Summary of the content on the page No. 1
SonicWALL Secure Remote Access Appliances
SonicWALL SRA SSL VPN 5.5
User’s Guide
Summary of the content on the page No. 2
Summary of the content on the page No. 3
Table of Contents Using This Guide About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Organization of this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Guide Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Icons Used in this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Summary of the content on the page No. 4
Installing NetExtender on Android Smartphones. . . . . . . . . . . . . . . . . . . . . . . . .63 Using NetExtender on Android Smartphones . . . . . . . . . . . . . . . . . . . . . . . . . . .66 Related Documents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80 Using Virtual Assist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80 Understanding Virtual Assist . . . . . . . . . . . . . . . . .
Summary of the content on the page No. 5
Using This Guide About this Guide Welcome to the SonicWALL SSL VPN User’s Guide. This manual is a user's guide. It provides information on using the SonicWALL SSL VPN user portal called Virtual Office that allows you to create bookmarks and run services over the SonicWALL SSL VPN SRA security appliance. Note Always check http://www.sonicwall.com/us/Support.html for the latest version of this manual as well as other SonicWALL products and services documentation. Organization of this Guide The
Summary of the content on the page No. 6
Guide Conventions Guide Conventions The following conventions used in this guide are as follows: Convention Use Bold Highlights dialog box, window, and screen names. Also highlights buttons. Also used for file names and text or values you are being instructed to type into the interface. Italic Indicates the name of a technical manual. Also indicates emphasis on certain words in a sentence. Sometimes indicates the first instance of a significant term or concept. Icons Used in this Manual Thes
Summary of the content on the page No. 7
Guide Conventions SonicWALL Technical Support For timely resolution of technical support questions, visit SonicWALL on the Internet at http://www.sonicwall.com/us/Support.html. Web-based resources are available to help you resolve most technical issues or contact SonicWALL Technical Support. To contact SonicWALL telephone support, see the telephone numbers listed below: North America Telephone Support U.S./Canada - 888.777.1476 or +1.408.752.7819 International Telephone Support Australia - +
Summary of the content on the page No. 8
Guide Conventions More Information on SonicWALL Products Contact SonicWALL, Inc. for information about SonicWALL products and services at: Web: http://www.sonicwall.com Email: sales@sonicwall.com Phone: (408) 745-9600 Fax: (408)745-9300 Current Documentation Check the SonicWALL documentation Web site for the latest versions of all SonicWALL product documentation at http://www.sonicwall.com/us/Support.html Quick Access Work Sheet This section should be completed by your network administrator t
Summary of the content on the page No. 9
Virtual Office Overview This chapter provides an overview of the SonicWALL SSL VPN user portal. It also includes an introduction to the SRA appliance and its features and applications. This chapter contains the following sections: • “Virtual Office Overview” section on page 9 • “Browser Requirements” section on page 10 • “Web Management Interface Overview” section on page 12 Virtual Office Overview SonicWALL SSL VPN Virtual Office provides secure remote access to network resources, such as ap
Summary of the content on the page No. 10
Browser Requirements • Using the NetExtender SSL VPN client – The SonicWALL SSL VPN network extension client, NetExtender, is available through the SSL VPN Virtual Office portal via an ActiveX control or through stand-alone applications for Windows, Linux, MacOS, Windows Mobile, and Android smartphone platforms. To connect using the SSL VPN client, log into the portal, download the installer application and then launch the NetExtender connector to establish the SSL VPN tunnel. The NetExtend
Summary of the content on the page No. 11
Browser Requirements The following table provides specific browser requirements. How to read this table: pplication Proxy eatures and Browser Requirements Windows XP Windows Vista Windows 7 Linux MacOS X browser browser NetExtender independent independent RDP5 (Java 1.6.0_10) (Java 1.6.0_10+)(Java 1.6.0_10+) RDP5 (ActiveX) Feature Browser OS Platform RDP5 (Java 1.6.0_10+) Minimum Recommended Browser Versions: 8 9 16 VNC (Java 1.6.0_10+) 8 9 16 Telnet (Java 1.6.0_10+) 89 16 1, SSHv2 (Java 1.6.0_1
Summary of the content on the page No. 12
Web Management Interface Overview Web Management Interface Overview From your workstation at your remote location, launch an approved Web browser and browse to your SRA appliance at the URL provided to you by your network administrator. Step 1 Open a Web browser and enter https://192.168.200.1 (the default LAN management IP address) in the Location or Address field. Step 2 A security warning may appear. Click the Yes button to continue. Step 3 The SonicWALL SSL VPN Management Interface displa
Summary of the content on the page No. 13
Web Management Interface Overview Logging in as a user takes you directly to Virtual Office. The Virtual Office Home page displays as shown here. Note The Virtual Office content will vary based on the configuration of your network administrator. Some bookmarks and services described in the SonicWALL SSL VPN User’s Guide may not be displayed when you log into the SonicWALL SRA security appliance. SonicWALL SSL VPN 5.5 User Guide 13
Summary of the content on the page No. 14
Web Management Interface Overview The Virtual Office consists of the nodes described in the following table. Node Description File Shares Provides access to the File Shares utility, which gives remote users with a secure Web interface access to Microsoft File Shares using the CIFS (Common Internet File System) or SMB (Server Message Block) protocols. Using a Web interface similar in style to Microsoft’s familiar Network Neighborhood or My Network Places, File Shares allow users with appro
Summary of the content on the page No. 15
Web Management Interface Overview The Home page provides customized content and links to network resources. The Home Page may contain support contact information, VPN instructions, company news, or technical updates. Only a Web browser is required to access intranet Web sites, File Shares, and FTP sites. VNC, Telnet and SSHv1 require Java. SSHv2 provides stronger encryption than SSHv1, requires SUN JRE 1.4 or above and can only connect to servers that support SSHv2. Terminal Services requi
Summary of the content on the page No. 16
Web Management Interface Overview SonicWALL SSL VPN 5.5 User Guide 16
Summary of the content on the page No. 17
Using Virtual Office Features This chapter provides details on how to use the features in the SonicWALL SSL VPN user portal, including NetExtender, configuring bookmarks, accessing services, and using file shares. This chapter contains the following sections: • “Importing Certificates” section on page 17 • “Using Two-Factor Authentication” section on page 18 • “Using One-Time Passwords” section on page 23 • “Using NetExtender” section on page 26 • “Using Virtual Assist” section on page 80 • “
Summary of the content on the page No. 18
Using Two-Factor Authentication Using Two-Factor Authentication The following sections describe how to log in to the SSL VPN Virtual Office portal using two- factor authentication: • “User Prerequisites” on page 18 • “User Configuration Tasks” on page 18 User Prerequisites Before you can log in using two-factor authentication, you must meet the following prerequisites: • Your administrator has created your user account. • You have an account with a two-factor authentication server that conforms
Summary of the content on the page No. 19
Using Two-Factor Authentication Logging into the SSL VPN Virtual Office Using RSA Two-Factor Authentication To log in to the SonicWALL SSL VPN Virtual Office using RSA two-factor authentication, perform the following steps. Step 1 Enter the IP address of the SRA appliance in your computers browser. The authentication window is displayed. Step 2 Enter your username in the Username field. Step 3 The first time you log in to the Virtual office, your entry in the password field depends on whether
Summary of the content on the page No. 20
Using Two-Factor Authentication Creating a New PIN The RSA Authentication Manager automatically determines when users are required to create a new PIN. will determines that user associated with a particular token requires a new PIN. The SRA appliance prompts the user to enter new PIN. Step 1 Enter the PIN in the New PIN field and again in the Confirm PIN field and click OK. The PIN must be between 4 and 8 characters long. Step 2 The RSA Authentication Manager verifies that the new PIN is an a
