SonicWALL Mobile Connect User guide

Type
User guide
SonicWall™MobileConnectfor
macOS5.0
UserGuide
SonicWallMobileConnectformacOS5.0UserGuide
Contents
1
2
IntroductiontoMobileConnect..................... . ..................................3
HowMobileConnectWorks ............... .......................
....................... 3
NewFeaturesinMobileConnect5.0......... .. ..........
................................. 4
SupportedPlatforms ...............
....................................... ............. 4
AppleProductSupport............... ......................... .....
............... . 5
SonicWallApplianceSupport............. ..................
......................... 5
RequiredNetworkInformation......................
................................. 5
InstallingandConnecting ..............
...............................................7
InstallingMobileConnect .
.............................................................. 7
CreatingandSavingConnections ................................. ..
...................... 8
CreatingFirewallorSMA100Series/SRAConnections............... ....
...............8
CreatingSMA1000Series/EClassSRAConnections..........................
.......... 10
ConnectingtotheMobileConnect Server..................................
.............. 11
ConfiguringClientCertificates.................................
.........................13
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliances.............
..13
ConfiguringClientCertificateswithSMA100Series/SRAAppliances ......................14
EnablingConnec t onDemand... ........
............... ......................... .......15
EnablingConnecton
DemandwithSMA1000Series.......................... ..........15
EnablingConnectonDemandtoSMA100Series/
SRA..................................16
PreferencesandURLControl...........
..............................................18
PreferencesOverview ...
............... ............................................... 18
AdditionalSMA1000Series/EClassSRAOptions............................. .
............ 19
URLControlSyntaxandParameters.................................
....................20
UsingtheaddprofileCommand. .........................
...........................20
UsingtheconnectCommand................ ...
.................................... 21
UsingthedisconnectCommand ..........
....................................... ....22
UsingthecallbackurlCommandParameter..
.......................................... 23
Monitoring,Logs,andTroubleshooting....
.............................................25
MonitoringMobileConnect ...
....................................... ..................25
UsingMobileConnectHelpandLogOptions............... .....................
.......... 26
TroubleshootingMobileConnect .....................................
............... .... 27
SonicWallSupport ........................ . ....
.....................................28
AboutThisDocument...........
............... .......................................29
Contents
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
1
3
IntroductiontoMobileConnect
SonicWall™MobileConnectformacOSisanappforMacsrunningMacOSXElCapitan(10.11)ornewer
versions,includingmacOSHighSierra(10.13),thatenablessecure,mobileconnectionstopriv atenetworks
protectedbySonicWallsecurityappliances.
Top ics:
HowMobileConnectWorksonpage3
NewFeaturesinMobileConnect
5.0onpage4
SupportedPlatforms onpage4
HowMobileConnectWorks
Modernbusinesspracticesincreasinglyrequirethatusersbeabletoaccessanynetworkresource(files,internal
websites,etc.),anytime,anywhere.Atthesametime,ensuringthesecurityoftheseresourcesisaconstant
struggle.Whi lemostusersareawarethattheymusttakecaretoprotectcomputersfromnetworksecurityrisks,
thissecurityawarenessdoesnotalwaysextendtoMacdevicesliketheMacBookAirandMacBookPro.Andyet,
Macsareincreasinglysubjecttosecurityattacks.Furthermore,remoteMacuserscanoftenuseinsecure,
untrusted,publicWiFihotspotstoconnecttotheInternet.Itisthereforeachallengetoprovide
secure,mobile
accesswhilestillguardingagainstthein herentsecurityrisksfacedbymobileusers.
TheSonicWallMobileConnectformacOSappprovidessecure,mobileaccesstosensitivenetworkresources.
MobileConnectestablishesaSecureSocketLayerVirtualPrivateNetwork(SSLVPN)connectiontoprivate
networksthatareprotectedbySonicWall
securityappliances.Alltraffictoandfromtheprivatenetworkis
securelytransmittedovertheSSLVPNtunnel.
TogetstartedwithSonicWallMobileConnect:
1InstallSonicWallMobileConnectfromtheMacAppStore.
2EnsurethattheFirewallorSMA100Series/SRAappliancebeingusedbyMobileConnectisconnected
tothenetwork.
3Configurenetworkinformation(servername,username,password,andsoon).
4Initiateaconnectiontothenetwork.
5MobileConnectestablishesaSSLVPNtunnel
totheSonicWallsecurityappliance.
Youcannowaccessresourcesontheprivatenetwork.Alltraffictoandfromtheprivatenetworkissecurely
transmittedovertheSSLVPNtunnel.
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
4
NewFeaturesinMobileConnect5.0
Thefollowingenhancementsar eincludedintheMobileConnect5.0release.
•macOSHighSierraCompatibilityMobileConnectisfullyoptimizedforthelatestreleaseofmacOS
HighSierra.
•NetworkExtensionSupportMobileConnectnowleverag esApple'scurrentVPNframework,called
NetworkExtension,toallowformorereliableVPNconnectivityon
macOSdevices.Afterupgradingtothe
5.0version,MobileConnectmayneedtobereprovisioned,includingupdatingVPNconnection
configurationsandcertificates(ifapplicable).
•TouchBarSupportOnsupportedMacBookPros,theTouchBaratthetopoftheMackeyboardadapts
towhatyou'redoingand givesyou
intuitiveshortcutsandappcontrolswhenyouneedthem.Mobile
ConnectnowsupportsTouchBarforallsupportedMacdevices.
•TouchIDSupportTouchIDmaybeusedasaseamlessalternativetousernameandpassword
authenticationifallowedbytheVPNserver.RequirescompatibleserverwithconfiguredTouchID
policy,
aswellasaMacwithaconfiguredTouchIDsensor.
•GlobalHASupportMobileConnectcontainsupdatesfortheglobalhighavailabilityanddisaster
recoverycapabilitiesforVPNconnectionstoSMA1000Seriesserversrunning12.1ornewerfirmware.
SupportedPlatforms
ThefollowingsectionsdescribethesupportedplatformsandnetworkinformationforMobileConnect:
AppleProductSupportonpage5
SonicWallApplianceSupportonpage5
RequiredNetworkInformationonpage5
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
5
AppleProductSupport
SonicWallMobileConnectformacOSissupportedonallMacmodelsrunningMacOSXElCapitan(10.11)or
newer,includingmacOSHighSierra(10.13),availableasafreeupgrade.Seethefollowingwebsitefor
informationonhowtoupgradetomacOSHighSierra:http://www.apple.com/macos/howtoupgrade/.
ThefollowingMac
modelsarecompatiblewithmacOSHighSierra:
MacBook(Late2009ornewer)
MacBookPro(Mid2010ornewer)
MacBookAir(Late2010ornewer)
Macmini(Mid2010ornewer)
iMac(Late2009ornewer)
MacPro(Mid2010ornewer)
SonicWallApplianceSupport
SonicWallMobileConnectisafreeapp,butrequiresaconcurrentuserlicenseononeofthefollowingSonicWall
solutionsinordertofunctionproperly.
SonicWallfirewallappliancesincludingtheTZ,NSA,EClassNSA,andSuperMassive9000Seriesrunning
SonicOS5.8.1.0orhigher
SonicWallSecureMobileAccess100Series/
SRAappliancesrunning7.5orhigher
SonicWallSecureMobileAccess1000Series/EClassSRAapp liancesrunning10.7orhigher
Re quiredNetworkInformation
TouseMobileConnect,youneedthefollowinginformationfromyournetworkadministratororITSupport:
•ServernameoraddressThisiseithertheIPaddressorURLoftheSSLVPNservertowhichyouare
connecting.TheSSLVPNservercanbeanysupportedSonicWallappliance.SeeSonicWall
Appliance
Supportonpage5.
Usern ameandpasswordTypically ,youarerequiredtoenteryourusernameandpassword,although
someconnectionsmightnotrequirethis.
•DomainnameThedomainnameoftheSSLVPNserver.MobileConnectmightbeabletoautomatically
determinethiswhenitfirstcontactsthe
server,ortherecouldbemultipledomainsthatcanbeselected.
DNSDomainSettingsonAppliances
BeforeMobileConnectusersareabletoaccesstheprivatenetwork,thenetworkadministratormustconfigure
theDNSDomainontheSonicWallappliance.WhentheMobileConnectuseraccessesaURLontheprivate
network,theconfiguredDNSdomainisusedtoresolvethehostnamelookup.Forpublicdomainsthatdo
not
matchtheconfiguredDNSdomain,theDNSserverfortheWiFi,Ethernet,orcellularnetworkisused.
NOTE:TheMobileConnectuserdoesnotneedtoperformanyconfigurationtasksrelatedtoDNS.The
followinginformationisforSonicWallnetworkadministr ators.
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
6
TheDNSDomainconfigurationprocessvaries,dependingonthetypeofSonicWallappliancebeingused:
•SonicWallfirewallappliances‐OntheSSLVPN>ClientSettingspage,entertheDNSdomainnameinthe
DNSDomainfield.
•SonicWallSMA100Series/SRAappliances‐TheDNSdomaincanbeconfiguredeitherglobally,at
the
grouplevel,orattheindividualuserlevel:
•GloballevelOntheNetwork>DNSpage,entertheDNSdomainnameintheDNSDomainfield.
•GrouplevelOntheUsers>LocalGroupspage,clicktheediticonforthegroup.ClickontheNX
Settingstab
andentertheDNSdomaintheDNSDomainfield.
•UserlevelOntheUsers>LocalUserspage,clicktheediticonfortheuser.ClickontheNX
SettingstabandentertheDNSdomaintheDNSDomainfield.
•SonicWallSMA1000Series/EClassSRAappliances‐TheDNS
domaincanbeconfiguredeitherglobally
orforspecificIPaddresspools:
•GloballevelFromthemainnavigationmenuintheApplianceManagementConsole(AMC),
clickNetworkSettings.IntheNameresolutionarea,clickEdit.TheConfigureNameResolution
pageappears.EntertheDNSdomainnameintheSearch
domainsfield.
•IPaddresspoollevelFromthemainnavigationmenuintheAMC,clickServices.UnderAccess
services,intheNetworktunnelservicearea,clickConfigure.TheConfigureNetworkTunnel
Servicepageappears.ClickthenameoftheIPaddresspoolyouwanttoedit.TheConfigureIP
AddressPoolpageappears.TotherightoftheAdvancedheading,clickthearrowicon.
SelectCustomizedefaultsettingsandentertheDNSdomainnameintheSearchdomainsfield.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
2
7
InstallingandConnecting
ThissectiondescribeshowtoinstallMobileConnectonyourdeviceandhowtoconfigureandinitiateaVPN
connectionusingMobileConnect.
Top ics:
InstallingMobileConnectonpage7
CreatingandSavingConnectionsonpage8
ConnectingtotheMobileConnectServeronpage11
ConfiguringClientCertificatesonpage
13
EnablingConnec t onDemandonpage15
InstallingMobileConnect
SonicWallMobileConnectisinstalled throughtheMacAppStore.
TodownloadandinstalltheMobileConnectapp:
1OnyourMac,clickontheAppStoreicon.
2IntheSearch field,typeSonicWall Mobile Connect,andpressReturn.
3Inthesearchresults,selectSonicWallMobileConnect.
4 ClickFreeandthenInstall.TheappinstallsonyourMac.Wheninstallationiscomplete,theSonicWall
MobileConnecticonappearsinyourApplications
folderandinLaunchpad.
NOTE:IfyouencounteranerrorwhenattemptingtodownloadSonicWallMobi leConnect,seetheMac
AppStoreSupportwebsite,whereyoucanfindtroubleshootingproceduresandinstructionsonhowto
reporttheissuetoAppleSupportifnecessary:http://www.apple.com/support/mac/appstore/
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
8
CreatingandSavingConnections
TheprocessofcreatingaMobileConnectconnectionisslightlydifferentdependingonthetypeofSonicWall
appliancetowhichyouareconnecting.
CreatingFirewallorSMA100Series/SRAConnectionsonpage8
CreatingSMA1000Series/EClassSRAConnectionsonpage10
CreatingFirewallorSMA100Series/SRAConnections
TocreateandsaveanewconnectiontoaSonicWallnetworksecurityappliance,SMA100Series,or
SRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(firewallorSMA100Series/SRA
appliance).
4 ClickNext.MobileConnectattemptstocontacttheSonicWallappliance.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
9
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verifythatthe
serveraddressorURLisspelledcorrectly,andthenclickSave.
5IfMobileConnectsuccessfullycontactstheser ver,youarepromptedtoenteryourusernameand
password,unlesstheserverdoesnot
requirethisinformation.TypeyourcredentialsintotheUsername
andPasswordfields.
6TheDomainfieldisautopopulatedwiththedefaultdomainfromtheserver.Toselectadifferent
domain,clickDomaintodisplayadropdownmenuoftheavailableoptionsandthenselectthecorrect
domain.
7 ClickSaveto
createthenewconnection.
NOTE:Ifthepreviousscreenshotdoesnotmatchwhatisdisplayedonyourdevice,youare
connectingtoaSonicWallSMA1000SeriesorEClassSRAappliance.SeeCreatingSMA1000Series
/EClassSRAConnectionsonpage10.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
10
CreatingSMA1000Series/EClassSRAConnections
TocreateandsaveanewconnectiontoaSonicWallSMA1000Series/EClassSRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(SMA1000Series/EClassSRA
appliance).
4 ClickNext.MobileConnectattemptstocontacttheSonicWallappliance.
IfMobileConnectcontactstheappliancesuccessfully,theserverconnectionisaddedtothelistof
saved connections.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
11
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verify
thattheserveraddressorURLisspelledcorrectly,andthenclickSave.
ClickingSaveaddstheserverconnectiontothelistofsavedconnections.
ConnectingtotheMobileConnectServer
ToestablishaMobileConnectsession:
1IntheConnectionlist,selecttheconnectionthatyouwanttoinitiate.
2 ClickConnect.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
12
3TypeyourcredentialsintotheUsernameandPasswordfields,ifprompted(dependingonwhetherthe
applianceyouareconnectingtoallowsforsavingusernamesandpasswords),andthen clickLogin.
4Whentheconnectionissuccessfullyestablished,theStatusrowchangestoConnectedandtheConnect
buttonchangestoDisconnect.
5Afterconnecting,
youcanaccessyourIntranetnetworkwithotherapps.TheMobileConnectmenubar
iconindicatestheconnectedstate.
ThenativeMacsystemVPNStatusinthemenubarcanalsobedisplayedfromtheSystemPreferences
appunderNetwork.TheVPNStatusiconchangestotheconnectedstate,and
theconnectiontimecan
beshown.
IftheVPNconnectionisinterrupted,themenubariconschangetoindicatethatyouarenolonger
connectedorthatMobileConnectisreconnectingtheVPN,andyouarenolongerabletoaccessthe
Intranetnetwork.Thiscanhappenifyourdeviceconnection
transitionsfromoneWiFinetworkto
anotherWiFinetworkortoanothernetworktype.
IftheVPNdisconnects,returntoSonicWallMobileConnecttoreestablishtheconnection.Optionally,
youcanenabletheAutomaticReconnectoptionintheMobileConnectappPreferencestohaveMobile
Connectautomaticallyattempttoreestablishinterruptedconnections.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
13
ConfiguringClientCertificates
ClientcertificatesupportisonlyavailableforconnectionstoSMA1000Series/EClassSRAappliancesandSMA
100Series/SRAappliances.
Top ics:
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliancesonpage13
ConfiguringClientCertificateswithSMA100Series/SRAApplianceson
page14
ConfiguringClientCertificateswithSMA1000Series/
EClassSRAAppliances
Ifaclientcertificate isrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininmacOS.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA1000Series/EClassSRAappliance.Youarepromptedtochoosethe
certificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthenclickContinue.
Ifyousuccessfullyauthenticatewithaclientcertificate,theVPNconnectionprofileisautomaticallyupdatedto
usethe
clientcertificateforeachsubsequentconnectionattempt.
Toresettheclientcertificateselectionwhendisconnected:
1IntheConnectionslist,selecttheconnectionandclicktheEditicontoeditit.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
14
2 ClicktheForgetSelectionsbutton.
ConfiguringClientCertificateswithSMA100Series/
SRAAppliances
Ifaclientcertificate isrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininmacOS.Singlefactorclientcertificateauthenticationissupported
forconnectionstoSonicWallSMA100SeriesandSRAappliances.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA100Series/SRAappliance.Youarepromptedtochoosethecertificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthenclickContinue.
Bydefault,theclientcertificateissettoChooseduringloginforaVPNconnection.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.ClicktheMyCertificatescategorytoeasilyseeavailableclientcertificates.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
15
Tomodifytheclientcertificatesettingwhendisconnected:
1IntheConnectionslist,selecttheconnectionandclicktheEditicontoeditit.
2IntheCertificatefield,selecttheappropriateclientcertificateoptionandthenclickSave.
EnablingConnectonDemand
TheConnectonDemandfeatureprovidedbyMobileConnectprovidestheabilitytoautomaticallyestablisha
VPNconnectionwhenyouattempttoaccessadomainontheprivatenetwork.TosupportConnectonDemand,
aVPNconnectionshouldnotrequestanyuserinteraction.ThisprovidesaseamlessVPNconnectivity
experiencewithout
theneedtomanuallylaunchMobileConnect.
Seethefollowing:
EnablingConnec t onDemandwithSMA1000Seriesonpage15
EnablingConnec t onDemandtoSMA100Series/SRAonpage16
EnablingConnectonDemandwithSMA1000Series
AVPNconfigurationontheSMA1000Series/EClassSRAappliancemustmeetthefollowingrequirementsto
supportConnectonDemand:
TheVPNtunnelmustnotbeconfiguredforRedirectAllmode.
Therealmmustbeconfiguredtouseclientcertificatesforauthentication.Chainedauthentication
(whereasecondauthentication
serverisused)doesnotsupportConnectonDemand.
Thevalidclientcertificatefortherealmmustbepresent.
Theusermustsuccessfullyconnecttotheapplianceatleastonce.
NOTE:ConnectonDemandisonlyavailableforconnectionstoSMA1000Series/EClassSRAandSMA
100Series/SRAappliances.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
16
Theremustbenouserinteractionrequiredfortheusertoconnect.
IftheMobileConnectappisnotrunninganduserinteractionisrequiredfortheVPNconnectionattempt
tosucceed,ConnectonDemandmightfailtoconnect.Scenarioswhereuserinteractionmightbe
requiredincludethefollowing:
User
authenticationbyenteringausernameandpasswordisrequired.
Twofactorauthenticationisenabled,requiringaonetimepasswordortoken.
TheVPNserver'sSSLcertificateisuntrusted,requiringacceptanceofanSSLcertificatewarning.
PersonalDeviceAuthorizationisenabledontheserverandthedevicehasnotbeenauthorized,
requiring
acceptanceofapersonaldeviceauthorizationpolicy.
ToenableConnectonDemandtoanSMA1000Series/EClassSRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4 ClickApply.
EnablingConnectonDemandtoSMA100Series/SRA
TosupportConnectonDemand,aVPNconfigurationontheSMA100Series/SRAappliancemustmeetthe
followingrequirements:
Theuser ’seffectiveclientcertificateenforcementpolicy,configuredatthedomainoruserlevel,mustbe
enabledtouseclientcertificatesforauthentication.
Theuserseffectiveusernameandpassword
cachingpolic y,configuredattheglobal,group,oruser
level,mustbesettoAllowsavingofusernameandpassword,ortheuser'sdomainmustbeaDigital
Certificatedomain.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
17
ThevalidclientcertificatefortheusermustbepresentontheMac.
TheVPNconnectionprofilemusthavetheusernameandpasswordconfigured,andtheappropriate
clientcertificatemustbeselected.
ToenableConnectonDemandtoanSMA100Series/SRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4 ClickApply.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.ClicktheMyCertificatescategorytoviewavailableclientcertificates.
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
3
18
PreferencesandURLControl
ThissectiondescribestheconfigurableelementsthatareaccessedfromthePreferencesscreeninMobile
Connect,includingconnectionsettingsandURLcontrol.
Top ics:
PreferencesOverviewonpage18
AdditionalSMA1000Series/EClassSRAOptionsonpage19
URLControlSyntaxandParametersonpage20
PreferencesOverview
SonicWallMobileConnectallowsyoutosetseveralpreferencesforconnectionandloggingoptions.The
PreferencesscreenisavailableundertheSonicWallMobileConnectmenu.
SonicWallMobileConnectmenu
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
19
ClickingPreferencesdisplaystheconfigurablesettings.
Preferencessettings
ThefollowingoptionsarecontrolledfromthePreferencesscreen:
ConnectonLaunchSetsMobileConnecttoautomaticallyinitiateaconnectiontothelastusedprofile
whentheapplicationislaunched.
•AutomaticReconnectSetsMobileConnecttoautomaticallyattempttoreconnectiftheconnection
is
lost.TheSSLVPNconnectioncanbedisruptedwhenyourdevice’sconnectiontransitionstoadifferent
networktype(forexample,fromWiFitoEthernet).ThissettingletsapplicationsrelyonasustainedVPN
connection.Thereisnolimitontheamountoftimeittakestoreconnect.
•URLControl
AllowsothermobileapplicationstopassactionrequestsusingspecialURLstoMobile
Connect.TheseactionrequestscancreateVPNconnectionentriesandconnectordisconnectVPN
connections.Forexample,anotherapplicationcanlaunchMobileConnect,accessinternalresourcesas
needed,andthen disconnectbyusingthemobileconnect://orsonicwallmobileconnect://
URLscheme.
AdditionalinformationaboutURLControlisprovidedinURLControlSyntaxandParametersonpage20.
•TouchIDSetMobileConnecttopromptforTouchIDduringusername/passwordauthentication.
RequiresconnectiontoserversthathaveaconfiguredTouchIDpolicy.
DebugLoggingEnablesfulldebuglogmessages
ofMobileConnectactivity.Leavethissectiondisabled
unlessinstructedtoenableitbySonicWallSupportstaff.
AdditionalSMA1000Series/EClassSRA
Options
TwoadditionaloptionscanbemodifiedforconnectionstoSonicWallSMA1000Series/EClassSRAappliances.
Toviewtheseoptions:
1NavigatetotheConnectionscreen.
2 SelectanSMA1000Series/EClassSRAconnectionfromtheConnectionslist.
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
20
3 ClicktheEditiconnexttotheselectedconnection.
TheEditConnectionscreendisplays.
Thefollowingoptionscanbeconfigured:
RememberCredentialsEnablessavingofuserauthenticationcredentialsfortheVPN
connection.ThisisdisabledbydefaultandcanbecontrolledbytheSonicWallSMA1000Series/
EClassSRA
serverconfiguration.
•ForgetSelectionsMobileConnectrememberstheLogin Groupthatyouspecifiedwhen
configuringtheconnection.TochangetoadifferentLoginGroup,clickForgetSelections.Thenext
timeyouconnecttotheserver,youarepromptedtoselectanewLoginGroup.
URLControlSyntaxandParameters
ThissectionprovidesthefullsetofURLparametersfortheURLControlfeature.URLControlcurrentlysupports
theaddprofile,connect,anddisconnectcommands.CallbackURLsarealsosupported.
Top ics:
UsingtheaddprofileCommandonpage20
UsingtheconnectCommandonpage21
UsingthedisconnectCommandonpage
22
UsingthecallbackurlCommandParameteronpage23
UsingtheaddprofileCommand
Theaddprofilecommandrequireseitherthenameorserverparameter,andaccommodatesboth.Allother
parametersareoptional.WhentheURLisopenedinMobileConnect,alloftheparametersincludedintheURL
aresavedintheconnectionentryassociatedwiththatnameandserver.
NOTE:Iftheseoptionsarenotdisplayed,thenyouareconnectingtoeitheraSonicWallfirewallor
SMA100Seri es/SRAappliance.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29

SonicWALL Mobile Connect User guide

Type
User guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI