords User Configuration Tasks Step 1 Step 2 Step 3 Step 4 Step 5 Note To use the One Time Password feature perform the following steps If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain pull down Click Login The prompt A temporary password has been sent to user email com will appear displaying your pre configured email account SONICWALL SSL VPN Login A bemp y passer di has Geen enl lo pou socal com middress Please enter it Ebor Paszwond Login to your email account to retrieve the one time password Type or paste the one time password into the Password field where prompted and click Login You will be logged in to the Virtual Office One time passwords are immediately deleted after a successful login and cannot be used again Unused one time passwords will expire according to each user s timeout policy Configuring One Time Passwords for SMS Capable Phones
99. irtual Assist Fie Shares allows you To remotely Disconnected ARME EHE By access fies in tie local network You d Chip canna eye eme Peak Can also Copy Mes from your remote computer ta the local nehat Aim md dm ole nom d mcm m T Note When using the Virtual Office with the admin username the Logout button is not displayed This is a security measure to ensure that administrators log out of the administrative interface and not the Virtual Office SonicWALL SSL VPN 5 5 User Guide VEL 4 Logging Out of the Virtual Office Trademarks SonicWALL is a registered trademark of SonicWALL Inc Microsoft Windows 98 Windows NT Windows 2000 Windows XP Windows Server 2003 2008 Windows Vista Windows 7 Internet Explorer and Active Directory are trademarks or registered trademarks of Microsoft Corporation Netscape is a registered trademark of Netscape Communications Corporation in the U S and other countries Netscape Navigator and Netscape Communicator are also trademarks of Netscape Communications Corporation and may be registered outside the U S Adobe Acrobat and Acrobat Reader are either registered trademarks or trademarks of Adobe oystems Incorporated in the U S and or other countries Other product and company names mentioned herein may be trademarks and or registered trademarks of their respective companies and are the sole property of their respective manufacturers Limited Warranty SonicWALL
100. irtual Office Bookmarks list click on the Configure icon for an existing bookmark The Edit Bookmark dialog box displays Step3 To change the bookmark name domain name or IP address of the bookmark edit the names in the Bookmark Name or Name or IP Address fields Step4 To change the service select a new Service from the pull down menu Step5 Optionally change other settings specific to the Service type Step6 Optionally enable or disable the Automatically log in setting or change the credentials selection Step7 Click Apply The Virtual Office home page displays with the new IP address or domain name Removing Bookmarks To remove a bookmark perform the following steps Step1 ldentify a bookmark in the Virtual Office Bookmarks list that you want to remove Step2 In the Virtual Office Bookmarks list click on the delete icon for the bookmark you want to remove The bookmark disappears from the list Using Bookmarks The following sections describe how to use the various types of bookmarks e Using Remote Desktop Bookmarks section on page 135 e Using VNC Bookmarks section on page 138 e Using FTP Bookmarks section on page 140 aay SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W amp e Using Telnet Bookmarks section on page 143 e Using SSHv1 Bookmarks section on page 144 e Using SSHv2 Bookmarks section on page 145 e Using Web Bookmarks section on page 146 e Using File Share Bookmarks section on page
101. istance The customer requests assistance by one of these methods Logs into the SonicWALL SSL VPN Virtual Office and clicks on the Virtual Assist link Heceives an email invitation from the technician and clicks on the link to launch Virtual Assist Navigate directly to the URL of the Virtual Assist home page that is provided by the technician The Virtual Assist application installs and runs on the customer s system The customer appears in the Virtual Assist Assistance Queue The technician clicks on the customers name and launches a Virtual Assist session The technician s Virtual Assist window now displays the customers entire display The technician has complete control of the customer computer s mouse and keyboard The customer sees all of the actions that the technician performs If at anytime the customer wants to end the session they can take control and click on an End Virtual Assist button in the bottom right corner of the screen When the session ends the customer resumes sole control of the computer Installing and Launching Virtual Assist To install and launch a Virtual Assist session perform the following steps Step1 Login to the SonicWALL SRA security appliance Virtual Office If you are already logged in to the SonicWALL SSL VPN customer interface click on the Virtual Office button Step2 Click on the Virtual Assist button EJ Virtual Assist amp Aust qomeepne by leaking catol el thar com
102. it and then click the Remove buttons Click the Remove All buttons to delete all connection profiles The Settings tab allows you to customize the behavior of NetExtender SonicWALL NetExtender Properties e tl Lonnection Profiles Settings aeris Lorestan ripis When stet up my computer Pran Pulenanaly conum with a Leg Advanced Wie beg iri bo my computer y fubemabcaly Hal Het Exierides Ut Digia Het Exsender L9 Vemm Fm ung Piel dar Ul d Minimize te the tray icon when Het Gender winde i closed Pinata bo thee tray icon when Her ESender connected d Disney Connect Discennect Tia fenem the System Trey Putomamcaly reconnect when the connecbon ir berated Disney precise number in connectinn state Enable LI animeeons Win ret Hee Peeper dE Unie Het ender automaticaly 4 Dennen an aree connection Caneel To have NetExtender launch when you log in to your computer check the Automatically start NetExtender UI NetExtender will start but will only be displayed in the system tray To have the NetExtender log in window display check the Display NetExtender UI checkbox Ppply Select Minimize to the tray icon when NetExtender window is closed to have the NetExtender icon display in the system tray If this option is not checked you will only be able to access the NetExtender UI through Window s program menu 7 6 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 8 Select Displa
103. itps 10 5 108 145 What should Firefox do with this file Dpen with Archive Manager default m Save File L Do this automatically for files like this from now on Cancel Pie Seren HT us UX Wet Extern Wet Sie ah at teocwewebiMTIES 4 X Web HTTP WebiHTTE P X Luis HT TP a X inves computer to the local network How can l add more bookmarks Click Show Edit Controls above the bookmark table howard me nghi Mand zie een click New Bookmark N either of these options are missing your administrator may not have gen you pennan to add bookmarks Note You must be logged in as root to install NetExtender although many Linux systems will allow the sudo install command to be used if you are not logged in as root Step3 Toinstall NetExtender from the CLI navigate to the directory where you saved the tgz file and enter the tar zxf NetExtender tgz command w ET imei vrenderclient Shell Kamsale mk 9 tar zxf HetFxtender tgz a amp cd metEstender lient Fx n tfLxtf nd ertlient amp install amp nnicWALL Metfxten rr 2 5 17 Installer Please run the MetExtender installer as root On many systeBs you can use the surda caseand FX n tfLxf nd ertclient amp sudo inztall Passwanrm SonicWALL HetExtender 2 5 17 Installer Checking library dependencies Checking pppd Cupying Tiles gt TNS TALLATION SUCCES SF UI Type netExtenderGui to launch Het
104. l Assist Client to your computer then unpacking and running it a d Name cwang Issue Summary 128 characters maximum E A Request Support You will be asked to install software so that a technician can control your machine remotely You will always have overriding control of your machine throughout the caccinn Step4 You can now launch Virtual Assist either from a shortcut on your desktop or by typing VirtualAssistGui in the Terminal window w Step5 Ifthe Server address is not auto propagated in the login window enter the Server address and click Request Support The server address can be either an IP address IPv6 address or hostname of the SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols gt Sonicwall Virtual Assist Settings Help Server 10 103 62 208 Request Support Request Support Step6 The list of Available Portals is displayed To connect to a specific portal select it and click OK To have your request be serviceable by all of the portals select All Portals and click OK Portals Please select the portal associated with your Technician for service VirtualOffice SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Step7 You may be prompted to enter an Assistance Code Assistance code Enter the assistance code to make the request PO Step 8 You may be prompted to read and accept a disc
105. l bear Step 2 ia Sofware installation window appear click Install Now to proceed OMS Walk umo ire ie das penche ie Vra puerta EL PIE Lud Mijn SS SIE NL um ng Step 3 An Add ons window appear click Restart Firefox ta proceed A E y A Da kiia h mama Them Fagin Ei lee lerh e bi o lee ror 1 artum Sadar eris Step3 Click on the Allow button A plugin installation window displays Click Install Now The Virtual Assist plugin and client installs You may be prompted to restart your browser Software Enstaliatson Malicious software can damage your compuber or violate your privacy You have ached to install the Folkweng mem VAbaunrher swa dc Fitps fivirtualssset eng sonicwal com wALsuncher xpi 7 G d SonicWALL SSL VPN 5 5 User Guide Step 4 Step 5 Step 6 Using Virtual Assist Wax You can now launch Virtual Assist either from the Virtual Office window or from a shortcut that is added your Programs list under Window s start button If the Server address is not auto propagated in the login window enter the Server address and click Request Support The server address can be either an IP address IPv6 address or hostname of the SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols Mirtual Assist Login 5 5 1 8 Zettnqs Helin HI Bequest Support Eria tee rae ce PP agdas of your puppe sent If you receive the following security alert click Unblock to
106. l connection the entered values are saved as a profile that you can select when starting NetExtender NetExtender saves the information in a secure file on the smartphone BAL DAD 12 09 AM poagn E Al 6 42PM r Ti Connect NetExtender Login 10 0 61 8 ry I cm m b Ini ing engine usemnesLaocaltamain s5onicwall sonicwall com Sore mnic sanicwsall car Domain LocalDomain Save user name amp password w SonicWALL SSL VPN 5 5 User Guide Urb 4 Using NetExtender Step 4 Step 5 If One Time Password is enabled on the SonicWALL SRA appliance the One Time Password prompt is displayed Enter the temporary password that was emailed to your configured account and tap OK B HG 11 49 e F temporary password has been sent to your sonicwall com address Please enter it below If your smartphone is synchronized to your email account you can pull down the email notification from the top bar or switch to your home page and access your email from there After viewing the temporary password in your email or copying it to your clipboard tap the NetExtender application icon to return directly to this screen To use the clipboard press the password in your email and select Select Text Press the selected text again and select Copy Then in the OTP screen press the field and select Paste Some Android smartphones require you to hold the OK button for clipboard access If Two Factor Authentic
107. laimer Click OK Step 9 A pop up window indicates that you are in the Virtual Assist queue The technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request 9 Sonicwall Virtual Assist A Technician will be available to help you shortly A You may cancel request anytime by clicking the Cancel button Your current time in queue is 0 59 Add Information Please inform the technician of your ticket ID located below Click Add Infomtion above to provide additional details icket ID T00103 Name Kevin Change Name Step 10 The Virtual Assist queue window provides two options e Click Add information to provide the technician with information about your issue La Add Information Support information Maximum 127 characters Input some information here e Click the icon next to the Request Name line in the queue window to specify your name By default the computer name is used Change Customer Name Current Request Name cwang New Request Name PO SonicWALL SSL VPN 5 5 User Guide ET M Using Virtual Assist Step 11 When the technician initiates the session the Virtual Assist toolbar appears in the bottom right of your screen The technician now has control of your computer NE Sonicwall Virtual b 4 Status Trusted LJ o Exit Virtual Assist Press Ctrl Alt U to change to Active Status Mo prompts will occur while in Trusted S
108. lder in the Add New Folder field and click Submit Step9 To add a file in the current File Share location click the Browse button Navigate to the location of the file on your computer in the Choose file window that opens select the file and click OK and then click Submit in the File Share window Managing Bookmarks Bookmarks are objects that enable you to connect to a location or application conveniently and quickly The Virtual Office Bookmark system allows bookmarks to be created at the group and user levels The administrator can create both group and user bookmarks which will apply to applicable users while individual users can create only personal user level bookmarks Since bookmarks are stored within the security appliance s local configuration files it is necessary for group and user bookmarks to be correlated to defined group and user entities When working with local groups and users LocalDomain this is automated since the administrator must manually define the groups and users on the device Similarly when working with external groups not LocalDomain the correlation is automated since creating an external domain creates a corresponding local group However when working with external users a local user entity must exist so that any user created personal bookmarks can be stored within the SRA appliance s configuration files The need to store bookmarks on the SRA appliance itself is because LDAP RADIUS and NT auth
109. less Brom Ies Interest con bes usedul this fle hype cn potentis ham your computer If vou do not trust the pounce do not dur oi canne Las iol been Mod i Hep i Step3 Click Run to launch the file Click Save to save it to your computer Uploading Files To upload a file perform the following Step1 Click Upload Files in the navigation bar The Upload FTP Files window will be displayed FD https 1040 57 89 Somme WALL wirlual Olie lix nasalt Inbernet Explarer provided by SonicWall IMC SONICWALL gt File Transfer Center b Sessions raria Upload FIF Files ko Fidei How Session BO mmus ERU KT Al Files and Folders bh Download Files E Lipload files tao rsSL PRINeEsenderendaws F Upload Files F Online Help Go ba dinteclory Subst E Logout FIP Session Creabe n n folder Submit Upload Flles i Fintain rate i Jue Ekoci fili di upliad ot VPragrarn Filesi Uploact Cancel ay SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W amp Step2 The current directory is displayed in the Upload files to field To navigate to a different directory enter the directory name in the Go to directory field To create a new folder in the current directory enter the name of the folder in the Create new folder field and click submit Step3 Select the file you want to upload by clicking the Browse button and navigating to the file You can upload up to three files at onc
110. licking on a bookmark in the Virtual Office portal Step2 Double click the C drive double click the Documents and Settings folder then double click a specific folder for example the one that holds the Desktop folder Step3 The current directory shows the Desktop folder Select a file or folder from the remote machine and drag its icon onto the Desktop folder in the local machine This will copy the item from the remote machine directly onto the desktop Ze Mu ere sree h Gois gi oy Qo Ge eG i Ne a HTUSER DAT thu das LOC d nhper mri Fr mhuri ixl zi FRE died dd ai Herai um DLUE MAD ana 3 hekden bii Step4 Once the transfer is complete double click on the Desktop folder The folder copied from the remote machine will display in that folder SonicWALL SSL VPN 5 5 User Guide b 119 3 amp Using File Shares Note The item still exists on the remote machine To initiate a move not a copy you must use the Move command from the right click menu SONAL Pile Shares My Computer OOR Um ou COG Ua Ob Wma Ea meri 4s ard Teengi hr Emha Tak 3 7 ee antes DES 9 FM der ihe aged biah biah ELLER TET o dem hias Fabia 4 kaiaa loldi dc Hem Fakin Ec eee Poke ET Step5 To delete the original file or folder select it by clicking on it once and press the Delete button on the tool bar Alternatively the item can be deleted by using the right click menu The File Shar
111. ll initially launch in View Only mode instead of Trusted mode which is the default Active Mode Specifies that Virtual Assist sessions will initially launch in Active mode instead of Trusted mode which is the default ay SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Selecting a Virtual Assist Mode Step 1 When you first launch Virtual Assist by default it will be in customer mode To change the mode perform the following steps Click Change Mode to select one of four possible modes Virtual Assist Login 5 5 0 8 Setting Helin m Cugtoner M Lir tenden Technis Varta decess Unattended node sti pou bo requeit puppi and recie barot mhie berai from wur tysbim You ihodd contact gour puppet bechriessn bo piovide Hee techrecsan vrbi be unallerrded iode pirid ard ven dence should eoa Change Made Step2 Select one of the following four Virtual Assist modes e Customer Select this mode to request support For information on customer mode see the Initiating a Virtual Assist Session from the Customer View section on page 94 e Unattended Select this mode to receive support help while you are away from your computer You will be prompted to enter a password which the technician can then enter and assume control of your system without further confirmation from you For information on unattended mode see the Using Virtual Assist in Unattended Mode section on page 108 e Technician
112. may be slow in terms of CPU time consumption on the server side Use high levels with very slow network connections and low levels when working over higher speed networks The Default value means that the server s default compression level should be used JPEG image quality 6 This cannot be modified Cursor shape updates Enable Cursor shape updates is a protocol extension used to handle remote cursor movements locally on the client side saving bandwidth and eliminating delays in mouse pointer movement Note that current implementation of cursor shape updates does not allow a client to track mouse cursor position at the server side This means that clients would not see mouse cursor movements if the mouse was moved either locally on the server or by another remote VNC client Set this parameter to Disable if you always want to see real cursor position on the remote side Setting this option to Ignore is similar to Enable but the remote cursor will not be visible at all This can be a reasonable setting if you don t care about cursor shape and don t want to see two mouse cursors one above another Use CopyRect Yes CopyRect saves bandwidth and drawing time when parts of the remote screen are moving around Most likely you don t want to change this setting Restricted colors No If set to No then 24 bit color format is used to represent pixel data If set to Yes then only 8 bits are used to represent each pixel 8 bit color fo
113. me is used amEELE Current Request Mame New Request Name lI OK Cancel Step 10 When the technician initiates the session the Virtual Assist tooloar appears in the bottom right of your screen The technician now has control of your computer Virtual Assist EJ Status Trusted c Open Chat Dialog End Support Press Ctrl Alt4 T to change to Active Status No Prompts will occur when in Trusted Status Step 11 For information on using Virtual Assist once the session is active see Using Virtual Assist section on page 106 aay SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wax Initiating Virtual Assist on a Linux Client Note SonicWALL Virtual Assist is fully tested on the Ubuntu distribution of Linux It has not been tested on other Linux distributions To launch a Virtual Assist customer session to request help on your Linux computer perform the following steps Step1 There are several methods for accessing Virtual Assist e Navigate to the URL of the Virtual Assist home page that is provided by your support technician e f you received an email invitation click on the link in the email or paste the URL into your Web browser e The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SONICWALL SSL VPN Login Han rris f Poaceae Domen LocelDiomain Loi Looking Tor bauble eee Fen gp penc frei wth na
114. more information about offloaded applications see the Application Offloading section in the SonicWALL SSL VPN Administrator s Guide FTP Bookmarks For FTP bookmarks click Show advance server configuration to select the character encoding You can also select Use SSL VPN account credentials to log in or configure custom credentials for use with Single Sign On To disable the use of SSO clear the Automatically log in checkbox SonicWALL SSL VPN 5 5 User Guide bp 133 N 4M Using Bookmarks SSHv2 Bookmarks For SSHv2 bookmarks you must have SUN JRE 1 6 0 10 or higher and must be connecting to a server that supports SSHv2 There are also options to Automatically accept host key and to Bypass username The bypass option should only be used for SSHv2 servers that do not require authentication in the initial connection session such as SonicWALL security appliances Editing Bookmarks You can change the IP address domain name or IPv6 address as well as the service and other settings associated with an existing bookmark b Note Only user created Bookmarks can be edited or deleted by the user Global or Group Bookmarks pre defined by the administrator cannot be edited or deleted To edit a bookmark to change its name or associated IP address perform the following steps Step1 Identify a bookmark in the Virtual Office Bookmarks list for which you want to change an IP address or domain name or other settings Step2 In the V
115. mxe2B35 pppue7854 OF ema MOLL 11 02 1 928 ns info ZdB2 Monitoring nameserwer 10 192 1 00 Of fee AOL 11 05 1 938 dns inte ZdH2 Monitoring nameserwer 10 192 1 20 D 24 2011 11 05 18 52 8 general inte adda Client IF Address 10 2 4222 11 D ZW ZUIl 11 02 18 5 M9 general into Jd35 YOu now Nave access t the Tollowing remote network D ZM ZU11 11 02 18 2 9 g n ral info Zd32 10 2 dod 0 foo 422 4242 0 D 29 J7011 LIS le g neral notice dsa NetbExrtender connected successTully D IMN IO0ll 11 05 18 999 general inte Zd32 Saving proTiles preTerences Oe MTL 11 02 18 000 general into dda Done saving pro Tiles preTerences 4L z Em i E Clear Log Copy Log Clase Step 11 To generate a diagnostic report with detailed information on NetExtender performance go to Help Generate diagnostic report Step 12 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory ay SonicWALL SSL VPN 5 5 User Guide Using NetExtender W Installing and Using NetExtender for Windows Mobile Note Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 SonicWALL SSL VPN now supports NetExtender for the Windows Mobile platform NetExtender for Windows Mobile provides the following features e One time passwords e Two factor authentication e HTTP proxy e Connection profiles NetExtender supports the following Windows Mobile platforms e Windows Mobile 5
116. n Og B FG 230r Ry NetExtender 5 0 3 2010 SonicWALL Inc 7 G d SonicWALL SSL VPN 5 5 User Guide Step 14 Step 15 Step 16 Step 17 Using NetExtender Wx PREFERENCES PROXY SETTINGS To configure NetExtender preferences including proxy and notification settings select the Preferences option nder Pre im Pr SUL A General settings Connection notification Proxy Use Proxy Proxy settings Under General settings select the Connection notification checkbox to display the NetExtender traffic indicator in in the notification bar Clear the checkbox to prevent the indicator from being displayed Under Proxy select the Use Proxy checkbox to configure NetExtender Android to access external networks through a proxy server A proxy server is often used for access to the Internet if the initial connection is made to a local zone such as LAN or WLAN After selecting the Use Proxy checkbox tap Proxy settings to open the configuration screen for the proxy server MUAZ B FIG 6 45PM Configure a proxy server 192 168 168 3 Step 18 Type the IP address of the proxy server into the Server field Type the port number of the port that the server listens on into the Port field This field displays 8080 by default but there is no standard listening port for a proxy server Step 19 Optionally enter your login credentials for the server in the User and Password fields Entering your credentials
117. n the device and then type the code into the field on your smartphone and tap OK Oe B ng Please wait for the token t change then enter the next code If a proxy server is configured in the smartphone via Preferences the Proxy Authentication screen is displayed next Enter the username and password for the proxy and tap OK BAS BfGcom Proxy authentication NetExtender will connect at this point unless there is a problem or error You will see the NetExtender traffic indicator appear in the notification bar at the top of the display unless it is disabled in Preferences The up and down arrows appear white when data is passing through the VPN tunnel When no data is currently passing the arrows appear gray Control traffic does not affect the arrow colors The up arrow indicates that data is being sent from the smartphone to the network and the down arrow indicates that data is being received from the network by the smartphone TU SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 11 If the NetExtender service running on the smartphone has a problem or has stopped running the following screen is displayed Tap Exit to quit the application You may need to restart the service possibly by turning the phone off and on again or you may need to re install NetExtender Eid DAD 12 20AM FORKA Nerkxtender Errar Exiting or Disconnecting from NetExtender EXIT Exiting and res
118. n using releases prior to 2 5 users should periodically launch NetExtender from the SonicWALL Virtual Office to ensure they have the latest version Prior to release 2 5 the standalone NetExtender does not check for updates when it is launched directly from a user s computer Changing Passwords Before connecting to the new version of NetExtender users may be required to reset their password by suppling their old password along with providing and re verifying a new one Authentication Methods NetExtender supports various two factor authentication methods including one time password RSA and Vasco If an administrator has configured one time passwords to be required to connect through NetExtender you will be asked to provide this information before connecting SONICWALL gt NetExtender amp Atemporary password has been sent to your sonicw all com address Please enter amp below L Password C Caneul If an administrator has configured RSA pin mode authentication to be required to connect through NetExtender users will be asked whether they want to create their own pin or receive one that is system generated B Enteranew PIN having from 4 to B digits 2 F Pin i Type it zm SonicWALL SSL VPN 5 5 User Guide VEU amp Using NetExtender Once the pin has been accepted you must wait for the token to change before logging in to NetExtender with the new passcode SONICWALL Net
119. ne time password You have not been enabled to use the One Time Password feature Contact your SSL VPN administrator ls your email address correct If your email address has been entered incorrectly contact your SSL VPN administrator to correct it s there no email with a one time password Wait a few minutes and refresh your email inbox Check your spam filter If there is no email after several minutes try to login again to generate a new one time password e Have you accurately typed the one time password in the correct field Re type or copy and paste the one time password Troubleshooting Common Errors Symptom see an error message indicating that an email configuration is invalid and have verified that the One Time Password feature is configured correctly Possible Cause The SonicWALL SSL VPN One Time Password feature does not support email servers that require passwords or other authentication Your email server must allow anonymous access to allow the One Time Password feature to successfully send a one time password SonicWALL SSL VPN 5 5 User Guide PN amp Using NetExtender Using NetExtender The following sections describe how to use NetExtender e User Prerequisites section on page 26 e User Configuration Tasks section on page 28 e Verifying NetExtender Operation from the System Tray section on page 47 User Prerequisites Prerequisites for Windows Clients Windows clients must meet the f
120. nformation on SonicWALL Products Contact SonicWALL Inc for information about SonicWALL products and services at Web http www sonicwall com Email sales sonicwall com Phone 408 745 9600 Fax 408 745 9300 Current Documentation Check the SonicWALL documentation Web site for the latest versions of all SonicWALL product documentation at http www sonicwall com us Support html Quick Access Work Sheet This section should be completed by your network administrator to allow remote users SSL VPN access Important Information You Need IP Address User Name Password Domain TL SonicWALL SSL VPN 5 5 User Guide Virtual Office Overview This chapter provides an overview of the SonicWALL SSL VPN user portal It also includes an introduction to the SRA appliance and its features and applications This chapter contains the following sections e Virtual Office Overview section on page 9 Browser Requirements section on page 10 Web Management Interface Overview section on page 12 Virtual Office Overview SONICWALL SSL VPN Virtual Office provides secure remote access to network resources such as applications files intranet Web sites and email through Web access interface such as Microsoft Outlook Web Access OWA The underlying protocol used for these sessions is SSL With SSL VPN mobile workers telecommuters partners and customers can access information and applications on your intranet or extranet
121. nt TT 10 0 87 41 2 Len IBID IBI TE prowiia Step 2 A hostkey popup displays Click Yes to accept and proceed with the login process ele an Cir inn SonicWALL SSL VPN 5 5 User Guide VETT 4l Using Bookmarks Step3 Enter your password and click OK Password amp udheniicaiian fx Enter passwd for admin oH iB Apnd SSA arin Step4 The SSH terminal launches in a new screen E soi FALL LB EDITT he HT Java Clien base loaded y eriet ture oe rante By own iere Using Web Bookmarks Step1 Click on the HTTP or HTTPS bookmark EN Note HTTP bookmarks can have a port designation and a path Step2 A new window is launched in your default browser that connects to the domain name or IP address specified in the bookmark Ty SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W amp HTTP amp HTTPS Bookmarks have been tested and verified to support the following web applications e Microsoft Outlook Web Access 2010 Outlook Web Access 2007 and Outlook Web Access 2003 e Windows Sharepoint 2007 Windows Sharepoint Services 3 0 and Windows Sharepoint services 2 0 e Please note the client integrated features of Sharepoint are not supported e Lotus Domino Web Access 7 0 e Novell Groupwise Web Access 7 0 Note Other applications may work but there may be problems accessing pages that are malformed have advanced HTML features use an unsupported authentication method for example Wind
122. nter the IP address of the SRA appliance in your computer s browser The authentication window is displayed SONICWALL SSL VPN Login Usemame lear PARADE BEEBZEREBEEN Doman VASCO AUTH Cimi Step2 Enter your username in the Username field Step 3 Enter the passcode in the Password field Your entry in the password field depends on whether your system requires a PIN f you already have a PIN enter the passcode in the Password field The passcode is the user PIN and the VASCO Digipass token code For example if the user s PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 f a PIN is required but you do not yet have a PIN enter the VASCO Digipass code in the Password field You will be prompted to create a PIN lf the RSA server does not require a PIN simply enter the VASCO Digipass code Note Consult with your network administrator to determine if your configuration reqiures a PIN Step4 Select the appropriate Domain Note If manually entering the Domain it is case sensitive Step5 Click Login SonicWALL SSL VPN 5 5 User Guide VIP 4 Using Two Factor Authentication Other RADIUS Server Two Factor Authentication Process Step 1 Step 2 Step 3 Step 4 Note Step 5 Step 6 To log in to the SonicWALL SSL VPN Virtual Office using another type of RADIUS server for two factor authentication perform the following steps Enter the IP address of the S
123. number u user name The user name for the proxy server p password The password name for the proxy server b bypass proxy Bypasses the previously configured proxy settings Save oaves the proxy settings NECLI viewlog Displays the NetExtender log Installing NetExtender on MacOS SonicWALL SSL VPN supports NetExtender on MacOS To use NetExtender on your MacOS system your system must meet the following prerequisites e Mac OS 10 6 and higher e Java 1 5 and higher e Both PowerPC and Intel Macs are supported SonicWALL SSL VPN 5 5 User Guide b 49 4 Using NetExtender To install NetExtender on your MacOS system perform the following tasks Step1 Login to the SonicWALL Virtual Office Step2 Click the NetExtender button Step3 The Virtual Office displays the status of NetExtender installation A pop up window may appear prompting you to accept a certificate Click Trust SONICWALL Virtual Office Welcome jp Logout Help NetExtender for Mac OS X in ema ture vau can launch NaetExtender frm your Applications leider wioeul returning to th s wab pags Firburn to Virtual ffice Copyright 2008 anicWALL Tne Ao F sslvpn eng sonicwall com Do you want to accept this certificate from the web site 5 lvacim Tar the purpose of exchanging encrypted information Publisher authenticity can nat be verified Show Certificate Don tTrust Trust CERE Step4 A second pop up windo
124. o be the same as the name or id attribute of the HTML element representing Password in the Login form for example lt input typezpassword namez PASSWORD id PASSWORD maxlength 128 gt Step 7 Click OK 7 154 d SonicWALL SSL VPN 5 5 User Guide Logging Out of the Virtual Office Wax Step8 Enter the User name and password for the service F Server irie Proce E Heineken mE Login TI c Uneemews RTE Email fessi sse Agent rau AG peto and Suppurt p Moms t Parpi bin Ho 200 Bye losen peee masseter Logging Out of the Virtual Office To end your session simply return to the Virtual Office home page from wherever you are within the portal and click on the Logout button SONICWALL Virtual Office Welcome to tha SonicWALL Virtual Offica TipsiHelp Saath tl al Soret WALL S Virtual Ofce provides easy and secune nemote access ho the c rporabe I i network from anyahere on the Internet What is NetExtender Logout Ne4Extenger creates a secune network Cick a pre definest bookmark or create your own In securery access a caporale network r nneckon allows you fo access rESDUme MEDVE r esouroes pervers and Launch Net amp xtender ip create a secure network connection io the corporate network for unebabes as i you woro n fh focal Bull network access network What ia File Shares MatExtender mS rian 9 y V
125. ollowing prerequisites in order to use NetExtender e One of the following platforms Windows 7 Services Pack 1 Windows Vista Service Pack 2 32 bit amp 64 bit Windows XP Home or Professional Windows XP Service Pack 3 e One of the following browsers nternet Explorer 8 0 and higher Mozilla Firefox 9 0 and higher Google Chrome 16 0 and higher e To initially install the NetExtender client the user must be logged in to the PC with administrative privileges e Downloading and running scripted ActiveX files must be enabled on Internet Explorer e Ifthe SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication then it is necessary to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page Prerequisites for Windows Mobile Clients NetExtender supports the following Windows Mobile platforms e Windows Mobile 5 PocketPC version e Windows Mobile 6 Professional Classic version Windows Mobile 5 Smart Phone version and Windows Mobile 6 Standard version are not currently supported Prerequisites for MacOS Clients MacOS clients meet the following prerequisites in order to use NetExtender e MacOS
126. ollowing sections describe how to log in to the SSL VPN Virtual Office portal using two factor authentication e User Prerequisites on page 18 User Configuration Tasks on page 18 User Prerequisites Before you can log in using two factor authentication you must meet the following prerequisites e Your administrator has created your user account e You have an account with a two factor authentication server that conforms to the RFC standard User Configuration Tasks The following sections describe how users log in to the SonicWALL SRA appliance using the two types of two factor authentication e RSA Two Factor User Authentication Process on page 18 e VASCO Two Factor User Authentication Process on page 21 e Other RADIUS Server Two Factor Authentication Process on page 22 RSA Two Factor User Authentication Process The following sections describe user tasks when using RSA two factor authentication to log in to the SonicWALL SSL VPN Virtual Office e Logging into the SSL VPN Virtual Office Using RSA Two Factor Authentication on page 19 e Creating a New PIN on page 20 e Waiting for the Next Token Mode on page 20 7 18 d SonicWALL SSL VPN 5 5 User Guide Using Two Factor Authentication Wh Logging into the SSL VPN Virtual Office Using RSA Two Factor Authentication Step 1 Step 2 Step 3 EN Note Step 4 NN Note Step 5 To log in to the SonicWALL SSL VPN Virtual Office using RSA two
127. on on page 23 e Using NetExtender section on page 26 e Using Virtual Assist section on page 80 e Using File Shares section on page 110 e Managing Bookmarks section on page 127 e Using Bookmarks section on page 134 Logging Out of the Virtual Office section on page 155 Importing Certificates If the SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page The following warning messages may be displayed Click Yes The certificate will be imported Potential Scripting Violation E X This Web site is adding one or mare certificates to this computer Allowing an untrusted Web site to update your certificates is a security risk The Web site could install certificates vou do not trust which could allow programs that WOU do mot trust to run on this computer and gain access to your data Do vou want this program to add the certificates now Click Yes iF you trust this Web site Otherwise click Ma SonicWALL SSL VPN 5 5 User Guide EH amp Using Two Factor Authentication Using Two Factor Authentication The f
128. onicWALL SSL VPN 5 5 User Guide VEN amp Using NetExtender Step3 To view NetExtender routes tap the Routes tab The display shows all subnets currently available from the smartphone OBS B noe esi N nee Status Routes DNS Destination Netmask IO D D 155 255 0 0 10 1 1 0 255 155 2550 10 10 3 0 0 i22 2452 0 0 10 128 7 0 Ii22 1324 223 U 10 180 200 0 255 255 255 0 10 1595 1 0 255 155 2550 10 195 11 0 ia2 152 125 0 10 T98 0 0 422 225 0 0 10 2 0 0 255 255 0 0 10 200 00 222 254 0 0 10 202 000 i22 452 0 0 10 203 0 0 122 222 0 0 10 208 0 0 255 240 0 0 10 5 0 0 222 425 0 0 10 50 0 0 255 255 0 0 Step4 To view the configured DNS servers tap the DNS tab DAG ia FI 450r Netrxtender Status Routes DNS ONS Servers 10 50 128 52 10 50 128 53 NetExtender Android supports DNS only WINS or DNS suffix are not supported Configuring Profiles Preferences and Proxy Servers To configure NetExtender profiles and preferences including proxy servers on your Android smartphone perform the following steps Step1 Todisplay NetExtender options start NetExtender and then press the options or menu button on the smartphone The options are displayed at the bottom of the screen i TT e i Profiles Preferences Export Log About Exit 7 A d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W PROFILES Step2 To display the NetExtender Profiles screen start NetExtender and then press the options or
129. oup must be authorized to use NetExtender SONICWALL Mobile Connect is an app for iPhone and iPad that like NetExtender uses SSL VPN to enable secure mobile connections to private networks protected by SonicWALL security appliances For information about installing and using SonicWALL Mobile Connect see the SonicWALL Mobile Connect User s Guide at Prerequisites for Android Smartphone Clients The NetExtender Android client is supported on rooted smartphones running the following versions of the Android operating system e 1 6 or higher The NetExtender Android client is compatible with any SonicWALL SSL VPN firmware version that supports the NetExtender Linux client specifically e SSL VPN 4 0 and higher As new features are added users must install the updated client to access all the features supported by the new firmware Likewise if a new client is used with older firmware some client features may not be functional For best results the latest firmware should always be used with the latest client SonicWALL SSL VPN 5 5 User Guide PUB amp Using NetExtender b Note Warning Only rooted devices are supported for NetExtender Android in SonicWALL SSL VPN The rooting requirement is due to limitations and restrictions of the Android platform A layer 3 VPN client like NetExtender requires root permission for certain necessary OS level operations Until a future version of the Android OS provides a flexible API to
130. oviding a user name Note that you may not be able to access resources that require authentication Select Explicit to login with a user name and password You may also be required to provide a domain name or NDS context Welcome To log on Select an aubhenication melted enter the requmed information ad then cick Long Cm If you no nor Roe vor ingen deak contact yer sysbeem administrator Eon 1 i n zn Logan tye Expos 8 a i rey 7 150 d SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W Step3 Click the Log On button The Citrix Java applet displays The default applications will display in the Applications section in the middle of the window CITRIX Aplications Hint Lingle bn find thes resource yau need Lise Search bo lncore For you Step 4 Click on Messages to view any Citrix messages you have received Paes Showing message s B Warning Step5 Click on Preferences to customize the Citrix Java applet settings Step6 Select Display Settings to change the language and to specify if Citrix hints should be displayed splay Sellings General Cord ure sone ance sellings Ural are apples across the Larger wide Web abe Engish ts kh 8 m Anplications screen Lee ese cet hinge bo personals your aolscatkers orem e rents Full Gesehics onhy Step7 Select Session Settings to customize the default window size for Citrix sessions Display Lise hese zebbrus bo parsonakze the a
131. ows Integrated Authentication and URLs that are embedded in Macromedia Flash Java or ActiveX If a web application does not work with a HTTP or HTTPS Bookmark contact your administrator Using File Share Bookmarks For information on using File Share bookmarks see the Using HTML Based File Shares section on page 125 Using Citrix Bookmarks Citrix is a remote access application sharing service similar to RDP It enables users to remotely access files and applications on a central computer over a secure connection There are two types of Citrix bookmarks e ActiveX Citrix Bookmark on page 147 e Java Citrix Bookmark on page 150 ActiveX Citrix Bookmark When using the Internet Explorer web browser Citrix bookmarks launch the ActiveX Citrix client The following steps describe how to launch and use the ActiveX Citrix client Step1 Click on the Citrix bookmark The first time you use a Citrix bookmark it will install the Citrix Web Client on your computer if you do not already have it Step2 Click Install to install the client x Do yeu want te install thie software Hame Cii Web Chen Pubisher Cilrix Systems Ins 5 More urs Install Wide fies trom She Internet can be ucetul His tie lype can polen iay ham yar cemputer Only install safrwane fom publishers you trust Wigle risk SonicWALL SSL VPN 5 5 User Guide p 147 N WY Using Bookmarks Step3 The Citrix Web Client begins to install If prompted cl
132. p 4 Step 5 Step 6 Step 7 Step 8 NetExtender Connection Scripts can support any valid batch file commands For more information on batch files see the following Wikipedia entry http en wikipedia org wiki bat The following tasks provide an introduction to some commonly used batch file commands To configure the script that runs when NetExtender connects click the Edit NxConnect bat button The NxConnect bat file is displayed To configure the script that runs when NetExtender disconnects click the Edit NxDisconnect bat button The NxConnect bat file is displayed By default the NxConnect bat file contains examples of commands that can be configured but no actual commands Too add commands scroll to the bottom of the file To map a network drive enter a command in the following format net use drive letter server share password user DomainNname For example to if the drive letter is z the server name is engineering the share is docs the password is 1234 the user s domain is eng and the username is admin the command would be the following net use z engineering docs 1234 user eng admin To disconnect a network drive enter a command in the following format net use drive letter delete For example to disconnect network drive z enter the following command net use z delete To map a network printer enter a command in the following format net use LPT1 ServerName PrinterName user Domain name
133. ppearance of wour Lr s gm SonicWALL SSL VPN 5 5 User Guide Wi 4 Using Bookmarks Step8 In the Window Size pulldown menu select one of the following options No preference Uses the default setting configured by your administrator Full screen Resources are maximized to fill your screen Seamless Resources that support resizing appear in resizable windows e Custom dimensions Enables you to specify the width and height of the resource window in pixels Percentage of screen Enables you to specify the percentage of your screen the resources will occupy Step9 Select Account Settings to configure the behavior of your sessions when you log out Step 10 Select the Log off all sessions checkbox to shut down all of your active resources when you log off from the Citrix session If you disable this checkbox any active resources that are hosted on a remote server continue to run when you log off Offline applications always continue to run when you log off from the Citrix session Global Bookmark Single Sign On Options You can configure single sign on using the Options button on the main Virtual Office page SSO settings will be enabled only if the administrator has configured user controlled single sign on SSO To configure SSO bookmark options perform the following tasks Step1 Click the Options button at the top right of the Virtual Office The User Options page displays ETATE Virtual Office memwmha 0 0 8
134. puter SonicWALL SSL VPN 5 5 User Guide UN amp Using Virtual Assist Step3 The first time you launch Virtual Assist you will be prompted to install the Virtual Assist plugin and client Install Whiting Plugiriss Firefax prevented this ste a datil giiel eani from afbing you te install software on your computer h virtual Assist manually Alora ie filisnzirrue Afer saving to disk run lhe applicalion fom lhe Samedi Virtual Assist Installer Instructions Step 1 Apila infanmatian bar MSY ge Foreign prevented this site 10 42 20 0 rem asking you ty install velteant on your computes appear ai ine top of the browser fi does please click Allow on the yellow bar Step 2 Ifa Sofware installation window appear Check Install Mow 1o proceed A PAM HR l dy opens eI EER bed Wl ae Wate ied ie asd peer beter ie hai per es mtm bed tel Tee mne e ee ee cines Ei Step 3 An Add ons window appear click Restart Firefox to proceed A 3X y a Der Ann EMT Mem o Peg iy TP Beet foo order TTET ants Step d The Add ons window appear again aer lhi beets risa you can jusi clase il Step4 Click on the Allow button A plugin installation window displays Click Install Now The Virtual Assist plugin and client installs You may be prompted to restart your browser Step5 You can now launch Virtual Assist either from the Virtual Office window or from a shortcut that is added your Programs list under Window s start button
135. quisites ear o Plaid a tie Dat C eda So e ed Pp baccis od 26 User Configuration Tasks o 62s aught dota to EE aeo S Ree eben 28 SonicWALL SSL VPN 5 5 User Guide Wit Installing NetExtender on Android Smartphones 00cee eee 63 Using NetExtender on Android Smartphones c cee eee cece 66 Related DOCUMEN S ox ouba s a ats eoo POENI es poda edd 80 Using V ruad ASSIST scu x 1 orba Db obese dados P CEU e Oe aped 00 Understanding Virtual ASSISL uar ot an whe HRN Gaede sab a 80 Installing and Launching Virtual Assist 0 0 0 ccc cc cece eee ees 81 Configuring Virtual Assist Settings 0 cc ccc cee cee cee tenet neta 83 Selecting a Virtual Assist Mode 0 cc ccc cee cee cence eee e ne ees 85 Launching a Virtual Assist Technician Session 0 cee eee eee ee 06 Performing Virtual Assist Technician Tasks 00 cece eee ees 07 Initiating a Virtual Assist Session from the Customer View sse 94 Using Vart al A SSISU n e acotasdtos eua dra deg esami EA kee os sed 106 Using Virtual Assist in Unattended Mode 0 c cece e eee eee 108 Enabling a System for Virtual Access cece cece tee etna 108 Using the Request Assistance Feature 110 Using Elle SHaEeS ec es totu x Mete ee CERE Sd e ed S edu ed MPs 110 Using the File Shares Applet 0 ccc ccc cece cee n eet neeeee 111 Using HTML Based File Shares 0 0 ccc cece cee cent eet n 125 Manag
136. r a custom username password and domain for this bookmark The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with SonicWALL SSL VPN When you are finished Click the Add button to add this bookmark to your Virtual Office list Determining the Remote Computer s Full Name or IP Address Step 1 Step 2 Step 3 Step 1 Complete the following steps to determine the full name of the computer to which the RDP bookmark is pointing Right click on the My Computer icon on the desktop of the remote computer and select Properties Click the Remote tab The full computer name will be listed under Remote Desktop Complete the following steps to determine the IP address of your computer In the Windows Start menu on the remote computer navigate to Run TRE SonicWALL SSL VPN 5 5 User Guide Managing Bookmarks W Step2 Type cmd to open the command interpreter and click OK Step3 Type ipconfig The IP address of your computer is displayed Configuring Remote Desktop Access on the Remote Computer Complete the following steps to allow remote desktop access to the computer that is the target of the RDP bookmark Step1 Right click on the My Computer icon on the desktop and select Properties Step2 Click the Remote tab Step3 Under Remote Desktop select the checkbox for Allow users to connect remotely to this computer
137. r log displays information on NetExtender session events The log is a file named NetExtender dbg It is stored in the directory C Program Files SonicWALL SSL VPN NetExtender To view the NetExtender log right click on the NetExtender icon in the system tray and click View Log click on the Log icon on the main status page L NesEstender Log Viewer NetExtender Log gm ime 3 Level EU info inio if Infa info inio A Iria info A inio if Infa Abinto Ante dc Info LACE ENT inio Alte info irio A Infa Abinto Aino A Iria info inio mor or To view details of a log message double click on a log entry or go to View Log Detail to open the Log Detail pane View rather About kg a lire 0212 01 11 31 25 03 18 2011 11 31 26 03 18 2011 11 31 28 0212 41 11 31 28 03 18 2011 11 31 28 03 18 2011 11 31 31 02 72 2011 12 40 41 03 18 2011 12 40 43 03 18 2011 17 30 43 02 12 2041 1241 54 03 18 2011 12 41 54 03 18 2011 17 41 54 03 18 2011 12 41 57 0212 21 1242401 03 18 2011 12 42 15 03 18 2011 17 42 15 0212 201124 15 03 18 2011 12 42 15 03 18 2011 12 42 15 0212 011124215 03 18 2011 12 47 16 03 18 2011 17414 0212 2041 21 40 15 03 18 2011 23 49 36 03 18 2011 23 48 36 Im umm o Uumaa o am m 3Matus ID Cre TN Cre DODOOO KO Dee OUR Cre LOOOO KO De LOL Cru SOO Qu 2020000 Cre RECHT Cre DOCHb DO KO COO 319 QOO SOON Cre 05031 A gm FEM NW Fu Eu E Juice Service Engen Eny
138. ransfer Protocol FTP Step4 To disable SSO for the bookmark clear the Automatically log in checkbox SonicWALL SSL VPN 5 5 User Guide b 153 N WY Using Bookmarks Step5 To use SSO for the bookmark select the Automatically log in checkbox and then select one of the following radio buttons e Use SSL VPN account credentials allow login to the bookmark using the local user credentials configured on the SRA appliance Use custom credentials allow login to the bookmark using the credentials you enter here when selected this option displays Username Password and Domain fields Enter the custom credentials into the Username Password and Domain fields that are displayed You can enter the custom credentials as text or use dynamic variables such as those shown below Text Usage Variable Example Usage Login Name USERNAME US USERNAME Domain Name USERDOMAIN USERDOMAIN USERNAME Group Name YUSERGROUP YUSERGROUP USERNAME Password PASSWORD PASSWORD or leave the field blank Step 6 For Web HTTP and Secure Web HTTPS bookmarks select the Forms based Authentication checkbox to use this method for SSO and then fill in the following fields that are exposed e Configure the User Form Field to be the same as the name or id attribute of the HTML element representing User Name in the Login form for example input type text name userid gt e Configure the Password Form Field t
139. remote E 10 0 61 67 cils File Shares HTML computer to ihe iocal network What ig Virtual Assier The Add Bookmark screen displays Enter a friendly name for the bookmark in the Bookmark Name field Aili Rookneak Tipsi Hel p a Bookmark Mame What is the File Shares Java Kame ar EP Address a Applet a The appset is generaly the prefered aiaiai a version ot File Shares I supports ETUS Ge drag and arop and Tot Ge copying multiple files at a time If you te do not have Java installed you can Rd File Shares CIFS v sane me appel and use the nas u eS ee pu ga f i r uq B Lisa Fil Shares Java Applet Drowser basedg simerace instead EJ Automatcasy leg in Lag 3SL VPM account credentials C Uss custom rredentiais Enter the IP address and file directory path to the File Share in the Name or IP Address field When using the Java applet the Name or IP Address field must be to a file directory and end with a or character In the Service pull down menu select the File Shares CIFS option Check the Use File Shares Java Applet box to enable the File Shares Applet for this bookmark Leaving this box unchecked means the portal will launch the original HTML browser when the bookmark is selected Optionally select Automatically log in to log in to this file share using either your SSL VPN credentials or by specifying custom credentials Click Add TEL SonicWALL SSL VPN 5 5 User Guide
140. rface section on page 47 MacOS Platform Installing NetExtender on MacOS section on page 49 Using NetExtender on MacOS section on page 51 Linux Platform Installing NetExtender on Linux section on page 53 Using NetExtender on Linux section on page 55 7 B d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp Windows Mobile Platform e Installing and Using NetExtender for Windows Mobile section on page 59 Android Smartphone Platform e Installing NetExtender on Android Smartphones section on page 63 Using NetExtender on Android Smartphones section on page 66 Installing NetExtender Using the Mozilla Firefox Browser Step 1 Step 2 Step 3 To use NetExtender for the first time using the Mozilla Firefox browser perform the following To launch NetExtender first log in to the SSL VPN portal Click the NetExtender button zw NetExtender 5 A Disconnected J i Click ta connect The first time you launch NetExtender it will automatically install the NetExtender stand alone application on your computer A warning message displays Click Allow to install NetExtender 5 Sore WALL Virtual Office Firefox prevented this site ssheprueng soenicwall com from esky you to irrilall sofen en your eormipsuber Tips Help gon WALL s Virtual Office provides easy and secure remote access 10 The corporate ELI network from ariveatere on the Internet
141. rk can be browsed from the remote window s address bar The local directory can not be changed from the address bar The remote path is capped at 1024 characters The actual maximum string size will change depending on language Step5 To select multiple items click the items while holding the shift or the ctrl key Clicking on an item again will de select it and remove it from the group Step6 To copy a file or group of files either to or from the network select desired items and click and drag them across the center boundary This will copy the file s into the open directory Alternatively the file s can be copied directly into a folder by dragging the icon and dropping over the desired folder one could also use the copy button on the toolbar or use the copy option from the right click menu A progress bar displays the waiting time required to copy the files Copying Cong lie DSCUIS37 JPG TEL SonicWALL SSL VPN 5 5 User Guide Using File Shares Wax Note The File Shares Applet supports overwriting existing files If a file exists with the same name as the one you are trying to copy over the Applet will prompt you to rename the file being copied If the name is kept the same the copied file will overwrite the existing one Step 7 Double click on a file to launch it with the proper application If activating a file on the remote machine the File Shares Applet will first download the file to a temporary folder on your
142. rmat can save bandwidth but colors may look very inaccurate Mouse buttons 2 and Normal If set to Reversed the right mouse button button 2 will act 3 as if it was the middle mouse button button 3 and vice versa View only No If set to Yes then all keyboard and mouse events in the desktop window will be silently ignored and will not be passed to the remote side Share desktop Yes If set to Yes then the desktop can be shared between clients If this option is set to No then an existing user session will end when a new user accesses the desktop SonicWALL SSL VPN 5 5 User Guide bp 139 N 4 Using Bookmarks Using FTP Bookmarks Note FIP bookmarks can use a port designation if the service is not running on the default port Step1 Click the FTP bookmark The FTP Session dialog box displays 3 https 0 0 67 67 FTP SonicWALL Virtual Office Mozilla Firefox y Eo Eosnicns FTF Session b Add Haw Sesion Add How FIF 5essioh F Diena Files aera ami 1 T T BT Bd Upload Files Les ror rumen snommous Online Help Bunswnpio Seress Ligii Dya HANE bo ure your 5L Vie Faba Leer name and Peg pond Sulenil ID 57 6 3 Step2 Enter your username and password If you want to use your Virtual Office username and password simply leave the fields blank ay SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W amp Step3 Click Submit An FTP session displays
143. rom the Domain pull down Click Login Step2 Click the Show Edit Controls link in the middle of the portal page SonicWALL SSL VPN 5 5 User Guide p 111 amp Using File Shares Step 3 Step 4 Step 5 b Note Step 6 Step 7 Step 8 Step 9 Click the New Bookmark tab in the portal page SONICWALL virtual Office raami ama Welcome to the SonicWALL Virtual Office Sonic WALLS Virtual Office provides easy and secure remote access to Ihe corporate network from anywhere on ine Internel Tips Help hi a How can change my password You may be able to change your Click a pre defined bookmark of create your own Io securely access a corporate network password through a Remote Desktop resource session or a webpage Please contact l F rcl rud ur Pour err e Launch NetExtender lo create a secure nebwork connection to the corporate network for dne pe de ill cst full network access tubes What is NetExtender NetExtender Su File Shares e Virtual Assist G CENE imis n os besconmected ser Browse shared tees Asst some ne by CONNECTION a cows you In access ww CEE t8 coment t on Our corpa ink canini af ther network nesources servers and raster uri compuli websites as If you were on the local network What is File 5hares AlLlBookmarks Desktop Web Files Terminal Sama EUM LneiOS File Shares allows you to remotely access nies in the local network You Mp oss can also copy fles from your
144. rror level the log displays all Error and Fatal entries but not Warning or Info entries ee L Net xtender Log Viewer NetExtender Log e Log Wew filter About jiji Loy O81 d Month NL 03 18 2011 12 40 43 02 18 2011 12 41 54 03 18 2011 12 41 54 02 18 2011 124241 03 18 2011 12 42 15 D3 18 2011 1242415 3 18 2011 1242415 03 18 2011 12 42 16 1 18 2011 298995 lire Days 3 Days 1 Week 03S 2 Works Matus ID 3ouce eI Service Cre Engene DK Ergene Ce Engine Engene ge 03 18 03 18 7011 17 30 43 03 18 7011 17 31 54 03 18 2011 12 41 57 03 19 2011 17 42 15 03 18 2011 12 47 15 03 18 7011 17 4415 03 18 7011 17 39 14 03 18 2011 23 49 36 03 18 7011 23 39 36 Im ummmumaa uu amm Descnplron HMetExtender Starting Version 410 171 Inetializing engine iria diee Initializing security functions Connecting Connected successfully D iscannecting Rektang security functions Disconmected successfully Instialiring engine Checking updates A new versn gl HetkExbterider a required be conmect te the S5L VEH serves Downloading updates HMetExtender i5 exiting te perform upgrading Metbxtender Starting Version 5 0 149 Inttalnang engines Checking updates Inetializing dma iiral sexurity Fanstiens Connecting Connected successfully Disconimectnig Wakinm up Resuming the connection
145. rtified to work on Windows 7 Windows Vista and Windows XP Limited functionality is supported on Mac OS where customers can request for assistance via web requests SonicWALL SSL VPN 5 5 User Guide EIN 4l Web Management Interface Overview Web Management Interface Overview Step 1 Step 2 Step 3 Note From your workstation at your remote location launch an approved Web browser and browse to your SRA appliance at the URL provided to you by your network administrator Open a Web browser and enter https 192 168 200 1 the default LAN management IP address in the Location or Address field A security warning may appear Click the Yes button to continue ETSI Security Alert X inicr boni Vus dac hee WP Pdl iab A Dui ruris T oC CN imp T by rai Hoes Fas gp j piin a Pus e a bac Eptir mia d T dete crier gem we icio Dy i compas fou Sam io Eden U mun Ves ee Zaun E ieee eter prea marii kz rum Fea ppt mca e T hs seram cerie mm rada en ndi e bae geri crier Ap OR 3 acude roma ra hana Kui need cfl Fn pee yer ae Pe ree Ly cami ip peces de polo ges o mmc The SonicWALL SSL VPN Management Interface displays and prompts you to enter your user name and password As a default value enter admin in the User Name field password in the Password field and select a domain from the Domain drop down list and click the Login button Only LocalDomain allows administrator privileges Note that your administrator may hav
146. s by Saa PA E Please wait while the virtual Network Computing Client loads Click the Clase window button to close this window after you are finished with your Virtual Network Computing session Close Window Step 2 When the VNC client has loaded you will be prompted to enter your password in the VNC Authentication window E Virkual Selpork Connection VNC Authentication Fassword Ou orca Applet window Step3 To configure VNC options click the Options button The Options window is displayed lolx Froodinmgy Tign d Domes ion level a PEG image qua fs H Cursor shape updates Enable vseconeet i Fhislrched colors Tes Mousebumons 2and3 Normal View Oily H F share desssap ns Close 7 138 d SonicWALL SSL VPN 5 5 User Guide Using Bookmarks W amp Table 3 describes the options that can be configured for VNC Table 3 VNC Options Option Default Description of Options Encoding Tight Hextile is a good choice for fast networks while Tight is better suited for low bandwidth connections From the other side the Tight decoder in TightVNC Java viewer is more efficient than Hextile decoder so this default setting can also be acceptable for fast networks Compression Level Default Use specified compression level for Tight and Zlib encodings Level 1 uses minimum of CPU time on the server but achieves weak compression ratios Level 9 offers best compression but
147. s option also allows entering one or more Mac Addresses separated by spaces for the machines to wake and the desired Wait time for boot up before cancelling the WoL operation To send the WoL packet to the hostname or IP of this bookmark check the Send WOL packet to bookmark host Name or IP address checkbox this option can be applied in tandem with a Mac address Redirects ActiveX only Optionally expand Show windows advanced options and select any of the redirect checkboxes Redirect printers Redirect drives Redirect ports or Redirect SmartCards to redirect those devices on the local network for use in this bookmark session Redirects Java only Optionally expand Show windows advanced options and select any of the redirect checkboxes Redirect printers Redirect drives Redirect ports Redirect SmartCards Redirect clipboard and Redirect plug and play devices as well as any of the following additional features for use in this bookmark session Display connection bar Auto reconnection Desktop background Window drag Menu window animation Themes or Bitmap caching If the client application will actually be RDP 6 Java you can select any of the following options as well Dual monitors Font smoothing Desktop composition and Remote Application Automatically log in Check this option and select Use SSL VPN account credentials to forward credentials from the current SSL VPN session Select Use custom credentials to ente
148. s the selected folder or file Using Bookmarks from Within the File Shares Applet In Addition to accessing bookmarks from the Virtual Office portal bookmarks can be easily accessed from within the File Shares Applet Step 1 Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal Step 2 Click on the Bookmarks button on the task bar in the remote window A pull down menu displays with the message Loading Bookmarks Keep the mouse within the pull down menu as the File Shares Applet loads the bookmarks SONICWALI Y File shams eGosxgiessi Eran Hiei eai DI i Lg SLOOODRED v eurora fy ADA gis CHIDO es Ay GENS pig HOLLIWCAT gf LATTEDEV ipla MATT gay MEA TEST gla MOHE a MGA aly SON ALL lol STABLE sls STARLIGHT 4 sum W Li 7 118 d SonicWALL SSL VPN 5 5 User Guide Using File Shares Wh Step3 Once loaded click book mark to load the desired file or folder e c3 ri E E d E jif Bookmarke Enina Mehik f AD j4 BLUGUDRED fy BLIRIDEAIAUS Moving Files and Folders The File Shares Applet is designed for ease of use There is more than one way to perform file transfers This section provides an example of a folder that is copied from a remote machine onto the local machine s desktop deleted from the remote machine and moved back from the local machine unto the remote machine all from the File Shares Applet Step1 Launch the File Shares Applet by c
149. septate M ZU01 1 3 18 11 23 32 NetExtender Core Proc xDDa4 Thr xl 498 Info Device Removed 2011 03 18 11 29 32 NetExtender Core Proc zDDA Thr 01498 Status update statCode 4040500 stepData 0 211 318 11 31 7H Net xtender Core Poot 4 Thr Dx 1 AYE tote skall MIC Success z01 1 3 18 11 31 20 NetExtender Core Proc OxDDA Thr xl 4907 Status update statCode Ox4050600 stepData 0 2011 03 18 11 31 23 NetExtender Core Proc zDDA Thr 0 1 498 Info Found Nx AAS Device Sonic WALL MetEstender A _ nm F Beady To clear the log click on Log gt Clear Log Disconnecting NetExtender To disconnect NetExtender perform the following steps Step 1 Right click on the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect Step2 Wait several seconds The NetExtender session disconnects You can also disconnect by double clicking on the NetExtender icon to open the NetExtender window and then clicking the Disconnect button When NetExtender becomes disconnected the NetExtender window displays and gives you the option to either Reconnect or Close NetExtender Upgrading NetExtender NetExtender automatically notifies users when an updated version of NetExtender is available Users are prompted to click OK and NetExtender downloads and installs the update from the SONICWALL SRA security appliance AIL SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp Whe
150. ssistance button on the Virtual Office portal By clicking this button on the portal the user is placed in the Virtual Assist support queue for assistance cM Request E je er Q Assistance Get assistance from a live technician For information on using Virtual Assist from the customer perspective see Initiating a Virtual Assist Session from the Customer View on page 94 A technician who is currently assisting a user can also click this button to place the user back on the queue Someone else in a technician role can then service this user by viewing the system and taking control of the user s mouse and keyboard This is useful if one technician needs to hand the user off to another technician because of differing areas of expertise or the end of shift Using File Shares File shares provide remote users with a secure Java applet or HTML based interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall The File Shares Applet mimics Windows Explorer navigation and provides functionality not available in HTML based File Shares including the ability to overwrite existing files and upload directories This section
151. sword for the proxy server If the proxy server requires a username and password but you do not specify them in the Properties window a NetExtender pop up window will prompt you to enter them when you first connect Optionally you can click the Internet Explorer proxy settings button to open Internet Explorer s proxy settings page SonicWALL SSL VPN 5 5 User Guide LN M Using Virtual Assist e Connection Profiles Displays all of the Virtual Assist connection profiles that have been used on this computer To remove a profile select it and click the Remove button f Setting Proxy Satlig Connerticn Profiles Conradin Seki Cc Connerhinn Profes Bola Server Ler Donan Polka Ok Camel Apply e Connection Settings Allows users to customize how they are identified in Virtual Assist and the default settings of Virtual Assist customer sessions Settings Lx Proxy Saline Connection Prolia Connection Seins ag Te ay email y conne selling bere L zh teer a Fede For abina informaron Delay Hae Akier Information Connection Sat barge Color Scene For View Only an Mko Yan Only Full Coler Athea Pide U Gray arar ok Cewa Papi Display Name The name that will be displayed in the user queue By default the users SSL VPN username is displayed Additional Information Optional field to provide additional information Auto View Only Specifies that Virtual Assist sessions wi
152. t the Show NetExtender Routes checkbox to see routes e Mel itendel Berner Hipna sonic con Chent Ip L0 028 1 107 Sent e 57 kB Recehenri 4 55 KB Throughpurt L byter Aati 0 Days 00 00 15 7 Show Moti steriles Routes Step 11 Click on the Menu button to see the NetExtender properties menu Server ihe ene oon sd com Client TP 15 123 1 107 Sent 6 63 kB Recens 1 4 08 08 Connection Fen iles Sy wien aliin Prey Seb Eua Sent A Berege Thog iF j Ciit Step 12 Select the Sent amp Received menu tab to adjust the metric used for sent and received statistics on the status window Select the Throughput menu tab to adjust the throughput measurement displayed on the status window Step 13 To configure NetExtender options click the Menu button The following options are displayed Connection Profiles Displays all of the NetExtender connections that you have used on this device To remove a Connection Profile highlight the profile click the Menu button and click Remove shpa angon PAARS Ree Ser 7 O d SonicWALL SSL VPN 5 5 User Guide Using NetExtender W amp e System Settings Provides several configuration options NetExtender re Ta Ae lok Fide HetF xbender when closing vindi Dipl precise number in sabu duubomaticaly establish the underbing connection 2 Connection Manager compatiblity mode v Enable Framing amp Cach
153. tExtender GUI Note Open source Java Virtual Machines VMs are not currently supported If you do not have Java 1 5 you can use the command line interface version of NetExtender To install NetExtender on your Linux system perform the following tasks Step1 Login to the SonicWALL Virtual Office SonicWALL SSL VPN 5 5 User Guide b 53o S amp Using NetExtender Step2 Click the NetExtender button A pop up window indicates that you have chosen to open a tgz file Click OK to save it to your default download directory SonicWALL Virtual Office Firefoxry SonicWALL Virtual Office s BESTS ES nitpsi0 5 106 145 cgi birporta E Virtual Office Sonic WALL s Virtual Office provides easy and Sette nemote access a network from amarei on the Intermel Click a pre defined bookmark of create yout own to securely access resource Launch NetE xrtender to creare a secure network connection 1o thi eol full nee access e File Shares E eem Rau es Fh neii 4 AlBookmarks OWA RA Th fav mg mi tl wen bis be reale nem 77 Natkxternder Descennected ws LR t3 Cont k New Bookmark imd 75 Oa A appl KU appliance W b A bki Welcome to the SonicWALL Virtual Office M el Eeue Shell Wecu at mL ruga Mozilla Firefox LN m a mm r Opening NetExtender Linux 5 706 x865 tgz Fi You have chosen to open HetExtender Linux 5 5 706 x88 tgz which bs a Tar archive from h
154. tarting NetExtender is useful when NetExtender cannot connect possibly after a long period of disuse To exit from NetExtender perform the following steps Step 1 To access the Exit option press the options or menu button while on the NetExtender screen The options are displayed at the bottom of the screen Fe a A E Fi 1 AE e 1 Profiles Preferences B o o Export Log About Exit Step2 To cause NetExtender to exit completely including the services component select the Exit option and tap OK You can restart NetExtender by clicking its icon on your smartphone SonicWALL SSL VPN 5 5 User Guide UE amp Using NetExtender DISCONNECT To disconnect NetExtender perform the following steps Step1 Pull down the notification bar and click NetExtender to open the NetExtender user interface August 15 2010 EB FU GS esas re AT amp T in MetExtender Connected 10 0 61 8 6 45 PM m Battery Information Voltage 4 153 Temp 22 C Li ion Batter 646 PM di USB debugging connected Select to disable USE debugging Ed usB connected Select to copy files 10 from your computer Step 2 In the NetExtender user interface tap the Disconnect button and tap OK to confirm OGia id me 4 49 ew com Mettrie Connected 0 Days DOO 15 server ssonicwall sonimwall com User feng Client IP 10 125 1 107 Sent 40 bytes Received 64 bytes Throughput D bytes Sec NetExtender notifies you while disconnecting EAE BAS 12
155. tation Server Welcome Please log in L o lag in to MetaFrame Presentation Server enter the credentials Password rescued and then click Los Tn If you d not know your log in information please contact your help Domai desk or system echoes rator Message Center Advanced Options gt gt gt The Massage Center deploys any ainformabon or erar messages Ehat may occur SonicWALL SSL VPN 5 5 User Guide VEIT 4 Using Bookmarks Step9 The Citrix Web Interface home page is displayed Click on the application you want to use Applications e 0 m za Top Eal Up e m Internet Microsoft Word Explorer 2003 Step 10 You may be prompted to install additional Citrix software Security Warning x D you want to intial and nn hips 1040 61 TSX SAC cab signed on an unknow Publisher suthenboty vatad by Thawte Code aan CA Cmn Serie WALL Ine mana that the content i rn sonic WALL Imc fo aaka ha aesemtion O Ana mne content Eme SonicW ALL ine Yes Hu More io Step 11 The shared application is now launched Java Citrix Bookmark When using a non Internet Explorer web browser Citrix bookmarks launch the Java Citrix client The following steps describe how to launch and use the Java Citrix client Step 1 Click on the Citrix bookmark The login window displays Step 2 For Logon type select either Anonymous or Explicit Select Anonymous to login without pr
156. tatus Step 12 For information on using Virtual Assist once the session is active see Using Virtual Assist section on page 106 Using Virtual Assist During a Virtual Assist session you are not completely locked out of your computer Both the technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time You can resume control when the technician is not actively typing or moving the mouse And you can end the session at any time by clicking the End Virtual Assist button in the bottom right corner Click the Chat button or enter Alt c to open an instant message style chat session with the technician The technician can also open a Chat window to communicate with you To chat type text in the Chat window and type Enter or click Send TEL SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wax Changing the Virtual Assist Level of Control There are three levels of control that a customer can grant to the technician e View Only The technician can view the customer s computer but cannot control it To switch to View Only mode click the Status Active button The Status switches to View Only e Active The technician can control the customer s computer but the customer must give permission for certain action such as allowing the technician to reboot the system delete files or over write files on the customer s computer without the
157. tected Mode In arces to launch BelExtender you meted to add the SSL VPH EM te web address inta lhe browser s usted sHits list instructions to add the SSL VPN web address Into the browser s trusted sites list gt gt Once the S3L VPN web address is added as a trusted sae you will need to login t the SSL VPH portal i ipai i Step5 For details on how to add the Virtual Office as a trusted site see the Internet Explorer Prerequisites section on page 32 Step6 Return to the SSL VPN portal and click on the NetExtender button The portal will automatically install the NetExtender stand alone application on your computer The NetExtender installer window opens d SonicWALL Virtual Office Microsoft Internet Explorer provided by SonicWALL INC ejl mo 5 hitpsz sshepn eng sonicwall eam cgi hin sshepnclient lninchnetestenders yes Establishing Netextender Connection i Please waht C SonicWALL SSL VPN 5 5 User Guide VEENB 4 Using NetExtender Step7 f an older version of NetExtender is installed on the computer the NetExtender launcher will remove the old version and then install the new version Step8 When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected SONICWALL Netextender comsci ns Status Roues DNS Server sslvpn eng sonicwall com Cllent IP 10 128 1
158. ter a friendly description to be displayed in the bookmark table Step5 Select the user permissions level from the Allow user to edit delete drop down list You can select Use user policy Allow or Deny Step6 Select the service type in the Service drop down list You can select from the following services e Terminal Services RDP ActiveX e Terminal Services RDP Java e Virtual Network Computing VNC e Citrix Portal Citrix e Web HTTP e Secure Web HTTPS e External Web Site File Shares CIFS e File Transfer Protocol FTP e Telnet e Secure Shell version 1 SSHv1 e Secure Shell version 2 SSHv2 The following sections provide additional details about adding the different types of bookmarks e Citrix Bookmarks on page 130 e RDP ActiveX and Java Bookmarks on page 130 e Web Bookmarks on page 133 FTP Bookmarks on page 133 e SSHv2 Bookmarks on page 134 SonicWALL SSL VPN 5 5 User Guide p 129 N 4I f Managing Bookmarks Once the configuration has been updated the new bookmark will be displayed in the Virtual Office Bookmarks table Click on a bookmark description to go to the bookmark location that you have defined Citrix Bookmarks For Citrix bookmarks you can select the following options Designate that it be a secure Citrix connection by selecting the HTTPS Mode checkbox e Select Always use Java in Internet Explorer to use Java to access the Citrix Portal when using Internet Explorer Without
159. the SonicWALL SSL VPN user portal called Virtual Office that allows you to create bookmarks and run services over the SonicWALL SSL VPN SRA security appliance Note Always check http www sonicwall com us Support html for the latest version of this manual as well as other SonicWALL products and services documentation Organization of this Guide The SonicWALL SSL VPN User s Guide organization is structured into the following parts Chapter 1 Virtual Office Overview This chapter provides an overview of new SonicWALL SSL VPN SRA security appliance user features NetExtender File Shares Virtual Assist and Virtual Access services sessions bookmarks and service tray menu options Chapter 2 Using Virtual Office This chapter provides procedures on importing certificates using Two Factor authentication using One Time Passwords using NetExtender using Virtual Assist configuring bookmarks and using file shares SonicWALL SSL VPN 5 5 User Guide EN amp Guide Conventions Guide Conventions The following conventions used in this guide are as follows Convention Use Bold Highlights dialog box window and screen names Also highlights buttons Also used for file names and text or values you are being instructed to type into the interface Italic Indicates the name of a technical manual Also indicates emphasis on certain words in a sentence Sometimes indicates the first instance of a significant term or concept
160. tings options e Expand Displays the Email Invite Service Logging and Chat panes e About Displays the version information for the Virtual Assist client Clicking the button in the bottom right corner of the Taskbar will minimize the view so only the titles of the buttons are displayed and not the icons Clicking the x button in the top right of the corner will close Virtual Assist You can also display additional shortcuts and controls by selecting View Tab Controls for Current Customer Yew Took Command 3 user Full Color Ji Wew Orly 4 Full orein la Aute Scaling IH Zsom ic tcm I True Sere na Gray gcabe QE Refresh t File Traeder Gy Chet System bdo DO Reboot Customer EE Active Screens The following options appear at the top of the Virtual Assist window Full Screen Expands the Virtual Assist window to the technicians entire monitor e Auto Scaling Fits the customer s screen to the Virtual Assist window e Zoom Customizes the zoom of the customer s screen e True Size Zooms to the actual size of the customer s monitor resolution e Gray Scale Change the display to gray scale instead of full color Refresh Refreshes the customer s screen File Transfer Opens the File Transfer utility See the Using the Virtual Assist File Transfer on page 93 for more information e Chat Opens a chat window with the customer 7 0 d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh
161. ts the technician when a customer is in the assistance queue The customer queue is also displayed in the Service window Step 1 Double click on a customer s user name to begin assisting the customer Tkke ID Lust mer Terica Saus Time Elscsed lene Diesenpbon omments Pending CRM 88 SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Step2 The customer s entire desktop is displayed in the bottom right window of the Virtual Assist RR E nn Y 1 w d F _ 7 Wes Bcc BEL DES mim Pm E 1 g veh oi RR i T i F gt 1 et mpm Ma Lands logge aee ora nues fud peo aa quer ium a AA A BM RRS te n RN Ps el p cw o At a f i z 2 F ai eil Tama X e PT iiime lamim n Genii orn m urii E LIN I E di i o 5 amm gm n Be ee bee ee rre at ull x mi a Tim cds j A bra rere d a ie ei 7x idee PX Ten dt d gius Fe Trend Gy Ce CL stem rs E eeu bums iE domua Liu dm LIES ap iha a aR rM ng gCB B8 Tn m E z PI D me mM m b pt a er ES ELIGE UE T E T E aoe 5 E H x DITE m i Passus i CUN porpgax me mm puscgeum pi FE Tog he F H ccm Range nr Rm See en SONICWALL gt erm Global Support Services T Overview vr buppen festa H mas i E Class Support 24x7 kl I gw a Fa E F A The technician now has complete control of the customer s keyboard and mouse The customer can see all of the actions th
162. twork to which you can navigate B igre UETA Donk WALL Viribus Wlice irent Irsternet Explorer provided by SonicWALL INC Dekte Bename Bookmark Lepi PEN Te TARRI ee a C34 Add files amd Polder L1 Css Ahl Fue Poder 7 snam C best best Ligaen eed A Fike Table 2 describes the controls at the top of the File Share window Table 2 File Share Controls Button Description Back Navigate to the previous File Share location Forward Navigates forward to the previous File Share location after you have pressed the Back button Reload Reloads the current folder to display any changes Up Navigates Delete Deletes the selected folder or folders Note that only empty folders can be deleted If there are files in the folder an error message is displayed Delete all files out of the folder and then delete the folder 7 126 d SonicWALL SSL VPN 5 5 User Guide Managing Bookmarks W Table 2 File Share Controls Button Description Hename Renames the selected folders and files Select items by checking the checkbox next to their name under the Select column Bookmark Creates a new bookmark to the current File Share location Logout Logout of the File Share service Step7 You can now navigate the folders and files in the File Share as you would through Windows Explorer or other file management systems Step8 To add a new folder in the current File Share location type the name of the fo
163. ured by the administrator on the SRA appliance to be able to resolve host names To create a file share perform the following steps Step1 Click on the File Shares button Virtual Office displays a dialog box that provides a hot link to a login prompt DUCI AG Oo Fa Sonke Wall Firjan fice barilla Firefos t X Tx Festo presented thus nis From oper a popup irebe Ck hara inr onion Dec e n TUAE rois Address iA fara men mt Dida nisle Login b Note Pop up window blockers may prevent File Shares from functioning properly Configure your browser to allow pop up windows on the SSL VPN portal site Step2 To specify a new share path as an example moosedc in the Address field You need to precede the share name with two back slashes For example WMile directory01 example com Step3 Toconnectto a pre existing file share click the Login to Server link next to the file share name Step4 Click the go prompt to display the Enter Network Password dialog box SonicWALL SSL VPN 5 5 User Guide VEP 3 amp Using File Shares Step5 Type a valid username in the User Name field and a valid password in the Password field and click Login U hiips M10 0 67 57 Enler Network Password M ye Please type our username and password User Marne Farzeow rd xl Cancel 10 0 67 87 4 Step 6 Virtual Office displays the home File Share screen that you have specified displaying folders on the ne
164. uter name is used Change Customer Name A Current Request Name jp 124 Mew Request Mame Janel Step 8 When the technician initiates the session the Virtual Assist tooloar appears in the bottom right of your screen The technician now has control of your computer C2 Open Chat Diag Feat Vira Assis Press Clb d T lo change in drier Sint Ho pons ral accu whine in Trusted 51auz Step9 For information on using Virtual Assist once the session is active see Using Virtual Assist section on page 106 7 B d SonicWALL SSL VPN 5 5 User Guide Using Virtual Assist Wh Initiating Virtual Assist on a MacOS Client To launch a Virtual Assist customer session to request help on your MacOS computer perform the following steps Step1 There are several methods for accessing Virtual Assist Navigate to the URL of the Virtual Assist home page that is provided by your support technician If you received an email invitation click on the link in the email or paste the URL into your Web browser The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SONICWALL gt SSL VPN Login Lernen Farmari Deomm LocalDamari Loni Looking Tor Lenis ad esed Request Preto wth Yr yoni Or you may need to login to the Virtual Office and click the Request Assistance button Assistance J Request Get assistance fram a live techni
165. w may appear prompting you to accept a certificate Click Trust oos _https sslvpo eng soniewall com_ F7 This applet was signed by SonicWALL Inc and authenticated by id i Thawte Consulting cc Do you trusi this certificate NN Clutk Trust t run this applet and allow it unrestricted access to your amp urnguter Click Dent Trust ter run this appel wath standard Java restrictions Show Certificate Dont Trust Trust ay SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 5 When NetExtender is successfully installed and connected the NetExtender status window displays ee amp onicWALL MerExrander SONICWALL Y SSL VPN NetExtender Status Camnaetad Serer sghei com Client IF 10 128 1 105 Bytes Sent 2057 Bytes Bytes Rezeseed 3711 Bytes Duration O0000 48 Copyright 2008 SonicWALL Inc Using NetExtender on MacOS Step1 Tolaunch NetExtender go the Applications folder in the Finder and double click on NetExtender app tonk WALL NetExtender SONICWALL gt SSL VPN NetExtender DSL VPN Server sslvpn com c UserName p Password emm Domain sv us sonicwall com Save profile Save name and password if allowed E Copyright 2007 SonicWALL Inc Step2 The first time you connect you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field Step3 Enter your username and password Step4 The first time you connect you must enter the domain name T
166. works 10 0 0 0 255 255 0 0 10 50 0 0 255 255 0 0 10 200 0 0 255 254 0 0 10 202 0 0 255 255 0 0 10 208 0 0 255 252 0 0 10 2 0 0 255 255 0 0 10 1 1 0 255 255 255 0 192 168 4 0 255 255 255 0 192 168 181 0 255 255 255 0 10 203 0 0 255 255 0 0 NetExtender IP Address 10 128 1 105 NetExtender connected successfully Type Ctrl c to disconnect Savinq profiles Done y LS a lt eee LL Clear Log Close r a 7 52 d SonicWALL SSL VPN 5 5 User Guide Using NetExtender Wx Step 11 To generate a diagnostic report with detailed information on NetExtender performance go to Help Generate diagnostic report u MetExtender Window Help Generate diagnostic report aoe Save diagnostic report Save Ag nxdiag txt i MetExtenderDerna BRIN a Habe Med sd ann NeiExtender Diagnostic Report A diagnostic report has been created at n Users mk NetEntenderDenio nwdiag Ext File Format All Files 4 Sew Folder Cancel Save 5 Step 12 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory Installing NetExtender on Linux SonicWALL SSL VPN supports NetExtender on Linux To use NetExtender on your Linux system your system must meet the following prerequisites e i386 compatible distribution of Linux e Linux Fedora Core 15 or higher Ubuntu 11 10 or higher or OpenSUSE 10 3 or higher e Java 1 5 and higher is required for using the Ne
167. xamples provide a demonstration of the usefulness and flexibility of the File Shares Applet Configuring Bookmarks from Within the File Shares Applet page 116 Using Bookmarks from Within the File Shares Applet page 118 Moving Files and Folders page 119 Launching a File Directly from the File Shares Applet page 122 Configuring Bookmarks from Within the File Shares Applet Step 1 Step 2 Navigating a remote computer s directory hierarchy structure takes a long time To reduce this process as much as possible the SonicWALL SSL VPN File Shares Applet allows the user to create bookmarks on the fly from within the File Shares Applet itself This allows the user to skip the hierarchy structure of the remote computer the next time she needs to access a particular file or folder Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal The File Shares Applet displays The File Shares Applet s default location for the local window is the base directory while the remote window shows the entire network Double click on the appropriate folders to navigate the local window to the desktop or another appropriate folder TEL SonicWALL SSL VPN 5 5 User Guide Step 3 Step 4 Step 5 Using File Shares WA To navigate the remote window double click on a visible computer or input the name in the address bar preceded by and followed by a and press Enter The File Shares Applet will then navigate
168. y Connect Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon Step9 Select Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection Step 10 Select Display precise number in connection status to display precise byte value information in the connection status Step 11 Select the Enable UI animations checkbox to enable the sliding animation effects in the UI Step 12 Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session Step 13 Select Disconnect an active connection to have NetExtender log out of all of your SSL VPN sessions when you exit a NetExtender session Step 14 Click Apply Configuring NetExtender Connection Scripts SonicWALL SSL VPN provides users with the ability to run batch file scripts when NetExtender connects and disconnects The scripts can be used to map or disconnect network drives and printers launch applications or open files or Web sites To configure NetExtender Connection Scripts perform the following tasks Step 1 Right click on the icon ol in the task bar and click on Properties The NetExtender Preferences window is layed Step2 Click on Connection Scripts i Il SonicWALL NetPetender Properties I Connection Profiles Cannection Scripts Settings When Piel ed eder beans creed Connection Scripts Pray Ptempol bo amp

SonicWALL Sleep Apnea Machine SSL VPN 5.5 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents