SonicWALL SMA 4600 User guide

Category
Software
Type
User guide

This manual is also suitable for

SonicWall™
SecureMobileAccess8.6
UserGuide
SMA200/400
SRA1600/4600
SMA500vVirtual
Appliance
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademarkofSon ic WallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allother
trademarksandregisteredtrademarksarepropert yoftheirrespectiveowners
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffili ates’products.Nolicense,expressor
implied,
byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.
EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/OR
ITSAFFILIATESASSUMENOLI ABILITYWHATSO EVERAND
DISCLA IMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANT YRELATIN GTOITS
PRODUCTSINCLUDING,BUTNOTLIMIT EDTO,THEIMPLIEDWARR ANT YOFMERCHANTABILITY,FITNESSFORAPA RT I CU L A RPURPOSE,OR
NON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIREC T,INDIRECT,CONSEQUENTIAL,
PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,
WITHOUTLIMITAT ION ,DAMAGESFORLOSSOFPROFIT S,BUSINESS
INTERRUPTIONORLOSSOFINFORMATION)ARISINGOU TOFTHEUSEORINA BILI TYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/OR
ITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsor
warrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdo cumentandreservestherighttomakechangesto
specificationsandproductdescriptionsatanytimewithoutnotice.Soni cWallInc.and/oritsaffiliatesdonotmakeanycommitmentto
updatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
Secure
MobileAccessUserGuide
Updated‐October2017
Version‐8.6
23200381800RevB
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.
SonicWallSecureMobileAccess8.6UserGuide
1
3
Part1.Introduction
AbouttheSecureMobileAccessUserGuide.............................................7
OrganizationofthisGuide..............................................
................ 7
GuideConventions... .............................
.................................... 8
VirtualOfficeOverview...........
.............. . . . ................ ................ ..9
AboutVirtualOffice................................ ...............
............... ..... 9
AccessingVirtualOfficeresources....................... ...
............... ........... 9
Browserrequirements......................
.......................................... 10
Aboutcertificates.. .. ..
............... .................. ............................. 12
AbouttheVirtualOfficeWebInterface .................................
..................13
LoggingOutoftheVirtualOffice...................... ....
.............................. 16
Part2.UsingSecureRemoteAccessFeatures
UsingSecureMobi leAccessConnectAgents................... .........................18
What
istheSecureMobileAccessConnectAgent? ............... .................. ........ 18
SupportedOperating
Systems....... ................................................ 18
DownloadingandInstallation .......................... ................
............. 19
SettinguptheSMAConnectAgent...............................
...................20
UsingVirtualOfficeAuthentication ...........................
.............. . . .........23
ImportingCertificates.................. ......
............................. ............ 23
UsingTwoFactorAuthentication .....
...................................................23
UserPrerequisites...............................................
............... ..24
RSATwoFactoruserauthenticationprocess...........................
............... 24
VASCOtwofactoruserauthenticationprocess.................. ...........
............ 26
Usingonetimepasswords........................ ..........
............... ............ 27
Userprerequisites.....................
............... .................. .......... 27
Logginginwithaonetimepassword
............... .................. ................ 27
Configuring
onetimepasswordsforSMScapablephones....... ........................ 28
Verifyinguseronetimepasswordconfiguration..... .
............... .................. 29
UsingNetExtender...............
..................................................30
User
Prerequisites.................. .................. ................................ 30
UsingMobileConnect .............................
................................ ....31
Userconfigurationtasks...........
................................ .................. ..32
InstallingNetE xtenderusingtheMozillaFirefoxbrowser................................33
InstallingNetE xtenderusingtheInternetExplorerbrowser..
............................ 35
InstallingNetE xtenderUsingtheChromeBrowser ................
...................... 37
LaunchingNetExtenderDirectlyfromYourComputer......................
............. 40
PrefillingtheServerandDomainFieldswhileInstalling NetExtenderthroughMicrosoftInstaller
40
ConfiguringNetExtenderProperties..... ...............
............................. 42
Contents
SonicWallSecureMobileAccess8.6UserGuide
4
ConfiguringNetExtenderConnectionScripts.......................................... 44
ConfiguringBatchFileCommands
............... .................. ..................44
ConfiguringProxySettings...............................................
.......... 45
ConfiguringNetExtenderLogProperties....................................
.......... 47
ConfiguringNetExtenderAdvancedProperties.................................. ..
.....48
ConfiguringNetExtenderAccelerationProperties...................... ................ 49
ConfiguringNetExtender
PacketCaptureProperties....................... ............. 49
ConfiguringLanguageProperties........
............... ............................. 50
ViewingtheNetExtenderLog ..
................................................. ....51
DisconnectingNetExtender.......... .................. ..................
........... 51
UpgradingNetExtender ..... .................. ..............
....................... 52
ChangingPasswords............ .............
................................ .....52
AuthenticationMethods ...........
................................ ................ 52
UninstallingNetExtender
........................................................... 53
VerifyingNetExtenderoperationfromtheSystemTray .......................... ........
53
UsingtheNetExtenderCommandLineInterface.................................. .....54
InstallingNetE xtenderonLinux.
................................ .................. ..55
UsingNetExtenderonLinux............................................
............ 57
UsingSecureVirtualAssistandVi rtualMeeting...... . . .......................
..........61
UsingSecureVirtualAssist........ .............................
........................ 61
InstallingandLaunchingSecureVirtualAssist........... .. .......
............... .......62
ConfiguringSecureVirtualAssistSettings .......................
............... .......63
SelectingaSecureVirtualAssistMode......................
............... .......... 67
LaunchingaSecureVirtualAssistTechnicia nSession..................
..................68
PerformingSecureVirtualAssistTechnicianTasks..........................
............ 70
InitiatingaSecureVirtualAssistSessionfromtheCustomerView ............... ..........77
UsingSecureVirtual
Assist.................. .................. .....................85
UsingSecureVirtualAssistinUnattendedMode...................................
.... 87
UsingVirtualAccessMode....... .................. .................
............... 88
EnablingaSystemforSecureVirtualAccess .... .................. ......
............... 88
UsingtheRequestAssistanceFeature..............................
.................. 92
UsingSecureVirtualMeeting ............................
............... ................ 92
OverviewofRoles................
................................................93
CoordinatorRole
............... .................. ................................ 94
ParticipantRole............................. .....
...............................114
UsingFileShares................
.................................................. 117
Using
theFileSharesApplet ...........................................................117
UserPrerequisites...................................
............................117
ConfigurationOverview....................
.......................................118
UsingHTMLbasedFileShares......
............... ....................................119
ManagingBookmarks ..................... . ..........................
..............123
AddingBookmarks...................................
............................. ...123
RDPBookmarks................
................................ .................126
Citrix
Bookmarks................. ...............................................130
WebBookmarks .................................
............... .................132
SonicWallSecureMobileAccess8.6UserGuide
5
MobileConnectBookmarks............................................ .. .........133
FTPBookmarks............................ .. ...........
.........................133
SSHv2Bookmarks............... .. ......
................................ .........133
EditingBookmarks.......
................................ ............................133
RemovingBookmarks....... .................. .............
............... ...........134
UsingBookmarks ......................
............... ...............................134
UsingRemoteDesktopBookmarks
............... .................. .................134
UsingVNCBookmarks ............................................................137
UsingCitrixBookmarks.................................. .
........................138
UsingWebBookmarks.......................
.....................................139
UsingMobileConnectBookmarks...... ...
................................ .........139
UsingFileShareBookmarks.....
..................................................140
UsingFTPBookmarks...............................................
..............140
UsingTelnetBookmarks......... .. ......................
.........................143
UsingSSHv2Bookmarks......................
....................................143
GlobalBookmarkSingleSignOnOptions........
....................................145
PerBookmarkSingleSignOnOptions ........
.......................................145
Part3.Appendix
WarrantyandLicenseAgreements...................................................149
GNUGeneralPublicLicense(GPL)SourceCode ........ .................. ..............
...149
LimitedHardwareWarranty ............................................
...............149
EndUserLicenseAgreement........... ....................
...........................150
SonicWallSupport.....................
............................................156
SonicWallSecureMobileAccess8.6UserGuide
Part1
6
Introduction
AbouttheSecureMobileAccessUserGuide
VirtualOfficeOverview
SonicWallSecureMobileAccess8.6UserGuide
1
7
AbouttheSecureMobileAccessUser
Guide
WelcometotheSonicWallSecureMobileAccess(SMA)Userdocumentation.Thisdocumentprovides
informationonusingtheSecureMobileAccessuserportalcalledVirtualOfficethatallowsyoutocreate
bookmarksandrunservicesovertheSMA/SRAappliance.
ChecktheSonicWalldocumentationWebsiteforthelatestversionsofallSonicWall
productdocumentationat
https://support.sonicwall.com/sonicwallsecuremobileaccess/sma%206200/releasenotesguides.
OrganizationofthisGuide
TheSonicWallSecureMobileAccessUserGuideisstructuredintothefollowingparts:
Chapter1AbouttheSecureMobileAccessUserGuide
Thischapterprovideshelpfulinformationforusingthisguide.Itincludesconventionsusedinthisguide,
informationonhowtoobtainadditionalproductinformation,andaQuickAccessWorksheetthatyoushould
completebeforeusingtheSMA/SRAappliance.
Chapter2VirtualOfficeOverview
ThischapterprovidesanoverviewofSMA/SRAapplianceuserfeatures,NetExtender,FileShares,SecureVirtual
Assist,SecureVirtualAccess,SecureVirtualMeeting,services,sessions,bookmarks,andservicetraymenu
options.
Chapter3UsingSecureMobileAccessConnectAgents
Thischapterprovidesproceduresonimportingcertificates,usingTwoFactorauthentication,andusing
OneTimePasswords.
Chapter4UsingVirtualOfficeAuthentication
ThischapterprovidesdetailsonhowtousetheauthenticationfeaturesoftheSonicWallSecureMobileAccess
(SMA)VirtualOfficeportal.
Chapter5UsingNetExtender
Thischapterprovidesproceduresoninstalling,configuring,andusingNetExtender.
Chapter6UsingSecureVirtualAssistandVirtualMeeting
ThischapterprovidesproceduresoninstallingandusingSecureVirtualAssistandSecureVirtualMeeting.
SonicWallSecureMobileAccess8.6UserGuide
8
Chapter7UsingFileShares
Thischapterprovidesproceduresonusingfileshares.
Chapter8ManagingBookmarks
Thischapterprovidesproceduresonconfiguringbookm arks.
AppendixAWarrantyandLicenseAgreements
ThisappendixprovidestheLimitedHardwareWarrantyandEndUserLicensingAgreement,andSonicWall
Supportcontactinformation.
GuideConventions
Theconventionsusedinthisguideareasfollows:
GuideConventions
Convention Use
Bold Highlightsdialogbox,window,andscreennames.Alsohighlightsbuttons.Also
usedforfilenamesandtextorvaluesyouarebeinginstructedtotypeintothe
interface.
Italic Indicatesthenameofatechnicalmanual.Alsoindicatesemphasisoncertain
wordsinasentence.Sometimesindicatesthefirstinstanceofasignificant
termorconcept.
SonicWallSecureMobileAccess8.6UserGuide
2
9
VirtualOfficeOv erview
ThissectionprovidesanoverviewoftheSonicWallSecureMobileAccess(SMA)userportal,theVirtualOffice.It
alsoincludesinformationaboutsupportedbrowsersandassociatedrequirements.
Topics:
AboutVirtualOfficeonpage9
Browserrequirementsonpage10
Aboutcertificatesonpage12
AbouttheVirtualOfficeWebInterfaceonpage13
LoggingOutoftheVirtualOfficeonpage16
AboutVirtualOffice
SecureMobileAccessVirtualOfficeprovidessecureremoteaccesstonetworkresources,suchasapplications,
files,intranetwebsites,andemailthroughwebaccessinterfacessuchasMicrosoftOutlookWebAccess(OWA).
TheunderlyingprotocolusedforthesesessionsisSSL.
WithSecureMobileAccess,mobileworkers,telecommuters,partners,andcustomers
canaccessinformation
andapplicationsonyourintranetorextranet.Whatinformationshouldbeaccessibletotheuserisdetermined
byaccesspoliciesconfiguredbytheSecureMobileAccessadministrator.
AccessingVirtualOffice resources
Remotenetworkresourcescanbeaccessedinthefollowingwa ys:
•UsingastandardWebbrowser‐Toaccessnetworkresources,youmustlogintotheSecureMobile
Accessportal.Afterauthenticated,youmightaccessintranetHTTPandHTTPSsites,offloadedportals,
Webbasedapplications,andWebbasedemail.Inaddition,you
mightuploadanddownloadfilesusing
FTPorWindowsNetworkFileSharing.AllaccessisdonethroughastandardWebbrowseranddoesnot
requireanyclientapplicationstobedownloadedtoremoteusers’machines.
•UsingJavathinclientaccesstocorporatedesktopsandapplicationsTheSonicWallSMA/SRAsecurity
appliance
includesseveralJavaorActiveXthinclientprogramsthatcanbelaunchedfromwithinthe
SonicWallSMA/SRAsecurityappliance.TerminalSer vicesandVNCJavaclientsallowremoteusersto
accesscorporateserversanddesktops,openfiles,editandstoredataasiftheywereattheoffice.
Termi nalServicesprovides
theabilitytoopenindividualapplicationsandsupportremotesoundand
printservices.Inaddition,usersmightaccessTelnetandSSHserversforSSHversion1(SSHv1)andSSH
version2(SSHv2),fromtheSecureMobileAccessportal.
•UsingtheNetExtenderSecureMobileAccessclientTheSonicWallSecureMobileAccess
network
extensionclient,NetExtender,isavailablethroughtheSecureMobileAccessVirtualOfficeportal
throughanActiveXcontrolorthroughstandaloneapplicationsforWindows,Linux,andMacOSX
platforms.ToconnectusingtheSMA/SRAclient,logintotheportal,downloadtheinstallerapplication
SonicWallSecureMobileAccess8.6UserGuide
10
andthenlaunchtheNetExtenderconnectortoestablishtheSSLVPNtunnel.AbouttheVirtualOffice
WebInterfaceonpage13.AfteryouhavesetuptheSSLVPNtunnel,youcanaccessnetworkresources
asifyouwereonthelocalnetwork.
TheNetExtenderstandaloneapplicationsareautomaticallyinstalled
onaclientsystemthefirsttimeyou
clicktheNetExtenderlinkintheVirtualOfficeportal.Thestandaloneclientcanbelauncheddirectly
fromusers’computerswithoutrequiringthemtologintotheSecureMobileAccessportalfirst.
•UsingtheSonicWallMobi leConnectappSonicWallMobileConnectis
anappforiOS,Android,MacOS
X,WindowsPhone,Windows10,andChromeOSthat,likeNetExtender,usesSSLVPNtoenablesecure,
mobileconnectionstoprivatenetworksprotectedbySonicWallsecurityapplian ces.Forinformation
aboutinstallingandusingSonicWallMobileConnect,seetheSonicWallMobileConnectUser
documentationavailableat:
https://support.sonicwall.com/sonicwallsecuremobileaccess/sma%206200/releasenotesguides
Forsecureremoteaccesstoworkasdescribedinthisguide,theSonicWallSMA/SRAsecurityappliancemustbe
installedandconfiguredaccordingtothedirectionsprovidedintheGettingStartedGuideforyourmodel.
Browserrequirements
theBrowserVersionsPerClientOperatingSystemstableprovidesinformationaboutthebrowserssupportedon
variousclientoperatingsystems.
BrowserVersionsPerClientOperatingSystems
ForAdministratormanagementinterfacebrowsercompatibility,ref ertotheSonicWallSecureMobi leAccess
Administrationdocumentation.
NOTE:IfyourAdministratorhasRemediationenabled,thewarningmessage“AccessisdeniedbyGeoIP&
BotnetFilter ”displayswhenattemptingtoaccessingremotenetworkresources.Abrowserwindowis
automaticallyopenedtodisplayaCAPTCHApictureandentryfield.Youmustcompleteremediation
withinthespecifiedtimelimitbefor e
youcanlogin.RefertotheSonicWallSecureMobileAccess
Administrationdocumentationfordetails.
Browser OperatingSystem
InternetExplorer11 Windows7
InternetExplorer10 Windows10
InternetExplorer11 Windows10
MozillaFirefox(latestversion) WindowsVista
Windows7
Windows10
Windows10
Linux
MacOSX
GoogleChrome(latestversion) WindowsVista
Windows7
Windows10
Windows10
Linux
MacOS
X
AppleSafari(latestversion) MacOSX
SonicWallSecureMobileAccess8.6UserGuide
11
Below,theBrowserSupportForVirtualOfficeFeaturestableprovidesbrowserrequirementsforspecific
featuresofVirtualOffice.
BrowserSupportForVirtualOfficeFeatures
ApplicationProxy
Features&Browser
Requirements
Windows7 Windows10 Linux MacOSX
NetExtender Browser
Independent
RDP5
VNC
Telnet
SSHv2
HTTP,HTTPS,FTP(Browser)
FileSharing(Browser)
FileSharing
SonicWallSecureMobileAccess8.6UserGuide
12
VirtualAssistisfu llysupportedonWindowsplatforms.VirtualAssistiscertifiedtoworkonWindows7,and
WindowsVista.Limitedfunctionalityissuppor tedonMacOSwherecustomerscanrequestforassistance
throughwebrequests.
Aboutcertificates
IftheSMA/SRAapplianceusesaselfsignedSSLcertificateforHTTPSauthentication,thenitisrecommendedto
installthecertificatebeforeestablishingaNetExtenderconnection.Ifyouareunsurewhetherthecertificateis
selfsignedorgeneratedbyatrustedrootCertificateAuthority,SonicWallrecommendsthatyouimportthe
certificate.
Theeasiestwaytoimp o rt thecertificateistoclickImportCertificateontheSystem>Certificates
page.
Ifthecertificateisnotissuedbyanauthorizedorganization,amessageisdisplayedwarningusersoftherisk.A
usercanthenviewdetailedinformationandchoosetocontinueorend
theconnection.
WhenusingthenetworklogonmethodfromtheWindowsloginscreen,NetExtenderusesSystemStorefor
certificatebasedauthentication.WhentheuserisalreadyloggedintoWindows,NetExtenderusestheUser
Storeforcertificatebasedauthentication.Auserwhowantstousethenetworklogonmethodwhencertificate
authenticationisalsoenabledshouldimporthisusercertificateintotheSystemStoreaswellasintotheUser
Store.
Citrix
VirtualAssist Browser
Independent
Browser
Independent
HTML5
(InternetExplorer11and
later)
NOTE:IfyouareusinganHTML5clientwithInternetExplorer,itmustbeIE11orlater.Earlierversionsof
InternetExplorerdonotsupportHTML5.
NOTE:NotallHTML5features(suchasAudioRedirect)aresupportedonInternetExplorerbecauseof
browserlimitations.
NOTE:PluginsmightnotbesupportedinFirefoxorChromebrowsers,becauseoftheremovalofNPAPI
support.TolaunchclientssuchasNetExtenderandVirtualAssist,downloadandopenthefilesmanually.
BrowserSupportForVirtualOfficeFeatures(Continued)
ApplicationProxy
Features&Browser
Requirements
Windows7 Windows10 Linux MacOSX
SonicWallSecureMobileAccess8.6UserGuide
13
AbouttheVirtualOfficeWebInterface
YoucanaccesstheVirtualOfficeportalattheURLprovidedtoyoubyyournetworkadministrator.
TologintoVirtualOffice:
1Onyourworkstationatyourremotelocation,launchanapprovedbrowserandentertheIPaddressof
theVirtualOfficeportalintheLocationorAddressfield.Bydefault,thisisthedefaultLANIPaddressof
theSMA/SRAappliance,https://192.168.200.1.
2Asecuritywarningshouldappear.Clic kYestocontinue.
3The
SonicWallSecureMobileAccessloginpagedisplaysandpromptsyoutoenteryourusernameand
password.Tologinusingthedefaultadministratorcredentials,enteradminintheUserNamefield,
passwordinthePasswordfield,andselectadomainfromtheDomaindropdownlistandclickLogin.
OnlyLocalDomainallowsAdministratorprivileges.
ThedefaultpagedisplayedistheVirtualOfficehomepage.ThedefaultversionofthispageshowsaSonicWall
logo,althoughyourcompany’ssystemAdministratormighthavecustomizedthispagetocontainalogoandlook
andfeelofyourcompany.GototheAbout
VirtualOfficeonpage9tolearnmoreabouttheVirtualOfficehome
page.
FromtheVirtualOfficeportalhomepage,youcannotnavigatetotheAdministratorsenvironment.Ifyouhave
AdministratorsprivilegesandwanttoentertheAdministratorenvironment,youneedtogoback tothelogin
pageandenter
ausernameandpasswordthathaveAdministratorprivileges,andloginagainusingthe
LocalDomaindomain.OnlytheLocalDomainallowsAdministratoraccesstothemanagementinterface.Also
notethatthedomainisindependentoftheprivilegessetupfortheuser.
LogginginasausertakesyoudirectlytoVirtual
Office.TheVirtualOfficeHomepagedisplaysasshownhere.
NOTE:YourAdministratormighthavesetupanotherloginandpasswordforyouthathasonlyuser
privileges.
SonicWallSecureMobileAccess8.6UserGuide
14
TheVirtualOfficecontentvariesbasedontheconfigurationofyournetworkadministrator.Somebookmarks
andservicesdescribedintheSonicWallSecureMobileAccessUserdocumentationmightnotbedisplayedwhen
youlogintotheSMA/SRAsecurityappliance.
TheVirtualOfficecancontainanyofthenodesdescribedinthe
VirtualOfficeNodeDescriptionstable.
VirtualOfficeNodeDescriptions
Node Description
FileShares ProvidesaccesstotheFileSharesutilitythatgivesremoteuserswithasecure
WebinterfaceaccesstoMicrosoftFileSharesusingtheCIFS(Common
InternetFileSystem)orSMB(ServerMessageBlock)protocols.UsingaWeb
interfacesimilarinstyle
toMicrosoftsfamiliarNetworkNeighborhoodorMy
NetworkPlaces,FileSharesallowuserswithappropriatepermissionsto
browsenetworkshares,rename,delete,retrieve,anduploadfiles,andto
createbookmarksforlaterrecall.
NetExtender ProvidesaccesstotheNetExtenderutility,atransparentSSLVPNclientfor
WindowsorLinuxusersthatallows
youtorunany applicationsecurelyonthe
remotenetwork.ItactsasanIPlevelmechanismprovidedbythevirtual
interfacethatnegotiatestheActiveXcomponent(onWindowswithIE),using
aPointtoPointProtocol(PPP)adapterinstance.OnnonWindowsplatforms,
Javacontrolsareusedtoautomatically
installNetExtenderfromtheVirtual
Officeportal.Afterinstallation,NetExtenderautomaticallylaunchesand
connectsavirtualadapterforSSLsecureNetExtenderpointtopointaccessto
permittedhostsandsubnetsontheinternalnetwork.
SecureVirtualAssist ProvidesaccesstoVirtualAssist,aneasytousetoolthatallowsSonicWall
SecureMobile
Accessuserstoremotelysupportcustomersbytakingcontrol
oftheircomputerswhilethecustomerobserves.VirtualAssistisalightweight,
thinclientthatinstallsautomaticallyusingJavafromtheSecureMobileAccess
VirtualOfficewithoutrequiringtheinstallationofanyexternalsoftware.For
computersthatdonotsupportJava,Virtual
Assistcanbemanuallyinstalled
bydownloadinganexecutablefilefromtheVirtualOffice.
SonicWallSecureMobileAccess8.6UserGuide
15
TheHomepageprovidescustomizedcontentandlinkstonetworkresources.TheHomePagemightcontain
supportcontactinformation,VPNinstructions ,companynews,ortechnicalupdates.
OnlyaWebbrowserisrequiredtoaccessintranetwebsites,FileShares,andFTPsites.VNC,andTelnetrequire
Java.SSHv2providestrongencryption,
requiresOracleJRE1.4oraboveandcanonlyconnecttoserversthat
supportSSHv2.Termi nalServicesrequiresJavaontheclientmachine.
AsexamplesoftasksyoucandoandenvironmentsyoucanreachthroughVirtualOffice,youcanconnectto:
IntranetWeborHTTPSsitesIfyour
organizationsupportsWebbasedemail,such asOutlookWeb
Access,youcanalsoaccessWebbasedemail
TheentirenetworkbylaunchingtheNetExtenderclient
FTPserversforuploadinganddownloadingfiles
Thecorporatenetworkneighborhoodforfilesharing
TelnetandSSHservers
DesktopsanddesktopapplicationsusingTerminalServices
orVNC.
EmailserversthroughtheNetExtenderclient.
TheAdministratordetermineswhatresourcesareavailabletousersfromtheSonicWallSecureMobileAccess
VirtualOffice.TheAdministratorcancreateuser,group,andglobalpoliciesthatdisableaccesstocertain
machinesorapplicationsonthecorporatenetwork.
TheAdministratormightalsodefine
bookmarks,orpreconfiguredlinks,toWebsitesorcomputersonthe
intranet.Additionalbookmarksmightbedefinedbytheenduser.
SonicWallNetExtenderisasoftwareapplicationthatenablesremoteuserstosecurelyconnecttotheremote
network.WithNetExtender,remoteuserscanvirtuallyjointheremotenetwork.Userscanmount
network
drives,uploadanddownloadfiles,andaccessresourcesinthesamewayasiftheywereonthelocalnetwork.
SecureVirtualMeeting ProvidesaccesstoVirtualMeetingthatallowsmultipleuserstoviewa
desktopandinteractivelyparticipateinameetingfromvirtuallyanywhere
withanInternetconnection.VirtualMeeting
issimilartotheonetoone
desktopsharingprovidedbyVirtualAssistexceptmultipleuserscansharea
desktop.
SecureVirtualAccess(if
configuredbyAdministrator
VirtualAccessallowsTechnicianstogainaccesstosystemsoutsidetheLANof
theSMA/SRAappliance.Afterdownloadingandinstallingthethinclientfor
VirtualAccessmode,thesystemappearsonlyonthatTechnician’sVirtual
Assistsupportqueue,withintheSecureMobileAccessmanagement
interface.
AllBookmarks Providesalistofavailablebookmarkswhichareobjectsthatenableyouto
connecttoalocationorapplicationconvenientlyandquickly.
Downloads Providesalistofdownloadableclientsand
applications.
Options Providestheoptiontochangeuserpasswordandusesinglesignon,if
enabledbytheAdministrator.
Help LaunchesonlinehelpforVirtualOffice.
Tips/Help ProvidesashortlistofcommonquestionsandtipsabouttheVirtualOffice.
Logout LogsyououtoftheVirtualOfficeenvironment.
VirtualOfficeNodeDescriptions(Continued)
Node Description
SonicWallSecureMobileAccess8.6UserGuide
16
LoggingOutoftheVirtualOffice
Toendyoursession,simplyreturntotheVirtualOfficehomepagefromwhereveryouarewithintheportaland
clickLogout.
WhenusingtheVirtualOfficewiththeadminusername,theLogoutbuttonisnotdisplayed.Thisisasecurity
measuretoensurethatAdministratorslogoutoftheadministrative
interface,andnottheVirtualOffice.
SonicWallSecureMobileAccess8.6UserGuide
Part2
17
UsingSecureRemoteAccessFeatures
UsingSecureMobileAccessConnectAgents
UsingVirtualOfficeAuthentication
UsingNetExtender
UsingSecureVirtualAssistandVirtualMeeting
UsingFileShares
ManagingBookmarks
SonicWallSecureMobileAccess8.6UserGuide
3
18
UsingSecureMobileAccessConnect
Agents
ThissectionprovidesdetailsonhowtousethefeaturesoftheSonicWallSecureMobileAccess(SMA)Connect
Agentsportal.
Topics:
WhatistheSecureMobileAccessConnectAgent?onpage18
WhatistheSecureMobileAccessConnect
Agent?
TheBrowserPlugins(NPAPI,ActiveX,andJavaApplet)areusedtolaunchnativeapplicationssuchasNet‐
Extender,VirtualAssist,EPCandsoon.Forsecurityreasons,popularbrowsersblockthesesPlugins.The
Chromebrowser,forexample,hasdisabledallNPAPIPlugins,andthenewestMicrosoftEdgebrowser
doesnot
supportActiveX.Assuch,theeaseofuseabilityoflaunchingdirectlyfromthebrowserisnolongerfunctional,
andanewmethodforseamlesslaunchingisnecessary.
ThereisanotherapplicationtolaunchthatopensaspecificSchemeURL.TherearesomeSchemesalready
definedinthe
W indows/OSX,suchasmailto.TheSMAConnectAgentusestheSchemeURLtoreplacethe
BrowserPlugins.TheSMAConnectAgentislikeabridgethatreceivestheSchemeURLrequestsandlaunches
thespecificnativeapplication.
TolaunchtheCitrixReceiverthroughaCitrixbookmark,youmust
firstinstalltheSMAConnectAgent.
Topics:
SupportedOperatingSystemsonpage18
DownloadingandInstallationonpage19
SettinguptheSMAConnectAgentonpage20
SupportedOperatingSystems
TheSMAConnectAgentsupportsWindows(7,8,and10)aswellastheMacintosh(OSX)operatingsystems.
SonicWallSecureMobileAccess8.6UserGuide
19
DownloadingandInstallation
OntheWelcomepage,thedownloadandinstallnotificationdisplayswhenyouneedtousetheEPCorPDA
features:
OnthePortalpage,thedownloadandinstallnotificationdisplayswhentheuserattemptstolaunch
NetExtender,VirtualAssist,VirtualMeeting,RDPBookmark(Native),orCitrixBookmark(Native):
Download‐ClickDown load
todownloadandinstallSMAConnectAgent.Afterthat,userscanclick
Installedtotellthebrowserto'remember'thattheSMAConnectAgenthasbeeninstalled,orclick
ContinuejusttobypassthepageandlogintotheStoreFront.
Installed‐thenotificationdoesnotappearagain.
•Continue‐closesthe
notificationandcontinuestheaction.
•[Details]‐opensawindowtointroducetheSMAConnectAgent.
Afterthedownloadiscomplete,itincludestheInstaller.TheWindowsinstallerisSMAConnectAgent.msi,
theMacintoshinstallerisSMAConnectAgent.dmg.TheWindowsinstallerneedsyourpermissiontoinstall,
theMacintoshinstallerguidesyoutoputtheSMA
ConnectAgentinthe/Applicationdirectory.
SonicWallSecureMobileAccess8.6UserGuide
20
SettinguptheSMAConnectAgent
ProxyConfiguration
SMAsupportsproxydeployment,whereallclientbrowsersareconfiguredtoredirecttoaproxyserver,butan
appliancesitsbetweentheclientbrowsersandtheproxyserver.AllSMAfeaturesaresupportedinthisscenario,
includingsupportingdomainexclusionswhenthedomainispartofavirtualhostingserver,or
insomecloud
deployments,whereinthesameserverIPcanbeusedbymultipledomains.
Additionally,typicaldatacenterserverfarmsarefrontedwithaloadbalancerand/orreverseSSLProxyto
offloadSSLprocessingontheservers.Foraloadbalancerfrontingtheserversanddoingdecryption,the
applianceusually
onlyseestheIPoftheloadbalancer,andtheloadbalancerdecryptsthecontentand
determinesthespecificservertoassignthisconnectionto.DPISSLnowhasaglobalpolicyoptiontodisablean
IPbasedexclusioncache.TheexclusionscontinuetoworkevenwhentheIPbased
exclusioncacheisoff.The
SMAConnectAgentcansetuptheproxybyuser.
Therearefouroptionstosetup theproxyconfiguration:
•NoProxy‐Whennoproxyserverisconfigured,IPv6 attributesarediscarded.
•Usesystemproxysettings‐
•Manualproxyconfiguration‐
•AutomaticproxyconfigurationURL‐
Logs
ThereisaLogtrayonthesystemtoolbar.Youcanrightclickthetrayandselectthepopupmenutoviewthe
logs.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156

SonicWALL SMA 4600 User guide

Category
Software
Type
User guide
This manual is also suitable for

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI