SonicWALL Mobile Connect User guide

  • Hello! I am an AI chatbot trained to assist you with the SonicWALL Mobile Connect User guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
SonicWall™MobileConnectfor
OSX4.0
UserGuide
Copyright©2017SonicWallInc.Allrightsreserved.
SonicWallisatrademarkorregisteredtrademar kofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allother
trademarksandregisteredtrademarksarepropertyoftheirrespectiveow ners
Theinformationinthisdo cumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates’products.Nolicense,expressor
implied,
byestoppelorotherwise,toanyintellectualproper tyrightisgrantedbythisdocumentorinconnectionwiththesaleofSonicWallproducts.
EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,SON ICWALLAND/OR
ITSAFFILIATESASSUMENOLIABILITYWHATSOEVERAND
DISCLA IMSANYEXPRESS,IMPLIEDORSTATU TORYWARRANT YRELATINGTOITS
PRODUCTSINCLUD ING ,BUTNOTLIMITEDTO,THEIMPLIEDWARR ANT YOFMERCHANTABILIT Y,FITNESSFORAPAR TI CU L A RPURP OSE,OR
NON‐INFRINGEMENT.INNOEVENTSHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,
PUNITIVE,SPECIALORINCIDENTALDAMAGES(INCLUDING,
WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESS
INTERRUPTIONORLOSSOFINFORMATION)ARISINGOU TOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/OR
ITSAFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWall and/oritsaffiliatesmakenorepresentationsor
warrantieswithrespectto
theaccuracyorcompletenessofthecontentsofthisdocumentandreservestherighttomakechangesto
specificationsandproductdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffiliatesdonotmakeanycommitmentto
updatetheinfo rmationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.
Mobile
ConnectUserGuide
Updated‐March2017
SoftwareVersion‐4.0
23200320601RevA
Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.
CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.
IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.
SonicWallMobile ConnectforOSX4.0UserGuide
Contents
1
3
IntroductiontoMobileConnect........................................................4
HowMobileConnectWorks ..................................... .
....................... 4
NewFeaturesinMobileConnect4.0......... .. ..........
................................. 5
SupportedPlatforms ...............
....................................... ............. 5
AppleProductSupport............... ......................... .....
............... . 5
SonicWallApplianceSupport............. ..................
......................... 5
RequiredNetworkInformation......... .............
................................. 5
InstallingandConnecting ..............
...............................................7
InstallingMobileConnect .
.............................................................. 7
CreatingandSavingConnections ...................................
...................... 8
CreatingFirewallorSMA100Series/SRAConnections............... ....
...............8
CreatingSMA1000Series/EClassSRAConnections.................... ......
.......... 10
ConnectingtotheMobileConnect Server..................................
.............. 11
ConfiguringClientCertificates.................................
.........................12
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliances.............
..13
ConfiguringClientCertificateswithSMA100Series/SRAAppliances ...................... 14
EnablingConnec t onDemand... ........
............... ......................... .......15
EnablingConnecton
DemandwithSMA1000Series.................................... 15
EnablingConnectonDemandtoSMA100Series/
SRA..................................16
PreferencesandURLControl...........
..............................................18
PreferencesOverview ...
............... ............................................... 18
AdditionalSMA1000Series/EClassSRAOptions..............................
............ 19
URLControlSyntaxandParameters.................................
....................20
UsingtheaddprofileCommand. .........................
...........................20
UsingtheconnectCommand................ ...
.................................... 21
UsingthedisconnectCommand ..........
....................................... ....22
UsingthecallbackurlCommandParameter..
.......................................... 23
Monitoring,Logs,andTroubleshooting....
.............................................25
MonitoringMobileConnect ...
....................................... ..................25
UsingMobileConnectHelpandLogOptions....................................
.......... 26
TroubleshootingMobileConnect... ......................... .........
............... .... 27
SonicWallSupport .............................
.....................................28
Contents
SonicWallMobile ConnectforOSX4.0UserGuide
IntroductiontoMobileConnect
1
4
IntroductiontoMobileConnect
SonicWall™MobileConnectforOSXisanappforAppleMacnotebooksanddesktopsrunningOSXMavericks
(10.9)ornewerversions,includingmacOSSierra(10.12),thatenablessecure,mobileconnectionstoprivate
networksprotectedbySonicWallsecurityappliances.
Top ics:
HowMobileConnectWorksonpage4
NewFeaturesin
MobileConnect4.0onpage5
SupportedPlatformsonpage5
HowMobileConnectWorks
Modernbusinesspracticesincreasinglyrequirethatusersbeabletoaccessanynetworkresource(files,internal
websites,etc.),anytime,anywhere.Atthesametime,ensuringthesecurityoftheseresourcesisaconstant
struggle.Whilemostusersareawarethattheymusttakecaretoprotectcomputersfromnetworksecurityrisks,
thissecurityawarenessdoesnotalwaysextendtoMacdevicesliketheMacBookAirandMacBookPro.Andyet,
Macsareincreasinglysubjecttosecurityattacks.Furthermore,remoteMacuserscanoftenuseinsecure,
untrusted,publicWiFihotspotstoconnecttotheInternet.Itisthereforeachallengetoprovide
secure,mobile
accesswhilestillguardingagainsttheinherentsecurityrisksfacedbymobileusers.
TheSonicWallMobileConnectforOSXappprovidessecure,mobileaccesstosensitivenetworkresources.
MobileConnectestablishesaSecureSocketLayerVirtualPrivateNetwork(SSLVPN)connectiontoprivate
networksthatareprotectedby
SonicWallsecurityappliances.Alltraffictoandfromtheprivatenetworkis
securelytransmittedovertheSSLVPNtunnel.
TogetstartedwithSonicWallMobileConnect:
1InstallSonicWallMobileConnectfromtheMacAppStore.
2EnsurethattheFirewallorSMA100Series/SRAappliancebeingusedbyMobileConnectisconnected
tothenetwork.
3Configurenetworkinformation(servername,username,password,andsoon).
4Initiateaconnectiontothenetwork.
5MobileConnectestablishesaSSLVPNtunnel
totheSonicWallsecurityappliance.
Youcannowaccessresourcesontheprivatenetwork.Alltraffictoandfromtheprivatenetworkissecurely
transmittedoverthe SSLVPNtunnel.
SonicWallMobile ConnectforOSX4.0UserGuide
IntroductiontoMobileConnect
5
NewFeaturesinMobileConnect4.0
Thefollowingenhancementsar eincludedintheMobileConnect4.0release.
ClientCertificateOnlyAuthenticationforSMA100Series/SRAconnections‐Singlefactorclient
certificateauthenticationissupportedforconnectionstoSonicWallSMA100SeriesandSRAappliances.
SupportedPlatforms
ThefollowingsectionsdescribethesupportedplatformsandnetworkinformationforMobileConnect:
AppleProductSupportonpage5
SonicWallApplianceSupportonpage5
RequiredNetworkInformationonpage5
AppleProductSupport
SonicWallMobileConnectforOSXissupportedonallMacmodelsrunningOSXMavericks(10.9)ornewer,
includingmacOSSierra(10.12),availableasafreeupgrade.Seethefollowingwebsiteforinformationonhowto
upgradetomacOSSierra:http://www.apple.com/macos/howtoupgrade/.
ThefollowingMacmodelsarecompatible
withmacOSSierra:
MacBook(Late2009ornewer)
MacBookPro(Mid2010ornewer)
MacBookAir(Late2010ornewer)
Macmini(Mid2010ornewer)
iMac(Late2009ornewer)
MacPro(Mid2010ornewer)
SonicWallApplianceSupport
SonicWallMobileConnectisafreeapp,butrequiresaconcurrentuserlicenseononeofthe followingSonicWall
solutionsinordertofunctionproperly.
SonicWallfirewallappliancesincludingtheTZ,NSA,EClassNSA,andSuperMassive9000Seriesrunning
SonicOS5.8.1.0orhigher
SonicWallSecureMobileAccess100Series/
SRAappliancesrunning7.5orhigher
SonicWallSecureMobileAccess1000Series/EClassSRAapp liancesrunning10.7orhigher
RequiredNetworkInformation
TouseMobileConnect,youneedthefollowinginformationfromyournetworkadministratororITSupport:
•ServernameoraddressThisiseithertheIPaddressorURLoftheSSLVPNservertowhichyouare
connecting.TheSSLVPNservercanbeanysupportedSonicWallappliance.SeeSonicWall
Appliance
Supportonpage5.
SonicWallMobile ConnectforOSX4.0UserGuide
IntroductiontoMobileConnect
6
UsernameandpasswordTypically ,youarerequiredtoenteryourusernameandpassword,although
someconnectionsmightnotrequirethis.
•DomainnameThedomainnameoftheSSLVPNserver.MobileConnectmightbeabletoautomatically
determinethiswhenitfirstcontactstheser ver,ortherecouldbe
multipledomainsthatcanbeselected.
DNSDomainSettingsonAppliances
BeforeMobileConnectusersareabletoaccesstheprivatenetwork,thenetworkadministratormustconfigure
theDNSDomainontheSonicWallappliance.WhentheMobileConnectuseraccessesaURLontheprivate
network,theconfiguredDNSdomainisusedtoresolvethehostnamelookup.Forpublicdomainsthatdo
not
matchtheconfiguredDNSdomain,the DNSserverfortheWiFiorcellularnetworkisused.
TheDNSDomainconfigurationprocessvaries,dependingonthetypeofSonicWallappliancebeingused:
•SonicWallfirewallappliances‐OntheSSLVPN>ClientSettingspage,entertheDNSdomainnameinthe
DNS
Domainfield.
•SonicWallSMA100Series/SRAappliances‐TheDNSdomaincanbeconfiguredeitherglobally,atthe
grouplevel,orattheindividualuserlevel:
•GloballevelOntheNetwork>DNSpage,entertheDNSdomainnameintheDNSDomainfield.
•GrouplevelOntheUsers
>LocalGroupspage,clicktheediticonforthegroup.ClickontheNX
SettingstabandentertheDNSdomaintheDNSDomainfield.
•UserlevelOntheUsers>LocalUserspage,clicktheediticonfortheuser.ClickontheNX
Settingstabandenter
theDNSdomaintheDNSDomainfield.
•SonicWallSMA1000Series/EClassSRAappliances‐TheDNSdomaincanbeconfiguredeitherglobally
orforspecificIPaddresspools:
•GloballevelFromthemainnavigationmenuintheApplianceManagementConsole(AMC),
clickNetworkSettings.IntheNameresolution
area,clickEdit.TheConfigureNameResolution
pageappears.EntertheDNSdomainnameintheSearchdomainsfield.
•IPaddresspoollevelFromthemainnavigationmenuintheAMC,clickServices.UnderAccess
services,intheNetworktunnelserv ice area,clickConfigure.TheConfigureNetworkTunnel
Servicepageappears.ClickthenameoftheIPaddresspoolyouwanttoedit.TheConfigureIP
AddressPoolpageappears.TotherightoftheAdvancedheading,clickthearrowicon.
SelectCustomizedefaultsettingsandentertheDNSdomainnameintheSearchdomainsfield.
NOTE:TheMobileConnectuserdoesnotneedtoperformanyconfigurationtasksrelatedtoDNS.The
followinginformationisforSon ic Wallnetworkadministr ators.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
2
7
InstallingandConnecting
ThissectiondescribeshowtoinstallMobileConnectonyourdeviceandhowtoconfigureandinitiateaVPN
connectionusingMobileConnect.
Top ics:
InstallingMobileConnectonpage7
CreatingandSavingConnectionsonpage8
ConnectingtotheMobileConnectServeronpage11
ConfiguringClientCertificatesonpage
12
EnablingConnec t onDemandonpage15
InstallingMobileConnect
SonicWallMobileConnectisinstalledthroughtheMacAppStore.
TodownloadandinstalltheMobileConnectapp:
1OnyourMac,taptheAppStoreicon.
2IntheSearchfield,typeSonicWall Mobile Connect,andtapEnter.
3Inthesearchresults,selectSonicWallMobileConnect.
4TapFreeandthenInstall.TheappinstallsonyourMac.Wheninstallationiscomplete,theSonicWall
MobileConnecticonappearsinyourAppli cationsfolder
andinLaunchpad.
NOTE:IfyouencounteranerrorwhenattemptingtodownloadSonicWallMobileConnect,seetheMac
AppStoreSupportwebsite,whereyoucanfindtroubleshootingproceduresandinstructionsonhowto
reporttheissuetoAppleSupportifnecessary:http://www.apple.com/support/mac/appstore/
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
8
CreatingandSavingConnections
TheprocessofcreatingaMobileConnectconnectionisslightlydifferentdependingonthetypeofSonicWall
appliancetowhichyouareconnecting.
CreatingFirewallorSMA100Series/SRAConnectionsonpage8
CreatingSMA1000Series/EClassSRAConnectionsonpage10
CreatingFirewallorSMA100Series/SRAConnections
TocreateandsaveanewconnectiontoaSonicWallnetworksecurityappliance,SMA100Series,or
SRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(firewallorSMA100Series/SRA
appliance).
4TapNext.MobileConnectattemptstocontacttheSonicWallappliance.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
9
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verifythatthe
serveraddressorURLisspelledcorrectly,andthentapSave.
5IfMobileConnectsuccessfullycontactstheser ver,youarepromptedtoenteryourusernameand
password,unlesstheserverdoesnot
requirethisinformation.TypeyourcredentialsintotheUsername
andPasswordfields.
6TheDomainfieldisautopopulatedwiththedefaultdomainfromtheserver.Toselectadifferent
domain,tapDomaintodisplayadropdownmenuoftheavailableoptionsandthenselectthecorrect
domain.
7TapSaveto
createthenewconnection.
NOTE:Ifthepreviousscreenshotdoesnotmatchwhatisdisplayedonyourdevice,youare
connectingtoaSonicWallSMA1000SeriesorEClassSRAappliance.SeeCreatingSMA1000Series
/EClassSRAConnectionsonpage10.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
10
CreatingSMA1000Series/EClassSRAConnections
TocreateandsaveanewconnectiontoaSonicWallSMA1000Series/EClassSRAappliance:
1ThefirsttimeyoulaunchMobileConnect,youmustaddaVPNconnectionbeforeyoucanconnect.
SelectAddconnectionfromtheConnectionlist.
2IntheNamefieldonthepopupdialog,typeinadescriptivenamefortheconnection.
3IntheServerfield,typeinthehostnameorIPaddressof
theserver(SMA1000Series/EClassSRA
appliance).
4TapNext.MobileConnectattemptstocontacttheSonicWallappliance.
IfMobileConnectcontactstheappliancesuccessfully,theserverconnectionisaddedtothelistof
savedconnections.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
11
Iftheattemptfails,awarningmessagedisplays,askingifyouwanttosavetheconnection.Verify
thattheserveraddressorURLisspelledcorrectly,andthentapSave.
TappingSaveaddstheserverconnectiontothelistofsavedconnections.
ConnectingtotheMobileConnectServer
ToestablishaMobileConnectsession:
1IntheConnectionlist,selecttheconnectionthatyouwanttoinitiate.
2TapConnect.
3TypeyourcredentialsintotheUsernameandPasswordfields,ifprompted(dependingonwhetherthe
applianceyouareconnectingtoallowsforsavingusernamesandpasswords),andthentapLogin.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
12
4Whentheconnectionissuccessfullyestablished,theStatusrowchangestoConnectedandtheConnect
buttonchangestoDisconnect.
5Afterconnecting,youcanaccessyourIntranetnetworkwithotherapps.TheMobi le Connectmenubar
iconindicatestheconnectedstate.
ThenativeMacsystemVPNStatusinthemenubarcan
alsobedisplayedfromtheSyst emPreferences
appunderNetwork.TheVPNStatusiconchangestotheconnectedstate,andtheconnectiontimecan
beshown.
IftheVPNconnectionisinterrupted,themenubariconschangetoindicatethatyouarenolonger
connectedorthatMobileConnectisreconnecting
theVPN,andyouarenolongerabletoaccessthe
Intranetnetwork.ThiscanhappenifyourdeviceconnectiontransitionsfromoneWiFinetworkto
anotherWiFinetworkortoanothernetworktype.
IftheVPNdisconnects,returntoSonicWallMobileConnecttoreestablishtheconnection.Optionally,
youcanenable
theAutomaticReconnectoptionintheMobileConnectappPreferencestohaveMobile
Connectautomaticallyattempttoreestablishinterruptedconnections.
ConfiguringClientCertificates
ClientcertificatesupportisonlyavailableforconnectionstoSMA1000Series/EClassSRAappliancesandSMA
100Series/SRAappliances.
Top ics:
ConfiguringClientCertificateswithSMA1000Series/EClassSRAAppliancesonpage13
ConfiguringClientCertificateswithSMA100Series/SRAApplianceson
page14
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
13
ConfiguringClientCertificateswithSMA1000Series/
EClassSRAAppliances
Ifaclientcertificateisrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininOSX.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA1000Series/EClassSRAappliance.Youarepromptedtochoosethe
certificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthentapContinue .
Ifyousuccessfullyauthenticatewithaclientcertificate,theVPNconnectionprofileisautomaticallyupdatedto
usethe
clientcertificateforeachsubsequentconnectionattempt.
Toresettheclientcertificateselectionwhendisconnected:
1IntheConnectionslist,selecttheconnectionandtaptheEditicontoeditit.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
14
2TaptheForgetSelectionsbutton.
ConfiguringClientCertificateswithSMA100Series/
SRAAppliances
Ifaclientcertificateisrequiredduringauthentication,youareautomaticallypromptedtoselectaclient
certificatethatispresentinyourkeychaininOSX.
ToconfiguretheclientcertificateonyourMac:
1InitiateaconnectiontotheSMA100Series/SRAapplian ce.Youarepromptedtochoosethecertificate.
2 SelecttheclientcertificatefromthelistofcertificatesandthentapContinue .
Bydefault,theclientcertificateissettoChooseduringloginforaVPNconnection.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.TaptheMyCertificatescategorytoeasilyseeavailableclientcertificates.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
15
Tomodifytheclientcertificatesettingwhendisconnected:
1IntheConnectionslist,selecttheconnectionandtaptheEditicontoeditit.
2IntheCertificatefield,selecttheappropriateclientcertificateoptionandthentapSave.
EnablingConnectonDemand
TheConnectonDemandfeatureprovidedbyMobileConnectprovidestheabil itytoautomaticallyestablisha
VPNconnectionwhenyouatt empttoaccessadomainontheprivatenetwork.TosupportConnectonDemand,
aVPNconnectionshouldnotrequestanyuserinteraction.ThisprovidesaseamlessVPNconnectivity
experiencewithout
theneedtomanuallylaunchMobileConnect.
Seethefollowing:
EnablingConnec t onDemandwithSMA1000Seriesonpage15
EnablingConnec t onDemandtoSMA100Series/SRAonpage16
EnablingConnectonDemandwithSMA1000Series
AVPNconfigurationontheSMA1000Series/EClassSRAappliancemustmeetthefollowingrequirementsto
supportConnectonDemand:
TheVPNtunnelmustnotbeconfiguredforRedirectAllmode.
Therealmmustbeconfiguredtouseclientcertificatesforauthentication.Chainedauthentication
(whereasecondauthentication
serverisused)doesnotsupportConnectonDemand.
Thevalidclientcertificatefortherealmmustbepresent.
Theusermustsuccessfullyconnecttotheapplianceatleastonce.
NOTE:ConnectonDemandisonlyavailableforconnectionstoSMA1000Series/EClassSRAandSMA
100Series/SRAappliances.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
16
Theremustbenouserinteractionrequiredfortheusertoconnect.
IftheMobileConnectappisnotrunninganduserinteractionisrequiredfortheVPNconnectionattempt
tosucceed,ConnectonDemand mightfailtoconnect.Scenarioswhereuserinteractionmightbe
requiredincludethefollowing:
User
authenticationbyenteringausernameandpasswordisrequired.
Twofactorauthenticationisenabled,requiringaonetimepasswordortoken.
TheVPNserver'sSSLcertificateisuntrusted,requiringacceptanceofanSSLcertificatewarning.
PersonalDeviceAuthorizationisenabledontheserverandthedevicehasnotbeenauthorized,
requiring
acceptanceofapersonaldeviceauthorizationpolicy.
ToenableConnectonDemandtoanSMA1000Series/EClassSRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4TapApply.
EnablingConnectonDemandtoSMA100Series/SRA
TosupportConnectonDemand,aVPNconfigurationontheSMA100Series/SRAappliancemustmeetthe
followingrequirements:
Theuser ’seff ectiveclientcertificateenforcementpolicy,configuredatthedomainoruserlevel,mustbe
enabledtouseclientcertificatesforauthentication.
Theuserseffectiveusernameandpassword
cachingpolic y,configuredattheglobal,group,oruser
level,mustbesettoAllowsavingofusernameandpassword.
ThevalidclientcertificatefortheusermustbepresentontheMac.
SonicWallMobile ConnectforOSX4.0UserGuide
InstallingandConnecting
17
TheVPNconnectionprofilemusthavetheusernameandpasswordconfigured,andtheappropriate
clientcertificatemustbeselected.
ToenableConnectonDemandtoanSMA100Series/SRAappliance:
1OnyourMac,openNetworkSettingsinSystemPreferences.
2 SelecttheVPNconnectionfromthelistofnetworkconnections.
3 SelecttheConnectondemandcheckboxtoenablethefeature.
4TapApply.
NOTE:Ifnoclientcertificatesareinstalled,anerrormessageisshownindicatingthatnomatchingclient
certificatesarepresentonyourdevice.TheKeychainAccessapp(inApplications/Utilities)canbeusedto
viewclientcertificates.ClicktheMyCertificatescategorytoviewavailableclientcertificates.
SonicWallMobile ConnectforOSX4.0UserGuide
PreferencesandURLControl
3
18
Preferences and URLControl
ThissectiondescribestheconfigurableelementsthatareaccessedfromthePreferencesscreeninMobile
Connect,includingconnectionsettingsandURLcontrol.
Top ics:
PreferencesOverviewonpage18
AdditionalSMA1000Series/EClassSRAOptionsonpage19
URLControlSyntaxandParametersonpage20
PreferencesOverview
SonicWallMobileConnectallowsyoutosetseveralpreferencesforconnectionandloggingoptions.The
PreferencesscreenisavailableundertheSonicWallMobileConnectmenu.
SonicWallMobileConnectmenu
SonicWallMobile ConnectforOSX4.0UserGuide
PreferencesandURLControl
19
TappingPreferencesdisplaystheconfigurablesettings.
Preferencessettings
ThefollowingoptionsarecontrolledfromthePreferencesscreen:
ConnectonLaunch‐SetsMobileConnec t toautomaticallyinitiateaconnectiontothelastusedprofile
whentheapplicationislaunched.
•AutomaticReconnect‐SetsMobileConnecttoautomaticallyattempttoreconnectiftheconnectionis
lost.
TheSSLVPNconnectioncanbedisruptedwhenyourdevice’sconnectiontransitionstoadifferent
networktype(forexample,fromwirelesstocellular).Thissettingletsapplicationsrelyonasustained
VPNconnection.Thereisnolimitontheamountoftimeittake storeconnect.
•URLControl‐Allowsother
mobileapplicationstopassactionrequestsusingspecialURLstoMobile
Connect.TheseactionrequestscancreateVPNconnectionentriesandconnectordisconnectVPN
connections.Forexample,anotherapplicationcanlaunchMobileConnect,accessinternalresourcesas
needed,andthen disconnectbyusingthemobileconnect://orsonicwallmobileconnect:// URLscheme.
Additional
informationaboutURLControlisprovidedinURLControlSyntaxandParametersonpage20.
DebugLogging‐EnablesfulldebuglogmessagesofMobileConnectactivity.Leavethissectiondisabled
unlessinstructedtoenableitbySonicWallSupportstaff.
AdditionalSMA1000Series/EClassSRA
Options
TwoadditionaloptionscanbemodifiedforconnectionstoSonicWallSMA1000Series/EClassSRAappliances.
Toviewtheseoptions:
1NavigatetotheConnectionscreen.
2 SelectanSMA1000Series/EClassSRAconnectionfromtheConnectionslist.
3TaptheEditiconnexttotheselectedconnection.
SonicWallMobile ConnectforOSX4.0UserGuide
PreferencesandURLControl
20
TheEditConnectionscreendisplays.
Thefollowingoptionscanbeconfigured:
RememberCredentials‐Enablessav ingofuserauthenticationcredentialsfortheVPN
connection.ThisisdisabledbydefaultandcanbecontrolledbytheSonicWallSMA1000Series/
EClassSRAserverconfiguration.
•ForgetSelections‐MobileConnectrememberstheLoginGroup
thatyouspecifiedwhen
configuringtheconnection.TochangetoadifferentLoginGroup,tapForgetSelections.Thenext
timeyouconnecttotheserver,youarepromptedtoselectanewLoginGroup.
URLControlSyntaxandParameters
ThissectionprovidesthefullsetofURLparametersfortheURLControlfeature.URLControlcurrentlysupports
theaddprofile,connect,anddisconnectcommands.CallbackURLsarealsosupported.
Top ics:
UsingtheaddprofileCommandonpage20
UsingtheconnectCommandonpage21
UsingthedisconnectCommandonpage
22
UsingthecallbackurlCommandParameteronpage23
UsingtheaddprofileCommand
Theaddprofilecommandrequireseitherthenameorserverparameter,andaccommodatesboth.Allother
parametersareoptional.WhentheURLisopenedinMobileConnect,alloftheparametersincludedintheURL
aresavedintheconnectionentryassociatedwiththatnameandserver.
Syntaxforaddprofile:
mobileconnect://addprofile[/]?name=ConnectionName&server=ServerAddress
[&Parameter1=Value&Parameter2=Value...]
NOTE:Iftheseoptionsarenotdisplayed,thenyouareconnectingtoeitheraSonicWallfire wallor
SMA100Seri es/SRAappliance.
/