SonicWALL Mobile Connect User guide

  • Hello! I am an AI chatbot trained to assist you with the SonicWALL Mobile Connect User guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
SonicWall™MobileConnectfor
macOS5.0
UserGuide
SonicWallMobileConnectformacOS5.0UserGuide
Contents
1
2
IntroductiontoMobileConnect..................... . ..................................3
HowMobileConnectWorks ............... .......................
....................... 3
NewFeaturesinMobileConnect5.0......... .. ..........
................................. 4
SupportedPlatforms ...............
....................................... ............. 4
AppleProductSupport............... ......................... .....
............... . 5
SonicWallApplianceSupport............. ..................
......................... 5
RequiredNetworkInformation......................
................................. 5
InstallingandConnecting ..............
...............................................7
InstallingMobileConnect .
.............................................................. 7
CreatingandSavingConnections ................................. ..
...................... 8
CreatingFirewallorSMA100Series/SRAConnections............... ....
...............8
CreatingSMA1000Series/EClassSRAConnections..........................
.......... 10
ConnectingtotheMobileConnect Server..................................
.............. 11
ConfiguringClientCertificates.................................
.........................13
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliances.............
..13
ConfiguringClientCertificateswithSMA100Series/SRAAppliances ......................14
EnablingConnec t onDemand... ........
............... ......................... .......15
EnablingConnecton
DemandwithSMA1000Series.......................... ..........15
EnablingConnectonDemandtoSMA100Series/
SRA..................................16
PreferencesandURLControl...........
..............................................18
PreferencesOverview ...
............... ............................................... 18
AdditionalSMA1000Series/EClassSRAOptions............................. .
............ 19
URLControlSyntaxandParameters.................................
....................20
UsingtheaddprofileCommand. .........................
...........................20
UsingtheconnectCommand................ ...
.................................... 21
UsingthedisconnectCommand ..........
....................................... ....22
UsingthecallbackurlCommandParameter..
.......................................... 23
Monitoring,Logs,andTroubleshooting....
.............................................25
MonitoringMobileConnect ...
....................................... ..................25
UsingMobileConnectHelpandLogOptions............... .....................
.......... 26
TroubleshootingMobileConnect .....................................
............... .... 27
SonicWallSupport ........................ . ....
.....................................28
AboutThisDocument...........
............... .......................................29
Contents
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
1
3
IntroductiontoMobileConnect
SonicWall™MobileConnectformacOSisanappforMacsrunningMacOSXElCapitan(10.11)ornewer
versions,includingmacOSHighSierra(10.13),thatenablessecure,mobileconnectionstopriv atenetworks
protectedbySonicWallsecurityappliances.
Top ics:
HowMobileConnectWorksonpage3
NewFeaturesinMobileConnect
5.0onpage4
SupportedPlatforms onpage4
HowMobileConnectWorks
Modernbusinesspracticesincreasinglyrequirethatusersbeabletoaccessanynetworkresource(files,internal
websites,etc.),anytime,anywhere.Atthesametime,ensuringthesecurityoftheseresourcesisaconstant
struggle.Whi lemostusersareawarethattheymusttakecaretoprotectcomputersfromnetworksecurityrisks,
thissecurityawarenessdoesnotalwaysextendtoMacdevicesliketheMacBookAirandMacBookPro.Andyet,
Macsareincreasinglysubjecttosecurityattacks.Furthermore,remoteMacuserscanoftenuseinsecure,
untrusted,publicWiFihotspotstoconnecttotheInternet.Itisthereforeachallengetoprovide
secure,mobile
accesswhilestillguardingagainstthein herentsecurityrisksfacedbymobileusers.
TheSonicWallMobileConnectformacOSappprovidessecure,mobileaccesstosensitivenetworkresources.
MobileConnectestablishesaSecureSocketLayerVirtualPrivateNetwork(SSLVPN)connectiontoprivate
networksthatareprotectedbySonicWall
securityappliances.Alltraffictoandfromtheprivatenetworkis
securelytransmittedovertheSSLVPNtunnel.
TogetstartedwithSonicWallMobileConnect:
1InstallSonicWallMobileConnectfromtheMacAppStore.
2EnsurethattheFirewallorSMA100Series/SRAappliancebeingusedbyMobileConnectisconnected
tothenetwork.
3Configurenetworkinformation(servername,username,password,andsoon).
4Initiateaconnectiontothenetwork.
5MobileConnectestablishesaSSLVPNtunnel
totheSonicWallsecurityappliance.
Youcannowaccessresourcesontheprivatenetwork.Alltraffictoandfromtheprivatenetworkissecurely
transmittedovertheSSLVPNtunnel.
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
4
NewFeaturesinMobileConnect5.0
Thefollowingenhancementsar eincludedintheMobileConnect5.0release.
•macOSHighSierraCompatibilityMobileConnectisfullyoptimizedforthelatestreleaseofmacOS
HighSierra.
•NetworkExtensionSupportMobileConnectnowleverag esApple'scurrentVPNframework,called
NetworkExtension,toallowformorereliableVPNconnectivityon
macOSdevices.Afterupgradingtothe
5.0version,MobileConnectmayneedtobereprovisioned,includingupdatingVPNconnection
configurationsandcertificates(ifapplicable).
•TouchBarSupportOnsupportedMacBookPros,theTouchBaratthetopoftheMackeyboardadapts
towhatyou'redoingand givesyou
intuitiveshortcutsandappcontrolswhenyouneedthem.Mobile
ConnectnowsupportsTouchBarforallsupportedMacdevices.
•TouchIDSupportTouchIDmaybeusedasaseamlessalternativetousernameandpassword
authenticationifallowedbytheVPNserver.RequirescompatibleserverwithconfiguredTouchID
policy,
aswellasaMacwithaconfiguredTouchIDsensor.
•GlobalHASupportMobileConnectcontainsupdatesfortheglobalhighavailabilityanddisaster
recoverycapabilitiesforVPNconnectionstoSMA1000Seriesserversrunning12.1ornewerfirmware.
SupportedPlatforms
ThefollowingsectionsdescribethesupportedplatformsandnetworkinformationforMobileConnect:
AppleProductSupportonpage5
SonicWallApplianceSupportonpage5
RequiredNetworkInformationonpage5
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
5
AppleProductSupport
SonicWallMobileConnectformacOSissupportedonallMacmodelsrunningMacOSXElCapitan(10.11)or
newer,includingmacOSHighSierra(10.13),availableasafreeupgrade.Seethefollowingwebsitefor
informationonhowtoupgradetomacOSHighSierra:http://www.apple.com/macos/howtoupgrade/.
ThefollowingMac
modelsarecompatiblewithmacOSHighSierra:
MacBook(Late2009ornewer)
MacBookPro(Mid2010ornewer)
MacBookAir(Late2010ornewer)
Macmini(Mid2010ornewer)
iMac(Late2009ornewer)
MacPro(Mid2010ornewer)
SonicWallApplianceSupport
SonicWallMobileConnectisafreeapp,butrequiresaconcurrentuserlicenseononeofthefollowingSonicWall
solutionsinordertofunctionproperly.
SonicWallfirewallappliancesincludingtheTZ,NSA,EClassNSA,andSuperMassive9000Seriesrunning
SonicOS5.8.1.0orhigher
SonicWallSecureMobileAccess100Series/
SRAappliancesrunning7.5orhigher
SonicWallSecureMobileAccess1000Series/EClassSRAapp liancesrunning10.7orhigher
Re quiredNetworkInformation
TouseMobileConnect,youneedthefollowinginformationfromyournetworkadministratororITSupport:
•ServernameoraddressThisiseithertheIPaddressorURLoftheSSLVPNservertowhichyouare
connecting.TheSSLVPNservercanbeanysupportedSonicWallappliance.SeeSonicWall
Appliance
Supportonpage5.
Usern ameandpasswordTypically ,youarerequiredtoenteryourusernameandpassword,although
someconnectionsmightnotrequirethis.
•DomainnameThedomainnameoftheSSLVPNserver.MobileConnectmightbeabletoautomatically
determinethiswhenitfirstcontactsthe
server,ortherecouldbemultipledomainsthatcanbeselected.
DNSDomainSettingsonAppliances
BeforeMobileConnectusersareabletoaccesstheprivatenetwork,thenetworkadministratormustconfigure
theDNSDomainontheSonicWallappliance.WhentheMobileConnectuseraccessesaURLontheprivate
network,theconfiguredDNSdomainisusedtoresolvethehostnamelookup.Forpublicdomainsthatdo
not
matchtheconfiguredDNSdomain,theDNSserverfortheWiFi,Ethernet,orcellularnetworkisused.
NOTE:TheMobileConnectuserdoesnotneedtoperformanyconfigurationtasksrelatedtoDNS.The
followinginformationisforSonicWallnetworkadministr ators.
SonicWallMobileConnectformacOS5.0UserGuide
IntroductiontoMobileConnect
6
TheDNSDomainconfigurationprocessvaries,dependingonthetypeofSonicWallappliancebeingused:
•SonicWallfirewallappliances‐OntheSSLVPN>ClientSettingspage,entertheDNSdomainnameinthe
DNSDomainfield.
•SonicWallSMA100Series/SRAappliances‐TheDNSdomaincanbeconfiguredeitherglobally,at
the
grouplevel,orattheindividualuserlevel:
•GloballevelOntheNetwork>DNSpage,entertheDNSdomainnameintheDNSDomainfield.
•GrouplevelOntheUsers>LocalGroupspage,clicktheediticonforthegroup.ClickontheNX
Settingstab
andentertheDNSdomaintheDNSDomainfield.
•UserlevelOntheUsers>LocalUserspage,clicktheediticonfortheuser.ClickontheNX
SettingstabandentertheDNSdomaintheDNSDomainfield.
•SonicWallSMA1000Series/EClassSRAappliances‐TheDNS
domaincanbeconfiguredeitherglobally
orforspecificIPaddresspools:
•GloballevelFromthemainnavigationmenuintheApplianceManagementConsole(AMC),
clickNetworkSettings.IntheNameresolutionarea,clickEdit.TheConfigureNameResolution
pageappears.EntertheDNSdomainnameintheSearch
domainsfield.
•IPaddresspoollevelFromthemainnavigationmenuintheAMC,clickServices.UnderAccess
services,intheNetworktunnelservicearea,clickConfigure.TheConfigureNetworkTunnel
Servicepageappears.ClickthenameoftheIPaddresspoolyouwanttoedit.TheConfigureIP
AddressPoolpageappears.TotherightoftheAdvancedheading,clickthearrowicon.
SelectCustomizedefaultsettingsandentertheDNSdomainnameintheSearchdomainsfield.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
2
7
InstallingandConnecting
ThissectiondescribeshowtoinstallMobileConnectonyourdeviceandhowtoconfigureandinitiateaVPN
connectionusingMobileConnect.
Top ics:
InstallingMobileConnectonpage7
CreatingandSavingConnectionsonpage8
ConnectingtotheMobileConnectServeronpage11
ConfiguringClientCertificatesonpage
13
EnablingConnec t onDemandonpage15
InstallingMobileConnect
SonicWallMobileConnectisinstalled throughtheMacAppStore.
TodownloadandinstalltheMobileConnectapp:
1OnyourMac,clickontheAppStoreicon.
2IntheSearch field,typeSonicWall Mobile Connect,andpressReturn.
3Inthesearchresults,selectSonicWallMobileConnect.
4 ClickFreeandthenInstall.TheappinstallsonyourMac.Wheninstallationiscomplete,theSonicWall
MobileConnecticonappearsinyourApplications
folderandinLaunchpad.
NOTE:IfyouencounteranerrorwhenattemptingtodownloadSonicWallMobi leConnect,seetheMac
AppStoreSupportwebsite,whereyoucanfindtroubleshootingproceduresandinstructionsonhowto
reporttheissuetoAppleSupportifnecessary:http://www.apple.com/support/mac/appstore/
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
8
CreatingandSavingConnections
TheprocessofcreatingaMobileConnectconnectionisslightlydifferentdependingonthetypeofSonicWall
appliancetowhichyouareconnecting.
CreatingFirewallorSMA100Series/SRAConnectionsonpage8
CreatingSMA1000Series/EClassSRAConnectionsonpage10
CreatingFirewallorSMA100Series/SRAConnections
TocreateandsaveanewconnectiontoaSonicWallnetworksecurityappliance,SMA100Series,or
SRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(firewallorSMA100Series/SRA
appliance).
4 ClickNext.MobileConnectattemptstocontacttheSonicWallappliance.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
9
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verifythatthe
serveraddressorURLisspelledcorrectly,andthenclickSave.
5IfMobileConnectsuccessfullycontactstheser ver,youarepromptedtoenteryourusernameand
password,unlesstheserverdoesnot
requirethisinformation.TypeyourcredentialsintotheUsername
andPasswordfields.
6TheDomainfieldisautopopulatedwiththedefaultdomainfromtheserver.Toselectadifferent
domain,clickDomaintodisplayadropdownmenuoftheavailableoptionsandthenselectthecorrect
domain.
7 ClickSaveto
createthenewconnection.
NOTE:Ifthepreviousscreenshotdoesnotmatchwhatisdisplayedonyourdevice,youare
connectingtoaSonicWallSMA1000SeriesorEClassSRAappliance.SeeCreatingSMA1000Series
/EClassSRAConnectionsonpage10.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
10
CreatingSMA1000Series/EClassSRAConnections
TocreateandsaveanewconnectiontoaSonicWallSMA1000Series/EClassSRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(SMA1000Series/EClassSRA
appliance).
4 ClickNext.MobileConnectattemptstocontacttheSonicWallappliance.
IfMobileConnectcontactstheappliancesuccessfully,theserverconnectionisaddedtothelistof
saved connections.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
11
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verify
thattheserveraddressorURLisspelledcorrectly,andthenclickSave.
ClickingSaveaddstheserverconnectiontothelistofsavedconnections.
ConnectingtotheMobileConnectServer
ToestablishaMobileConnectsession:
1IntheConnectionlist,selecttheconnectionthatyouwanttoinitiate.
2 ClickConnect.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
12
3TypeyourcredentialsintotheUsernameandPasswordfields,ifprompted(dependingonwhetherthe
applianceyouareconnectingtoallowsforsavingusernamesandpasswords),andthen clickLogin.
4Whentheconnectionissuccessfullyestablished,theStatusrowchangestoConnectedandtheConnect
buttonchangestoDisconnect.
5Afterconnecting,
youcanaccessyourIntranetnetworkwithotherapps.TheMobileConnectmenubar
iconindicatestheconnectedstate.
ThenativeMacsystemVPNStatusinthemenubarcanalsobedisplayedfromtheSystemPreferences
appunderNetwork.TheVPNStatusiconchangestotheconnectedstate,and
theconnectiontimecan
beshown.
IftheVPNconnectionisinterrupted,themenubariconschangetoindicatethatyouarenolonger
connectedorthatMobileConnectisreconnectingtheVPN,andyouarenolongerabletoaccessthe
Intranetnetwork.Thiscanhappenifyourdeviceconnection
transitionsfromoneWiFinetworkto
anotherWiFinetworkortoanothernetworktype.
IftheVPNdisconnects,returntoSonicWallMobileConnecttoreestablishtheconnection.Optionally,
youcanenabletheAutomaticReconnectoptionintheMobileConnectappPreferencestohaveMobile
Connectautomaticallyattempttoreestablishinterruptedconnections.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
13
ConfiguringClientCertificates
ClientcertificatesupportisonlyavailableforconnectionstoSMA1000Series/EClassSRAappliancesandSMA
100Series/SRAappliances.
Top ics:
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliancesonpage13
ConfiguringClientCertificateswithSMA100Series/SRAApplianceson
page14
ConfiguringClientCertificateswithSMA1000Series/
EClassSRAAppliances
Ifaclientcertificate isrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininmacOS.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA1000Series/EClassSRAappliance.Youarepromptedtochoosethe
certificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthenclickContinue.
Ifyousuccessfullyauthenticatewithaclientcertificate,theVPNconnectionprofileisautomaticallyupdatedto
usethe
clientcertificateforeachsubsequentconnectionattempt.
Toresettheclientcertificateselectionwhendisconnected:
1IntheConnectionslist,selecttheconnectionandclicktheEditicontoeditit.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
14
2 ClicktheForgetSelectionsbutton.
ConfiguringClientCertificateswithSMA100Series/
SRAAppliances
Ifaclientcertificate isrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininmacOS.Singlefactorclientcertificateauthenticationissupported
forconnectionstoSonicWallSMA100SeriesandSRAappliances.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA100Series/SRAappliance.Youarepromptedtochoosethecertificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthenclickContinue.
Bydefault,theclientcertificateissettoChooseduringloginforaVPNconnection.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.ClicktheMyCertificatescategorytoeasilyseeavailableclientcertificates.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
15
Tomodifytheclientcertificatesettingwhendisconnected:
1IntheConnectionslist,selecttheconnectionandclicktheEditicontoeditit.
2IntheCertificatefield,selecttheappropriateclientcertificateoptionandthenclickSave.
EnablingConnectonDemand
TheConnectonDemandfeatureprovidedbyMobileConnectprovidestheabilitytoautomaticallyestablisha
VPNconnectionwhenyouattempttoaccessadomainontheprivatenetwork.TosupportConnectonDemand,
aVPNconnectionshouldnotrequestanyuserinteraction.ThisprovidesaseamlessVPNconnectivity
experiencewithout
theneedtomanuallylaunchMobileConnect.
Seethefollowing:
EnablingConnec t onDemandwithSMA1000Seriesonpage15
EnablingConnec t onDemandtoSMA100Series/SRAonpage16
EnablingConnectonDemandwithSMA1000Series
AVPNconfigurationontheSMA1000Series/EClassSRAappliancemustmeetthefollowingrequirementsto
supportConnectonDemand:
TheVPNtunnelmustnotbeconfiguredforRedirectAllmode.
Therealmmustbeconfiguredtouseclientcertificatesforauthentication.Chainedauthentication
(whereasecondauthentication
serverisused)doesnotsupportConnectonDemand.
Thevalidclientcertificatefortherealmmustbepresent.
Theusermustsuccessfullyconnecttotheapplianceatleastonce.
NOTE:ConnectonDemandisonlyavailableforconnectionstoSMA1000Series/EClassSRAandSMA
100Series/SRAappliances.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
16
Theremustbenouserinteractionrequiredfortheusertoconnect.
IftheMobileConnectappisnotrunninganduserinteractionisrequiredfortheVPNconnectionattempt
tosucceed,ConnectonDemandmightfailtoconnect.Scenarioswhereuserinteractionmightbe
requiredincludethefollowing:
User
authenticationbyenteringausernameandpasswordisrequired.
Twofactorauthenticationisenabled,requiringaonetimepasswordortoken.
TheVPNserver'sSSLcertificateisuntrusted,requiringacceptanceofanSSLcertificatewarning.
PersonalDeviceAuthorizationisenabledontheserverandthedevicehasnotbeenauthorized,
requiring
acceptanceofapersonaldeviceauthorizationpolicy.
ToenableConnectonDemandtoanSMA1000Series/EClassSRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4 ClickApply.
EnablingConnectonDemandtoSMA100Series/SRA
TosupportConnectonDemand,aVPNconfigurationontheSMA100Series/SRAappliancemustmeetthe
followingrequirements:
Theuser ’seffectiveclientcertificateenforcementpolicy,configuredatthedomainoruserlevel,mustbe
enabledtouseclientcertificatesforauthentication.
Theuserseffectiveusernameandpassword
cachingpolic y,configuredattheglobal,group,oruser
level,mustbesettoAllowsavingofusernameandpassword,ortheuser'sdomainmustbeaDigital
Certificatedomain.
SonicWallMobileConnectformacOS5.0UserGuide
InstallingandConnecting
17
ThevalidclientcertificatefortheusermustbepresentontheMac.
TheVPNconnectionprofilemusthavetheusernameandpasswordconfigured,andtheappropriate
clientcertificatemustbeselected.
ToenableConnectonDemandtoanSMA100Series/SRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4 ClickApply.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.ClicktheMyCertificatescategorytoviewavailableclientcertificates.
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
3
18
PreferencesandURLControl
ThissectiondescribestheconfigurableelementsthatareaccessedfromthePreferencesscreeninMobile
Connect,includingconnectionsettingsandURLcontrol.
Top ics:
PreferencesOverviewonpage18
AdditionalSMA1000Series/EClassSRAOptionsonpage19
URLControlSyntaxandParametersonpage20
PreferencesOverview
SonicWallMobileConnectallowsyoutosetseveralpreferencesforconnectionandloggingoptions.The
PreferencesscreenisavailableundertheSonicWallMobileConnectmenu.
SonicWallMobileConnectmenu
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
19
ClickingPreferencesdisplaystheconfigurablesettings.
Preferencessettings
ThefollowingoptionsarecontrolledfromthePreferencesscreen:
ConnectonLaunchSetsMobileConnecttoautomaticallyinitiateaconnectiontothelastusedprofile
whentheapplicationislaunched.
•AutomaticReconnectSetsMobileConnecttoautomaticallyattempttoreconnectiftheconnection
is
lost.TheSSLVPNconnectioncanbedisruptedwhenyourdevice’sconnectiontransitionstoadifferent
networktype(forexample,fromWiFitoEthernet).ThissettingletsapplicationsrelyonasustainedVPN
connection.Thereisnolimitontheamountoftimeittakestoreconnect.
•URLControl
AllowsothermobileapplicationstopassactionrequestsusingspecialURLstoMobile
Connect.TheseactionrequestscancreateVPNconnectionentriesandconnectordisconnectVPN
connections.Forexample,anotherapplicationcanlaunchMobileConnect,accessinternalresourcesas
needed,andthen disconnectbyusingthemobileconnect://orsonicwallmobileconnect://
URLscheme.
AdditionalinformationaboutURLControlisprovidedinURLControlSyntaxandParametersonpage20.
•TouchIDSetMobileConnecttopromptforTouchIDduringusername/passwordauthentication.
RequiresconnectiontoserversthathaveaconfiguredTouchIDpolicy.
DebugLoggingEnablesfulldebuglogmessages
ofMobileConnectactivity.Leavethissectiondisabled
unlessinstructedtoenableitbySonicWallSupportstaff.
AdditionalSMA1000Series/EClassSRA
Options
TwoadditionaloptionscanbemodifiedforconnectionstoSonicWallSMA1000Series/EClassSRAappliances.
Toviewtheseoptions:
1NavigatetotheConnectionscreen.
2 SelectanSMA1000Series/EClassSRAconnectionfromtheConnectionslist.
SonicWallMobileConnectformacOS5.0UserGuide
PreferencesandURLControl
20
3 ClicktheEditiconnexttotheselectedconnection.
TheEditConnectionscreendisplays.
Thefollowingoptionscanbeconfigured:
RememberCredentialsEnablessavingofuserauthenticationcredentialsfortheVPN
connection.ThisisdisabledbydefaultandcanbecontrolledbytheSonicWallSMA1000Series/
EClassSRA
serverconfiguration.
•ForgetSelectionsMobileConnectrememberstheLogin Groupthatyouspecifiedwhen
configuringtheconnection.TochangetoadifferentLoginGroup,clickForgetSelections.Thenext
timeyouconnecttotheserver,youarepromptedtoselectanewLoginGroup.
URLControlSyntaxandParameters
ThissectionprovidesthefullsetofURLparametersfortheURLControlfeature.URLControlcurrentlysupports
theaddprofile,connect,anddisconnectcommands.CallbackURLsarealsosupported.
Top ics:
UsingtheaddprofileCommandonpage20
UsingtheconnectCommandonpage21
UsingthedisconnectCommandonpage
22
UsingthecallbackurlCommandParameteronpage23
UsingtheaddprofileCommand
Theaddprofilecommandrequireseitherthenameorserverparameter,andaccommodatesboth.Allother
parametersareoptional.WhentheURLisopenedinMobileConnect,alloftheparametersincludedintheURL
aresavedintheconnectionentryassociatedwiththatnameandserver.
NOTE:Iftheseoptionsarenotdisplayed,thenyouareconnectingtoeitheraSonicWallfirewallor
SMA100Seri es/SRAappliance.
/