SonicWALL SMA 500v User guide

SonicWall™

SecureMobileAccess8.6

UserGuide

SMA200/400

SRA1600/4600

SMA500vVirtual

Appliance

Copyright©2017SonicWallInc.Allrightsreserved.

SonicWallisatrademarkorregisteredtrademarkofSon ic WallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allother

trademarksandregisteredtrademarksarepropert yoftheirrespectiveowners

TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffili ates’products.Nolicense,expressor

implied,

byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.

EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SONICWALLAND/OR

ITSAFFILIATESASSUMENOLI ABILITYWHATSO EVERAND

DISCLA IMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANT YRELATIN GTOITS

PRODUCTSINCLUDING,BUTNOTLIMIT EDTO,THEIMPLIEDWARR ANT YOFMERCHANTABILITY,FITNESSFORAPA RT I CU L A RPURPOSE,OR

NON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIREC T,INDIRECT,CONSEQUENTIAL,

PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,

WITHOUTLIMITAT ION ,DAMAGESFORLOSSOFPROFIT S,BUSINESS

INTERRUPTIONORLOSSOFINFORMATION)ARISINGOU TOFTHEUSEORINA BILI TYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/OR

ITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakenorepresentationsor

warrantieswithrespectto

theaccuracyorcompletenessofthecontentsofthisdo cumentandreservestherighttomakechangesto

specificationsandproductdescriptionsatanytimewithoutnotice.Soni cWallInc.and/oritsaffiliatesdonotmakeanycommitmentto

updatetheinformationcontainedinthisdocument.

Formoreinformation,visithttps://www.sonicwall.com/legal/.

Secure

MobileAccessUserGuide

Updated‐October2017

Version‐8.6

232‐003818‐00RevB

Legend

WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.

CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.

IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

SonicWallSecureMobileAccess8.6UserGuide

1

3

Part1.Introduction

AbouttheSecureMobileAccessUserGuide.............................................7

OrganizationofthisGuide..............................................

................ 7

GuideConventions... .............................

.................................... 8

VirtualOfficeOverview...........

.............. . . . ................ ................ ..9

AboutVirtualOffice................................ ...............

............... ..... 9

AccessingVirtualOfficeresources....................... ...

............... ........... 9

Browserrequirements......................

.......................................... 10

Aboutcertificates.. .. ..

............... .................. ............................. 12

AbouttheVirtualOfficeWebInterface .................................

..................13

LoggingOutoftheVirtualOffice...................... ....

.............................. 16

Part2.UsingSecureRemoteAccessFeatures

UsingSecureMobi leAccessConnectAgents................... .........................18

What

istheSecureMobileAccessConnectAgent? ............... .................. ........ 18

SupportedOperating

Systems....... ................................................ 18

DownloadingandInstallation .......................... ................

............. 19

SettinguptheSMAConnectAgent...............................

...................20

UsingVirtualOfficeAuthentication ...........................

.............. . . .........23

ImportingCertificates.................. ......

............................. ............ 23

UsingTwo‐FactorAuthentication .....

...................................................23

UserPrerequisites...............................................

............... ..24

RSATwo‐Factoruserauthenticationprocess...........................

...............  24

VASCOtwo‐factoruserauthenticationprocess.................. ...........

............ 26

Usingone‐timepasswords........................ ..........

............... ............ 27

Userprerequisites.....................

............... .................. .......... 27

Logginginwithaone‐timepassword

............... .................. ................ 27

Configuring

one‐timepasswordsforSMS‐capablephones....... ........................ 28

Verifyinguserone‐timepasswordconfiguration..... .

............... ..................  29

UsingNetExtender...............

..................................................30

User

Prerequisites.................. .................. ................................ 30

UsingMobileConnect .............................

................................ ....31

Userconfigurationtasks...........

................................ .................. ..32

InstallingNetE xtenderusingtheMozillaFirefoxbrowser................................33

InstallingNetE xtenderusingtheInternetExplorerbrowser..

............................ 35

InstallingNetE xtenderUsingtheChromeBrowser ................

...................... 37

LaunchingNetExtenderDirectlyfromYourComputer......................

............. 40

Pre‐fillingtheServerandDomainFieldswhileInstalling NetExtenderthroughMicrosoftInstaller

40

ConfiguringNetExtenderProperties..... ...............

............................. 42

Contents

SonicWallSecureMobileAccess8.6UserGuide

4

ConfiguringNetExtenderConnectionScripts.......................................... 44

ConfiguringBatchFileCommands

............... .................. ..................44

ConfiguringProxySettings...............................................

.......... 45

ConfiguringNetExtenderLogProperties....................................

.......... 47

ConfiguringNetExtenderAdvancedProperties.................................. ..

.....48

ConfiguringNetExtenderAccelerationProperties...................... ................ 49

ConfiguringNetExtender

PacketCaptureProperties....................... ............. 49

ConfiguringLanguageProperties........

............... ............................. 50

ViewingtheNetExtenderLog ..

................................................. ....51

DisconnectingNetExtender.......... .................. ..................

........... 51

UpgradingNetExtender ..... .................. ..............

....................... 52

ChangingPasswords............ .............

................................ .....52

AuthenticationMethods ...........

................................ ................ 52

UninstallingNetExtender

........................................................... 53

VerifyingNetExtenderoperationfromtheSystemTray .......................... ........

53

UsingtheNetExtenderCommandLineInterface.................................. .....54

InstallingNetE xtenderonLinux.

................................ .................. ..55

UsingNetExtenderonLinux............................................

............ 57

UsingSecureVirtualAssistandVi rtualMeeting...... . . .......................

..........61

UsingSecureVirtualAssist........ .............................

........................ 61

InstallingandLaunchingSecureVirtualAssist........... .. .......

............... .......62

ConfiguringSecureVirtualAssistSettings .......................

............... .......63

SelectingaSecureVirtualAssistMode......................

............... .......... 67

LaunchingaSecureVirtualAssistTechnicia nSession..................

..................68

PerformingSecureVirtualAssistTechnicianTasks..........................

............ 70

InitiatingaSecureVirtualAssistSessionfromtheCustomerView ............... ..........77

UsingSecureVirtual

Assist.................. .................. .....................85

UsingSecureVirtualAssistinUnattendedMode................................... 

.... 87

UsingVirtualAccessMode....... .................. .................

...............  88

EnablingaSystemforSecureVirtualAccess .... .................. ......

...............  88

UsingtheRequestAssistanceFeature..............................

.................. 92

UsingSecureVirtualMeeting ............................

............... ................ 92

OverviewofRoles................

................................................93

CoordinatorRole

............... .................. ................................ 94

ParticipantRole............................. .....

...............................114

UsingFileShares................

.................................................. 117

Using

theFileSharesApplet ...........................................................117

UserPrerequisites...................................

............................117

ConfigurationOverview....................

.......................................118

UsingHTML‐basedFileShares......

............... ....................................119

ManagingBookmarks ..................... . ..........................

..............123

AddingBookmarks...................................

............................. ...123

RDPBookmarks................

................................ .................126

Citrix

Bookmarks................. ...............................................130

WebBookmarks .................................

............... .................132

SonicWallSecureMobileAccess8.6UserGuide

5

MobileConnectBookmarks............................................ .. .........133

FTPBookmarks............................ .. ...........

.........................133

SSHv2Bookmarks............... .. ......

................................ .........133

EditingBookmarks.......

................................ ............................133

RemovingBookmarks....... .................. .............

............... ...........134

UsingBookmarks ......................

............... ...............................134

UsingRemoteDesktopBookmarks

............... .................. .................134

UsingVNCBookmarks ............................................................137

UsingCitrixBookmarks.................................. .

........................138

UsingWebBookmarks.......................

.....................................139

UsingMobileConnectBookmarks...... ...

................................ .........139

UsingFileShareBookmarks.....

..................................................140

UsingFTPBookmarks...............................................

..............140

UsingTelnetBookmarks......... .. ......................

.........................143

UsingSSHv2Bookmarks......................

....................................143

GlobalBookmarkSingleSign‐OnOptions........

....................................145

Per‐BookmarkSingleSign‐OnOptions ........

.......................................145

Part3.Appendix

WarrantyandLicenseAgreements...................................................149

GNUGeneralPublicLicense(GPL)SourceCode ........ .................. ..............

...149

LimitedHardwareWarranty ............................................

...............149

EndUserLicenseAgreement........... ....................

...........................150

SonicWallSupport.....................

............................................156

SonicWallSecureMobileAccess8.6UserGuide

Part1

6

Introduction

• AbouttheSecureMobileAccessUserGuide

• VirtualOfficeOverview

SonicWallSecureMobileAccess8.6UserGuide

1

7

AbouttheSecureMobileAccessUser

Guide

WelcometotheSonicWallSecureMobileAccess(SMA)Userdocumentation.Thisdocumentprovides

informationonusingtheSecureMobileAccessuserportalcalledVirtualOfficethatallowsyoutocreate

bookmarksandrunservicesovertheSMA/SRAappliance.

ChecktheSonicWalldocumentationWebsiteforthelatestversionsofallSonicWall

productdocumentationat

https://support.sonicwall.com/sonicwall‐secure‐mobile‐access/sma%206200/release‐notes‐guides.

OrganizationofthisGuide

TheSonicWallSecureMobileAccessUserGuideisstructuredintothefollowingparts:

Chapter1AbouttheSecureMobileAccessUserGuide

Thischapterprovideshelpfulinformationforusingthisguide.Itincludesconventionsusedinthisguide,

informationonhowtoobtainadditionalproductinformation,andaQuickAccessWorksheetthatyoushould

completebeforeusingtheSMA/SRAappliance.

Chapter2VirtualOfficeOverview

ThischapterprovidesanoverviewofSMA/SRAapplianceuserfeatures,NetExtender,FileShares,SecureVirtual

Assist,SecureVirtualAccess,SecureVirtualMeeting,services,sessions,bookmarks,andservicetraymenu

options.

Chapter3UsingSecureMobileAccessConnectAgents

Thischapterprovidesproceduresonimportingcertificates,usingTwo‐Factorauthentication,andusing

One‐TimePasswords.

Chapter4UsingVirtualOfficeAuthentication

ThischapterprovidesdetailsonhowtousetheauthenticationfeaturesoftheSonicWallSecureMobileAccess

(SMA)VirtualOfficeportal.

Chapter5UsingNetExtender

Thischapterprovidesproceduresoninstalling,configuring,andusingNetExtender.

Chapter6UsingSecureVirtualAssistandVirtualMeeting

ThischapterprovidesproceduresoninstallingandusingSecureVirtualAssistandSecureVirtualMeeting.

SonicWallSecureMobileAccess8.6UserGuide

8

Chapter7UsingFileShares

Thischapterprovidesproceduresonusingfileshares.

Chapter8ManagingBookmarks

Thischapterprovidesproceduresonconfiguringbookm arks.

AppendixAWarrantyandLicenseAgreements

ThisappendixprovidestheLimitedHardwareWarrantyandEndUserLicensingAgreement,andSonicWall

Supportcontactinformation.

GuideConventions

Theconventionsusedinthisguideareasfollows:

GuideConventions

Convention Use

Bold Highlightsdialogbox,window,andscreennames.Alsohighlightsbuttons.Also

usedforfilenamesandtextorvaluesyouarebeinginstructedtotypeintothe

interface.

Italic Indicatesthenameofatechnicalmanual.Alsoindicatesemphasisoncertain



wordsinasentence.Sometimesindicatesthefirstinstanceofasignificant

termorconcept.

SonicWallSecureMobileAccess8.6UserGuide

2

9

VirtualOfficeOv erview

ThissectionprovidesanoverviewoftheSonicWallSecureMobileAccess(SMA)userportal,theVirtualOffice.It

alsoincludesinformationaboutsupportedbrowsersandassociatedrequirements.

Topics:

• AboutVirtualOfficeonpage9

• Browserrequirementsonpage10

• Aboutcertificatesonpage12

• AbouttheVirtualOfficeWebInterfaceonpage13

• LoggingOutoftheVirtualOfficeonpage16

AboutVirtualOffice

SecureMobileAccessVirtualOfficeprovidessecureremoteaccesstonetworkresources,suchasapplications,

files,intranetwebsites,andemailthroughwebaccessinterfacessuchasMicrosoftOutlookWebAccess(OWA).

TheunderlyingprotocolusedforthesesessionsisSSL.

WithSecureMobileAccess,mobileworkers,telecommuters,partners,andcustomers

canaccessinformation

andapplicationsonyourintranetorextranet.Whatinformationshouldbeaccessibletotheuserisdetermined

byaccesspoliciesconfiguredbytheSecureMobileAccessadministrator.

AccessingVirtualOffice resources

Remotenetworkresourcescanbeaccessedinthefollowingwa ys:

•UsingastandardWebbrowser‐Toaccessnetworkresources,youmustlogintotheSecureMobile

Accessportal.Afterauthenticated,youmightaccessintranetHTTPandHTTPSsites,offloadedportals,

Web‐basedapplications,andWeb‐basedemail.Inaddition,you

mightuploadanddownloadfilesusing

FTPorWindowsNetworkFileSharing.AllaccessisdonethroughastandardWebbrowseranddoesnot

requireanyclientapplicationstobedownloadedtoremoteusers’machines.

•UsingJavathin‐clientaccesstocorporatedesktopsandapplications–TheSonicWallSMA/SRAsecurity

appliance

includesseveralJavaorActiveXthin‐clientprogramsthatcanbelaunchedfromwithinthe

SonicWallSMA/SRAsecurityappliance.TerminalSer vicesandVNCJavaclientsallowremoteusersto

accesscorporateserversanddesktops,openfiles,editandstoredataasiftheywereattheoffice.

Termi nalServicesprovides

theabilitytoopenindividualapplicationsandsupportremotesoundand

printservices.Inaddition,usersmightaccessTelnetandSSHserversforSSHversion1(SSHv1)andSSH

version2(SSHv2),fromtheSecureMobileAccessportal.

•UsingtheNetExtenderSecureMobileAccessclient–TheSonicWallSecureMobileAccess

network

extensionclient,NetExtender,isavailablethroughtheSecureMobileAccessVirtualOfficeportal

throughanActiveXcontrolorthroughstandaloneapplicationsforWindows,Linux,andMacOSX

platforms.ToconnectusingtheSMA/SRAclient,logintotheportal,downloadtheinstallerapplication

SonicWallSecureMobileAccess8.6UserGuide

10

andthenlaunchtheNetExtenderconnectortoestablishtheSSLVPNtunnel.AbouttheVirtualOffice

WebInterfaceonpage13.AfteryouhavesetuptheSSLVPNtunnel,youcanaccessnetworkresources

asifyouwereonthelocalnetwork.

TheNetExtenderstandaloneapplicationsareautomaticallyinstalled

onaclientsystemthefirsttimeyou

clicktheNetExtenderlinkintheVirtualOfficeportal.Thestandaloneclientcanbelauncheddirectly

fromusers’computerswithoutrequiringthemtologintotheSecureMobileAccessportalfirst.

•UsingtheSonicWallMobi leConnectapp–SonicWallMobileConnectis

anappforiOS,Android,MacOS

X,WindowsPhone,Windows10,andChromeOSthat,likeNetExtender,usesSSLVPNtoenablesecure,

mobileconnectionstoprivatenetworksprotectedbySonicWallsecurityapplian ces.Forinformation

aboutinstallingandusingSonicWallMobileConnect,seetheSonicWallMobileConnectUser

documentationavailableat:

https://support.sonicwall.com/sonicwall‐secure‐mobile‐access/sma%206200/release‐notes‐guides

Forsecureremoteaccesstoworkasdescribedinthisguide,theSonicWallSMA/SRAsecurityappliancemustbe

installedandconfiguredaccordingtothedirectionsprovidedintheGettingStartedGuideforyourmodel.

Browserrequirements

theBrowserVersionsPerClientOperatingSystemstableprovidesinformationaboutthebrowserssupportedon

variousclientoperatingsystems.

BrowserVersionsPerClientOperatingSystems

ForAdministratormanagementinterfacebrowsercompatibility,ref ertotheSonicWallSecureMobi leAccess

Administrationdocumentation.

NOTE:IfyourAdministratorhasRemediationenabled,thewarningmessage“AccessisdeniedbyGeoIP&

BotnetFilter ”displayswhenattemptingtoaccessingremotenetworkresources.Abrowserwindowis

automaticallyopenedtodisplayaCAPTCHApictureandentryfield.Youmustcompleteremediation

withinthespecifiedtimelimitbefor e

youcanlogin.RefertotheSonicWallSecureMobileAccess

Administrationdocumentationfordetails.

Browser OperatingSystem

InternetExplorer11 Windows7

InternetExplorer10 Windows10

InternetExplorer11 Windows10

MozillaFirefox(latestversion) WindowsVista

Windows7

Windows10

Linux

MacOSX

GoogleChrome(latestversion) WindowsVista

Windows7

Windows10

Linux

MacOS

X

AppleSafari(latestversion) MacOSX

SonicWallSecureMobileAccess8.6UserGuide

11

Below,theBrowserSupportForVirtualOfficeFeaturestableprovidesbrowserrequirementsforspecific 

featuresofVirtualOffice.

BrowserSupportForVirtualOfficeFeatures

ApplicationProxy

Features&Browser

Requirements

Windows7 Windows10 Linux MacOSX

NetExtender Browser

Independent

RDP5

VNC

Telnet

SSHv2

HTTP,HTTPS,FTP(Browser)

FileSharing(Browser)

FileSharing

SonicWallSecureMobileAccess8.6UserGuide

12

VirtualAssistisfu llysupportedonWindowsplatforms.VirtualAssistiscertifiedtoworkonWindows7,and

WindowsVista.Limitedfunctionalityissuppor tedonMacOSwherecustomerscanrequestforassistance

throughweb‐requests.

Aboutcertificates

IftheSMA/SRAapplianceusesaself‐signedSSLcertificateforHTTPSauthentication,thenitisrecommendedto

installthecertificatebeforeestablishingaNetExtenderconnection.Ifyouareunsurewhetherthecertificateis

self‐signedorgeneratedbyatrustedrootCertificateAuthority,SonicWallrecommendsthatyouimportthe

certificate.

Theeasiestwaytoimp o rt thecertificateistoclickImportCertificateontheSystem>Certificates

page.

Ifthecertificateisnotissuedbyanauthorizedorganization,amessageisdisplayedwarningusersoftherisk.A

usercanthenviewdetailedinformationandchoosetocontinueorend

theconnection.

WhenusingthenetworklogonmethodfromtheWindowsloginscreen,NetExtenderusesSystemStorefor

certificate‐basedauthentication.WhentheuserisalreadyloggedintoWindows,NetExtenderusestheUser

Storeforcertificate‐basedauthentication.Auserwhowantstousethenetworklogonmethodwhencertificate

authenticationisalsoenabledshouldimporthisusercertificateintotheSystemStoreaswellasintotheUser

Store.

Citrix

VirtualAssist Browser

Independent

Browser

Independent

HTML5

(InternetExplorer11and

later)

NOTE:IfyouareusinganHTML5clientwithInternetExplorer,itmustbeIE11orlater.Earlierversionsof

InternetExplorerdonotsupportHTML5.

NOTE:NotallHTML5features(suchasAudioRedirect)aresupportedonInternetExplorerbecauseof

browserlimitations.

NOTE:Plug‐insmightnotbesupportedinFirefoxorChromebrowsers,becauseoftheremovalofNPAPI

support.TolaunchclientssuchasNetExtenderandVirtualAssist,downloadandopenthefilesmanually.

BrowserSupportForVirtualOfficeFeatures(Continued)

ApplicationProxy

Features&Browser

Requirements

Windows7 Windows10 Linux MacOSX

SonicWallSecureMobileAccess8.6UserGuide

13

AbouttheVirtualOfficeWebInterface

YoucanaccesstheVirtualOfficeportalattheURLprovidedtoyoubyyournetworkadministrator.

TologintoVirtualOffice:

1Onyourworkstationatyourremotelocation,launchanapprovedbrowserandentertheIPaddressof

theVirtualOfficeportalintheLocationorAddressfield.Bydefault,thisisthedefaultLANIPaddressof

theSMA/SRAappliance,https://192.168.200.1.

2Asecuritywarningshouldappear.Clic kYestocontinue.

3The

SonicWallSecureMobileAccessloginpagedisplaysandpromptsyoutoenteryourusernameand

password.Tologinusingthedefaultadministratorcredentials,enteradminintheUserNamefield,

passwordinthePasswordfield,andselectadomainfromtheDomaindrop‐downlistandclickLogin.



OnlyLocalDomainallowsAdministratorprivileges.

ThedefaultpagedisplayedistheVirtualOfficehomepage.ThedefaultversionofthispageshowsaSonicWall

logo,althoughyourcompany’ssystemAdministratormighthavecustomizedthispagetocontainalogoandlook

andfeelofyourcompany.GototheAbout

VirtualOfficeonpage9tolearnmoreabouttheVirtualOfficehome

page.

FromtheVirtualOfficeportalhomepage,youcannotnavigatetotheAdministrator’senvironment.Ifyouhave

Administrator’sprivilegesandwanttoentertheAdministratorenvironment,youneedtogoback tothelogin

pageandenter

ausernameandpasswordthathaveAdministratorprivileges,andloginagainusingthe

LocalDomaindomain.OnlytheLocalDomainallowsAdministratoraccesstothemanagementinterface.Also

notethatthedomainisindependentoftheprivilegessetupfortheuser.

LogginginasausertakesyoudirectlytoVirtual

Office.TheVirtualOfficeHomepagedisplaysasshownhere.

NOTE:YourAdministratormighthavesetupanotherloginandpasswordforyouthathasonlyuser

privileges.

SonicWallSecureMobileAccess8.6UserGuide

14

TheVirtualOfficecontentvariesbasedontheconfigurationofyournetworkadministrator.Somebookmarks

andservicesdescribedintheSonicWallSecureMobileAccessUserdocumentationmightnotbedisplayedwhen

youlogintotheSMA/SRAsecurityappliance.

TheVirtualOfficecancontainanyofthenodesdescribedinthe

VirtualOfficeNodeDescriptionstable.

VirtualOfficeNodeDescriptions

Node Description

FileShares ProvidesaccesstotheFileSharesutilitythatgivesremoteuserswithasecure

WebinterfaceaccesstoMicrosoftFileSharesusingtheCIFS(Common

InternetFileSystem)orSMB(ServerMessageBlock)protocols.UsingaWeb

interfacesimilarinstyle

toMicrosoft’sfamiliarNetworkNeighborhoodorMy

NetworkPlaces,FileSharesallowuserswithappropriatepermissionsto

browsenetworkshares,rename,delete,retrieve,anduploadfiles,andto

createbookmarksforlaterrecall.

NetExtender ProvidesaccesstotheNetExtenderutility,atransparentSSLVPNclientfor

WindowsorLinuxusersthatallows

youtorunany applicationsecurelyonthe

remotenetwork.ItactsasanIP‐levelmechanismprovidedbythevirtual

interfacethatnegotiatestheActiveXcomponent(onWindowswithIE),using

aPoint‐to‐PointProtocol(PPP)adapterinstance.Onnon‐Windowsplatforms,

Javacontrolsareusedtoautomatically

installNetExtenderfromtheVirtual

Officeportal.Afterinstallation,NetExtenderautomaticallylaunchesand

connectsavirtualadapterforSSLsecureNetExtenderpoint‐to‐pointaccessto

permittedhostsandsubnetsontheinternalnetwork.

SecureVirtualAssist ProvidesaccesstoVirtualAssist,aneasytousetoolthatallowsSonicWall

SecureMobile

Accessuserstoremotelysupportcustomersbytakingcontrol

oftheircomputerswhilethecustomerobserves.VirtualAssistisalightweight,

thinclientthatinstallsautomaticallyusingJavafromtheSecureMobileAccess

VirtualOfficewithoutrequiringtheinstallationofanyexternalsoftware.For

computersthatdonotsupportJava,Virtual

Assistcanbemanuallyinstalled

bydownloadinganexecutablefilefromtheVirtualOffice.

SonicWallSecureMobileAccess8.6UserGuide

15

TheHomepageprovidescustomizedcontentandlinkstonetworkresources.TheHomePagemightcontain

supportcontactinformation,VPNinstructions ,companynews,ortechnicalupdates.

OnlyaWebbrowserisrequiredtoaccessintranetwebsites,FileShares,andFTPsites.VNC,andTelnetrequire

Java.SSHv2providestrongencryption,

requiresOracleJRE1.4oraboveandcanonlyconnecttoserversthat

supportSSHv2.Termi nalServicesrequiresJavaontheclientmachine.

AsexamplesoftasksyoucandoandenvironmentsyoucanreachthroughVirtualOffice,youcanconnectto:

• IntranetWeborHTTPSsites–Ifyour

organizationsupportsWeb‐basedemail,such asOutlookWeb

Access,youcanalsoaccessWeb‐basedemail

• TheentirenetworkbylaunchingtheNetExtenderclient

• FTPserversforuploadinganddownloadingfiles

• Thecorporatenetworkneighborhoodforfilesharing

• TelnetandSSHservers

• DesktopsanddesktopapplicationsusingTerminalServices

orVNC.

• EmailserversthroughtheNetExtenderclient.

TheAdministratordetermineswhatresourcesareavailabletousersfromtheSonicWallSecureMobileAccess

VirtualOffice.TheAdministratorcancreateuser,group,andglobalpoliciesthatdisableaccesstocertain

machinesorapplicationsonthecorporatenetwork.

TheAdministratormightalsodefine

bookmarks,orpreconfiguredlinks,toWebsitesorcomputersonthe

intranet.Additionalbookmarksmightbedefinedbytheenduser.

SonicWallNetExtenderisasoftwareapplicationthatenablesremoteuserstosecurelyconnecttotheremote

network.WithNetExtender,remoteuserscanvirtuallyjointheremotenetwork.Userscanmount

network

drives,uploadanddownloadfiles,andaccessresourcesinthesamewayasiftheywereonthelocalnetwork.

SecureVirtualMeeting ProvidesaccesstoVirtualMeetingthatallowsmultipleuserstoviewa

desktopandinteractivelyparticipateinameetingfromvirtuallyanywhere

withanInternetconnection.VirtualMeeting

issimilartotheone‐to‐one

desktopsharingprovidedbyVirtualAssistexceptmultipleuserscansharea

desktop.

SecureVirtualAccess(if

configuredbyAdministrator

VirtualAccessallowsTechnicianstogainaccesstosystemsoutsidetheLANof

theSMA/SRAappliance.Afterdownloadingandinstallingthethinclientfor

VirtualAccessmode,thesystemappearsonlyonthatTechnician’sVirtual

Assistsupportqueue,withintheSecureMobileAccessmanagement

interface.

AllBookmarks Providesalistofavailablebookmarkswhichareobjectsthatenableyouto

connecttoalocationorapplicationconvenientlyandquickly.

Downloads Providesalistofdownloadableclientsand

applications.

Options Providestheoptiontochangeuserpasswordandusesinglesign‐on,if

enabledbytheAdministrator.

Help LaunchesonlinehelpforVirtualOffice.

Tips/Help ProvidesashortlistofcommonquestionsandtipsabouttheVirtualOffice.

Logout LogsyououtoftheVirtualOfficeenvironment.

VirtualOfficeNodeDescriptions(Continued)

Node Description

SonicWallSecureMobileAccess8.6UserGuide

16

LoggingOutoftheVirtualOffice

Toendyoursession,simplyreturntotheVirtualOfficehomepagefromwhereveryouarewithintheportaland

clickLogout.

WhenusingtheVirtualOfficewiththeadminusername,theLogoutbuttonisnotdisplayed.Thisisasecurity

measuretoensurethatAdministratorslogoutoftheadministrative

interface,andnottheVirtualOffice.

SonicWallSecureMobileAccess8.6UserGuide

Part2

17

UsingSecureRemoteAccessFeatures

• UsingSecureMobileAccessConnectAgents

• UsingVirtualOfficeAuthentication

• UsingNetExtender

• UsingSecureVirtualAssistandVirtualMeeting

• UsingFileShares

• ManagingBookmarks

SonicWallSecureMobileAccess8.6UserGuide

3

18

UsingSecureMobileAccessConnect

Agents

ThissectionprovidesdetailsonhowtousethefeaturesoftheSonicWallSecureMobileAccess(SMA)Connect

Agentsportal.

Topics:

• WhatistheSecureMobileAccessConnectAgent?onpage18

WhatistheSecureMobileAccessConnect

Agent?

TheBrowserPlug‐ins(NPAPI,ActiveX,andJavaApplet)areusedtolaunchnativeapplicationssuchasNet‐

Extender,VirtualAssist,EPCandsoon.Forsecurityreasons,popularbrowsersblockthesesPlug‐ins.The

Chromebrowser,forexample,hasdisabledallNPAPIPlug‐ins,andthenewestMicrosoftEdgebrowser

doesnot

supportActiveX.Assuch,theease‐of‐useabilityoflaunchingdirectlyfromthebrowserisnolongerfunctional,

andanewmethodforseamlesslaunchingisnecessary.

ThereisanotherapplicationtolaunchthatopensaspecificSchemeURL.TherearesomeSchemesalready

definedinthe

W indows/OSX,suchasmailto.TheSMAConnectAgentusestheSchemeURLtoreplacethe

BrowserPlug‐ins.TheSMAConnectAgentislikeabridgethatreceivestheSchemeURLrequestsandlaunches

thespecificnativeapplication.

TolaunchtheCitrixReceiverthroughaCitrixbookmark,youmust

firstinstalltheSMAConnectAgent.

Topics:

• SupportedOperatingSystemsonpage18

• DownloadingandInstallationonpage19

• SettinguptheSMAConnectAgentonpage20

SupportedOperatingSystems

TheSMAConnectAgentsupportsWindows(7,8,and10)aswellastheMacintosh(OSX)operatingsystems.

SonicWallSecureMobileAccess8.6UserGuide

19

DownloadingandInstallation

OntheWelcomepage,thedownloadandinstallnotificationdisplayswhenyouneedtousetheEPCorPDA

features:

OnthePortalpage,thedownloadandinstallnotificationdisplayswhentheuserattemptstolaunch

Net‐Extender,VirtualAssist,VirtualMeeting,RDPBookmark(Native),orCitrixBookmark(Native):

• Download‐ClickDown load

todownloadandinstallSMAConnectAgent.Afterthat,userscanclick

Installedtotellthebrowserto'remember'thattheSMAConnectAgenthasbeeninstalled,orclick

ContinuejusttobypassthepageandlogintotheStoreFront.

• Installed‐thenotificationdoesnotappearagain.

•Continue‐closesthe

notificationandcontinuestheaction.

•[Details]‐opensawindowtointroducetheSMAConnectAgent.

Afterthedownloadiscomplete,itincludestheInstaller.TheWindowsinstallerisSMAConnectAgent.msi,

theMacintoshinstallerisSMAConnectAgent.dmg.TheWindowsinstallerneedsyourpermissiontoinstall,

theMacintoshinstallerguidesyoutoputtheSMA

ConnectAgentinthe/Applicationdirectory.

SonicWallSecureMobileAccess8.6UserGuide

20

SettinguptheSMAConnectAgent

ProxyConfiguration

SMAsupportsproxydeployment,whereallclientbrowsersareconfiguredtoredirecttoaproxyserver,butan

appliancesitsbetweentheclientbrowsersandtheproxyserver.AllSMAfeaturesaresupportedinthisscenario,

includingsupportingdomainexclusionswhenthedomainispartofavirtualhostingserver,or

insomecloud

deployments,whereinthesameserverIPcanbeusedbymultipledomains.

Additionally,typicaldatacenterserverfarmsarefrontedwithaloadbalancerand/orreverseSSLProxyto

offloadSSLprocessingontheservers.Foraloadbalancerfrontingtheserversanddoingdecryption,the

applianceusually

onlyseestheIPoftheloadbalancer,andtheloadbalancerdecryptsthecontentand

determinesthespecificservertoassignthisconnectionto.DPI‐SSLnowhasaglobalpolicyoptiontodisablean

IP‐basedexclusioncache.TheexclusionscontinuetoworkevenwhentheIP‐based

exclusioncacheisoff.The

SMAConnectAgentcansetuptheproxybyuser.

Therearefouroptionstosetup theproxyconfiguration:

•NoProxy‐Whennoproxyserverisconfigured,IPv6 attributesarediscarded.

•Usesystemproxysettings‐

•Manualproxyconfiguration‐

•AutomaticproxyconfigurationURL‐

Logs

ThereisaLogtrayonthesystemtoolbar.Youcanright‐clickthetrayandselectthepopupmenutoviewthe

logs.

Page is loading ...

SonicWALL SMA 500v, SMA 1600, SMA 200, SMA 400, SMA 4600 User guide

Related papers

Other documents