Home
SonicWALL SSL VPN 3.5 User's Guide
Contents
1. Note For information on configuring options for RDP bookmarks see Configuring RDP Activex and Java Bookmarks on page 89 Using VNC Bookmarks Step 1 Click the VNC bookmark The following window is displayed while the VNC client is loading SonicWALL SSL VPN 3 5 User Guide b 95 S 4 Using Bookmarks Note VNC can have a port designation if the service is running on a different port QB Virtual Setrrurk Computing WC Microsoft Intervet Explorer provided by l Fleate wait while the Virtual Network Computing Client loads Click the Clase window button to close this window after you are finished with your Virtual Network Computing session Close Window Step 2 When the VNC client has loaded you will be prompted to enter your password in the VNC Authentication window Tirkual elyrork Connecti VNC Authentication Password JE lasa Applet window Step3 To configure VNC options click the Options button The Options window is displayed O o Encoding Tigh Dornreselin level a Aclieind coiir Wee Mouse butons 2and3 Normal Where Canty Mo te Share d66kKip Yeg Close Table 3 describes the options that can be configured for VNC 7 G d SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Table 3 VNC Options Option Default Description of Options Encoding Tight Hextile is a good choice for fast networks while Tight is better suited for low bandwidt
2. Liner 1U Free 10 i Week Eno 10 x Errr iah 2 Weeks Ener aji E eenths Eror Targ Al Ener IWO AAN Lea Eme liii gaa Ene I0OAZOOT Lies ts Ema OCS LGDA E etl ectender Log Yiswer MHetLitender Log Status ID A II e i 0 000 10317 Theo ine inal 000010317 TA S ye n LS i i Ser E ter t Engra Frupire Eie Frugires Eim F raira Eiu Lragares F razina Eiaa rugir Teini MEL herder vas unabii bo rasga the parwer pina Feasa deik pour CS setra cer pour ri NetP hence hers henni deeconeched For one of tha Foden reran cul dys magro BetExhernde was unable bo retohos thie arver face Faaa creck aur GAS sellin cer yarr Met cheddar ies ureble bo nesohre khe arver ngne Fess Check pour CS Atre or pour r NetPyhendes vans unable ho reon the server name Pleaser check pour DHS satie nr pour r AelExbernde was aa bo reoh Le server fae Flees deik yar DG celtings or your i NetEvhender vars unsble ho mahn the server nase Piaras check your DAS artie ar pour ri BelLEsberde fae been dew recbed for one of Une loka reaore ful ye eel MEL cheddar was unable bo resoa th cerwer came Pessa check pour CS Settee or pour Warih ing user incorrect user parsa Yei yE user rel uar paar eit user pan ile ay SonicWALL SSL VPN 3 5 User Guide Note Using NetExtender Wx To view the Debug Log either click the Debug Log icon or go to Log gt Debug Log It may take several minutes for the Debug Log to
3. lt E aoe m Login i The Mesiage Genter deploys any mformahon or enor meisacpes thet Log in may occur Step 9 The Citrix Web Interface home page is displayed Click on the application you want to use Applications f Top EN Up e m Internet Microsoft Word Explorer 2003 Step 10 You may be prompted to install additional Citrix software Security Warning x De you wand to inal and nun Tipa 70401 SAC eb aad on an unknown datetime and ethar by SonicWALL bg Gautier Serie WALL ine asserts that the conterd is sale You should only install new thes content f you trust Sorc WALL boc to cake lial greto I Arya n content imm SonicWALL ine o a m J e Step 11 The shared application is now launched SonicWALL SSL VPN 3 5 User Guide b 107 X 4 Using Bookmarks Global Bookmark Single Sign On Options You can configure single sign on using the Options button on the main Virtual Office page SSO settings will be enabled only if the administrator has configured user controlled single sign on SSO To configure SSO bookmark options perform the following tasks Step 1 Click the Options button at the top right of the Virtual Office The User Options page displays SONICWALL Virtual Office user poner Welcome to the SonicWALL Virtual Office Sorc ALLS Virtual Office provides easy ond secure remote access to fhe corporate Network from anywhere on the intern
4. Step 14 Review the following table to understand the fields in the NetExtender Status window Field Description Status Indicates what operating state the NetExtender client is in either Connected or Disconnected Server Indicates the name of the server to which the NetExtender client is connected Client IP Indicates the IP address assigned to the NetExtender client Sent Indicates the amount of traffic the NetExtender client has transmitted since initial connection Received Indicates the amount of traffic the NetExtender client has received since initial connection Duration The amount of time the NetExtender has been connected expressed as days hours minutes and seconds Step 15 Additionally a balloon icon in the system tray appears indicating NetExtender has successfully installed Connected Server sslvpn eng sonicwall com IP 10 126 1 110 Sent 62794 bytes Received 73072 bytes yc GFA 5 35 PM Step 16 The NetExtender icon pa is displayed in the task bar Installing NetExtender Using the Internet Explorer Browser SonicWALL SSL VPN NetExtender is fully compatible with Microsoft Windows Vista 32 bit and 64 bit and supports the same functionality as with other Windows operating systems 7 B d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Note It may be necessary to restart your computer when installing NetExtender on Windows Vista Internet Explorer Prerequi
5. C Hp Decurieite Cal Neterk Faries B C The File Transfer window functions in much the same manner as Windows Explorer or an FTP program Navigate the File Transfer window by double clicking on folders and selecting files The File Transfer window includes the following controls Desktop jumps to the desktop of the technician s or customer s computer Up ie navigates up one directory on either the technician s or customer s computer e Download E transfers the selected file or files from the technician s computer to the customer s computer Upload al transfers the selected file or files from the customer s computer to the technician s computer e Delete gl deletes the selected file or files 7 A d SonicWALL SSL VPN 3 5 User Guide Using Virtual Assist W amp Note When deleting or over writing files the customer is warned and must give the technician permission unless the technician has clicked the Request Full Control button and the customer has confirmed New folder i creates a new folder in the selected directory e Rename is renames the selected file or directory When a file is transferring the transfer progress is displayed at the bottom of the File Transfer window Click the Exit button to cancel a transfer in progress Note File Transfer supports the transfer of single or multiple files It does not currently support the transfer of directories To select multiple files
6. IF you suspect the certificate shown does not belong to 10 202 4 40 please cancel the connection and notify the site administrator wiew Certificate Using NetExtender Wax Step 10 The Software Installation window is displayed After a five second countdown the Install Now button will become active Click it Step 11 You may be prompted to re start Firefox in order to install NetExtender Click Restart FireFox J A dd GamE 2 D Etec Tera E RS mejl at emir Linon hier 0 18 Restart bo comets he ean eee Preto Step 12 Firefox will restart and you will need to login again NetExtender will then install as a Firefox extension Enteni ele ender L44 of 401 EU wnat E caters 2 Frd updates Got Morn Extensions SonicWALL SSL VPN 3 5 User Guide b 27 X amp Using NetExtender Step 13 When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected ON CE Seid Le a eke Cee a SONICWALL gt SSL VPN NetExtender Satie Connected Serva TUS e200 Chem E 112R 1 1M gami O DAES Received U Dries Duration 9 Ems 0007 01 Clsconnect Copyrigne d 2005 2006 Sonch ali tree Closing the windows clicking on the x icon in the upper right corner of the window will not close the NetExtender session but will minimize it to the system tray for continued operation
7. Sete eee Ty Simei enkaa Trada na layers pierig piad JE Da WALL enkot Trade ai levers pid TRF Sone WALL entou Trade_llal ped i Serina ALL anion Trace princing ey Sober Veto be ey re a do werner core E met w SonicWALL SSL VPN 3 5 User Guide b 83o oS amp Using File Shares Step 4 Then select the bookmark either from the portal or from the bookmark tab in the toolbar ki D SOW WALL Fide Shans P Remote Matwork E My Computer aoe BOG Whe gt 0 Wima Malena irii ame 4 a ae ag Wian ri inden here Pee Peet Diran bet urira Ped ela eis aa Pche ya enea Fried be Do ALL poi E aimi F Sees SA air Tiaa aa Lasers prore pii re ek a ee i prod E Dork AL L a Tina Age pit ip SoretVALL ekoa Trade onnongipg Hoen eme aT fe haba ert ont fr mi D Files launched from within the File Shares Applet must be downloaded to the local machine before they can be opened The File Shares Applet will store the file in a temporary directory while it is being used The File Shares Applet will also try to delete the file after use but may be unable to do so depending on whether or not another program is accessing it Use caution when opening files with sensitive material Using HTML Based File Shares Note File shares provide remote users with a secure Web interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Blo
8. 799 B Tolali One Folder Ji ei netExtender K a a om netExtender Konqueror Step 7 The first time you connect you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field NetExtender will remember the server name in the future v EF iWALL HeiEnradrr AelLEStender Window Help SONICWALL SSL VPN NetExtender SSL VPN Server oe User Mame Passwort Morn sine Save profile Save name and password Copyright 2007 SonicWall Imi Step 8 Enter your username and password Step9 The first time you connect you must enter the domain name NetExtender will remember the domain name in the future Note You mustbe logged in as root to install NetExtender although many Linux systems will allow the sudo install command to be used if you are not logged in as root SonicWALL SSL VPN 3 5 User Guide Wl amp Using NetExtender Step 10 To view the NetExtender routes go to the NetExtender menu and select Routes Available Routes i 192 168 200 0 255 259 299 0 Loading sawed profiles Done Connecting to SSL VPN Server 10 0 61 90 443 a Connected Logging in Login successful Using SSL Encryption Cipher DHE RS4 465256 5HA Saving profiles Done Step 12 To generate a diagnostic report with detailed information on NetExtender performance go to Help gt Generate diagnostic report bed Sonic WALL MelExtenider Newxtender Window Heip SONICWA Il EOY d
9. Note The One Time Password feature is supported on the SonicWALL SSL VPN 2000 SSL VPN 4000 and SRA 4200 security appliances User Configuration Tasks To use the One Time Password feature perform the following steps Step 1 If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain pull down Click Login SonicWALL SSL VPN 3 5 User Guide p 21 oN 4 Using One Time Passwords Step 2 Step 3 Step 4 Step 5 D Note The prompt A temporary password has been sent to user email com will appear displaying your pre configured email account SONICWALL SSL VPN Login A temporary p d has bean pml lo you sca com dtes Please enter it bajm Presper Login to your email account to retrieve the one time password Type or paste the one time password into the Password field where prompted and click Login You will be logged in to the Virtual Office One time passwords are immediately deleted after a successful login and cannot be used again Unused one time passwords will expire according to each user s timeout policy Configuring One Time Passwords for SMS Capable Phones Note SonicWALL SSL VPN One Time Passwords can be configured to be sent via email
10. Piani Eei T nlkhars a _Intemet Options ee Step 2 Click Security tab in intemet Dip hans wir cio Bele Miniti alias Thorn Bek Then click Shes tdt General Seorty Privacy Content Connectors Programs Advanced Dami a gore bo een or hate secur sel Large pee eS ee ee o e a a a bntemet Protected Mode On Iure Loca iiare 10s In Internet Explorer go to Tools gt Internet Options Click on the Security tab Click on the Trusted Sites icon and click on the Sites button to open the Trusted sites window 2x Selecta Web content ron to peciu ig petutp tammat 9g E Yoi pani add ard remers Web dhes from this zore All Weh dhea in this nona wil use the tone s secuti sethngs Add this Web she to the tone tottzs f 10 0 93 133 iriran Lasd ma Tuais Araire ribet L Trusted ntes y Trt core cortans Web ibat hal yuu Sira hitpe 10 0 99 200 a not in damage you cnmpuhs oF a acun bevel bu The fone F epin server verification hetpess for all strs in this rere Oo cont Cudom Cueshe sating To aha ta the peting ckek Custom Lewel recommended rating To ues lhe chek Delat Lavel SonicWALL SSL VPN 3 5 User Guide b 31 3 amp Using NetExtender Step 8 Enter the URL or domain name of your SSL VPN server in the Add this Web site to the zone field and click Add Step 9 Click OK in the Trusted Sites and Internet Opti
11. SonicWALL SSL VPN 3 5 User Guide Virtual Office Overview This chapter provides an overview of the SonicWALL SSL VPN user portal It also includes an Introduction to the SSL VPN and its features and applications This chapter contains the following sections e Virtual Office Overview section on page 9 e Browser Requirements section on page 11 e Web Management Interface Overview section on page 12 Virtual Office Overview SONICWALL SSL VPN Virtual Office provides secure remote access to network resources such as applications files intranet Web sites and email through Web access interface such as Microsoft Outlook Web Access OWA The underlying protocol used for these sessions is SSL With SSL VPN mobile workers telecommuters partners and customers can access information and applications on your intranet or extranet What information should be accessible to the user is determined by access policies configured by the SonicWALL SSL VPN administrator Accessing Virtual Office Resources Remote network resources can be accessed in the following ways Using a standard Web browser To access network resources you must log into the SSL VPN portal Once authenticated you may access intranet HTTP and HTTPS sites Web based applications and Web based email In addition you may upload and download files using FTP or Windows Network File Sharing All access is performed through a standard Web browser and does not re
12. environment If you have administrator s privileges and want to enter the administrator environment you need to go back to the login page and enter a username and password that have administrator privileges and login again using the LocalDomain domain Only the LocalDomain allows administrator access to the management interface Also note that the domain is independent of the privileges set up for the user Logging in as a user takes you directly to Virtual Office The Virtual Office Home page displays as shown here SONICWALL Virtual Office nea 9 e init Sialm Adha Lowpout Welcome to the SonicWALL Virtual Office Tips Help q SOM WALL S Viiual OMCe provides easy and secure remde access to ihe corporale es network from anywhere on the internet What is NetExtender hen l HetExtender creates a secure network Click a pre defined bookmark or create your own to securely access a corporate network connection allows you lo access ae network resources servers and Launch NetExtender to create a secure network connection fo the corporate network for nR as If you were on the local full network access ESEN What ia File Shares NetExtender 57a File Shares aa Virtual Assist File sigalg allows you 5 remotey E i roras shaved ier mE Sa ACCESS Mes in the local network You Dick to connect Pen your conponane taing control of ther can also copy files from your remote PPPN DE PARNI computer to he local network What is Virtual A
13. 2 oe ALSI D 2 y 15 2 How to read this table Heian LO may truncate kore lines of omdrruaks on the Virtual Office portal 2 Aemte window slant aut collapsed and must be Frey hes bred d Telnet S5H applets uncer Moc Oper may have yin oiui iie 5 Popiatis mani be prahi wicker Sate Preleeerces for authenti kailon winedonenh 6 etalk FAS works Presetitaton ser 4 Login pee hone accenible SonicWALL SSL VPN 3 5 User Guide b 1 3 MWY Neb Management Interface Overview To configure SonicWALL SSL VPN firmware an administrator must use a Web browser with JavaScript cookies and SSL enabled Before using Virtual Assist you must meet the following requirements e Virtual Assist is only supported on the SonicWALL SSL VPN 2000 SSL VPN 4000 and SRA 4200 platforms e Virtual Assist is only supported on Windows platforms Virtual Assist is certified to work on Windows XP and Windows 2000 Web Management Interface Overview Step 1 Step 2 Step 3 From your workstation at your remote location launch an approved Web browser and browse to your SSL VPN appliance at the URL provided to you by your network administrator Open a Web browser and enter https 192 168 200 1 the default LAN management IP address in the Location or Address field A security warning may appear Click the Yes button to continue Ja Gecurity Alert X Fp imbon piha aC hje we et bak CM Di permed or igal by theii Hoeks eee j piin a P
14. 255 0 0 2 10 50 0 0 255 255 0 0 3 10 200 0 0 255 254 0 0 4 10 202 0 0 255 255 0 0 5 10 208 0 0 255 252 0 0 6 10 2 0 0 255 255 0 0 7 10 1 1 0 255 255 255 0 8 192 168 4 0 255 255 255 0 9 192 168 181 0 255 255 255 0 10 10 203 0 0 255 255 0 0 Step 10 To view the NetExtender Log go to Window gt Log aoe NetExtender Log DoL YPN CONNECTION Le TCTE CMLHETEU i Loading saved profiles Loaded profile sslvpn eng sonicwall com Done Connecting to SSL VPN Server sslvpn com 443 Connected Logging in Login successful Using S5L Encryption Cipher DHE RSA AES256 SHA You now have access to the following 10 remote networks 10 0 0 0 255 255 0 0 10 50 0 0 255 255 0 0 10 200 0 0 255 254 0 0 10 202 0 0 255 255 0 0 10 208 0 0 255 252 0 0 10 2 0 0 255 255 0 0 10 1 1 0 255 255 255 0 192 168 4 0 255 255 255 0 192 168 181 0 255 255 255 06 10 203 0 0 255 255 0 0 NetExtender IP Address 10 128 1 105 NetExtender connected successfully Type Ctrl c to disconnect Saving profiles Done Ei F _ i Clear Log in Close F 7 B d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Step 11 To generate a diagnostic report with detailed information on NetExtender performance go to Help gt Generate diagnostic report B NetExtender window EOJ Generate diagnostic report ee ane vt diagnostic report Save Ag mwdiag twt pa id NetiatencerDeme Na ae eed cOn MetExtender Diagno
15. CANNOT BE EXCLUDED SUCH WARRANTY IS LIMITED IN DURATION TO THE WARRANTY PERIOD BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS THE ABOVE LIMITATION MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS AND YOU MAY ALSO HAVE OTHER RIGHTS WHICH VARY FROM JURISDICTION TO JURISDICTION This disclaimer and exclusion shall apply even if the express warranty set forth above fails of its essential purpose SonicWALL SSL VPN 3 5 User Guide b 11 3 4 Logging Out of the Virtual Office ay SonicWALL SSL VPN 3 5 User Guide SonicWALL Inc 2 ce T 4 4087459600 SONICWALL San Jose CA 95124 3452 F 1 408 745 9300 www sonicwall com PN 232 001785 00 Rev A 10 09 2009 SonicWALL Inc is a registered trademark of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice D gt
16. Login to Server link next to the file share name Step 4 Click the go prompt to display the Enter Network Password dialog box Step5 Type a valid username in the User Name field and a valid password in the Password field and click Login Te Please type r ur User n mme and pated Wier Marne Cancel 100 6767 E SonicWALL SSL VPN 3 5 User Guide b 85 S amp Using File Shares Step 6 Virtual Office displays the home File Share screen that you have specified displaying folders on the network to which you can navigate Bh igs 16709 Gonk WALL Wris Wie icrai Imernet Explorer provided h fren Wi Lip Delete Fennec OSoskmark 2 z EL ES E Fihi Pc Phe lmas S best best E ipini a hike _ Ern ne SD UG 7 Table 2 describes the controls at the top of the File Share window Table 2 File Share Controls Button Description Back Navigate to the previous File Share location Forward Navigates forward to the previous File Share location after you have pressed the Back button Reload Reloads the current folder to display any changes Up Navigates Delete Deletes the selected folders and files Select items by checking the checkbox next to their name under the Select column Rename Renames the selected folders and files Select items by checking the checkbox next to their name under the Select column Bookmark Creates a new bookmark to the current File
17. NetExtender has not passed Windows Logo testing is displayed click Continue Anyway SonicWALL testing has verified that NetExtender is fully compatible with Windows 7 Beta Vista XP 2000 and 2003 Hardware installation A Tihe sofian yiu ane rening ine thes hanar SSLAFH HHE stende Adacter hae ret paced Wiee Logo leila bo vaniy te cumpaliebty wath Winda AP Tei res ue this degli is moula Continuing pour ins tallatian of this rohyeare may mpa rernammends that you atop thie ineallation mow ard contact the hardware wendor for roftware that har pared Winduee Logo lestr Continun Argey STOP Ireknlisticn Step 13 When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected Slains Connected Server TWO F 200 Chena PTR 1 on Soot U Des Reacebed U Dies Duration O Gaye 000101 Clsconnect Capyrigne 2005 206 Sone ali te Launching NetExtender Directly from Your Computer After the first access and installation of NetExtender you can launch NetExtender directly from your computer without first navigating to the SSL VPN portal To launch NetExtender complete the following procedure Step 1 Navigate to Start gt All Programs Step 2 Select the SonicWALL SSL VPN NetExtender folder and then click on SonicWALL SSL VPN NetExtender The NetExtender login window is displayed SonicWALL SSL VPN 3 5 User Guide WE 4 Using NetExtender
18. Share location Logout Logout of the File Share service Step7 You can now navigate the folders and files in the File Share as you would through Windows Explorer or other file management systems Step8 To add a new folder in the current File Share location type the name of the folder in the Add New Folder field and click Submit Step9 To add a file in the current File Share location click the Browse button Navigate to the location of the file on your computer in the Choose file window that opens select the file and click OK and then click Submit in the File Share window 7 s d SonicWALL SSL VPN 3 5 User Guide Managing Bookmarks W amp Managing Bookmarks Bookmarks are objects that enable you to connect to a location or application conveniently and quickly The Virtual Office Bookmark system allows bookmarks to be created at the group and user levels The administrator can create both group and user bookmarks which will apply to applicable users while individual users can create only personal user level bookmarks Since bookmarks are stored within the security appliance s local configuration files it is necessary for group and user bookmarks to be correlated to defined group and user entities When working with local groups and users LocalDomain this is automated since the administrator must manually define the groups and users on the device Similarly when working with external groups not LocalDomain the correlat
19. Step 3 The IP address of the last SSL VPN server you connected to is displayed in the SSL VPN Server field To display a list of recent SSL VPN servers you have connected to click on the arrow DH Son cWiALL SSL VPN Netlatender E l xj SONICWALL SSL VPN NetExtender S51 VPM Sime FEARR ang tecle User names he o ooo Passives ck lm ALLEL Leonean lew he SLCC Conracat Seve username possord if server allows ene Wer nan amp peewee err Allin Cove username onke il server allows Ahes Aik a ede me amp password Copyright 2007 SSniewaLe I Step 4 Enter your username and password Step 5 The last domain you connected to is displayed in the Domain field Step 6 The pulldown menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password and i Tip Having NetExtender save your user name and password can be a security risk and should not be enabled if there is a chance that other people could use your computer to access sensitive information on the network Configuring NetExtender Preferences Complete the following procedure to configure NetExtender preferences Step1 Right click on the icon in the system tray and click on Preferences The NetExtender Preferences window is displayed ay SonicWALL SSL VPN 3 5 Use
20. Step 3 To install NetExtender from the CLI navigate to the directory where you saved NetExtender tgz and enter the tar zxf NetExtender tgz command ka mb mriEzindrr lent Shell Kamak mix ek tar zx HetFetender tg2 l i ca treiEstendertlient k meTLEDTenderllLient s f1nstall SamicwALL WetExtender 2 5 17 Tnetaller Please run the NetExtender installer as root On sany tystees you can wie the aude casennd ee meTLEtenderclient sudo fins tell Prsawn rn fonicWALL WetEatender 2 5 17 Insialler Checking Library dependencies _ Checking pppd Copying files ferret e e terres IHSTALLATTON SUCCESSFUL 2 22 ee re ere ere ere ee Type netEetenderGui ta launch Wetfetender Lok dn fuses sharefnmetEstender for a desktop shortcut and icon files ek neteetenderciient s f Step 4 Type the cd netExtenderClient command Step5 Type install to install NetExtender ay SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Step 6 Launch the NetExtender tgz file and follow the instructions in the NetExtender installer The new netExtender directory contains a NetExtender shortcut that can be dragged to your desktop or toolbar fed nctEnrnder Konquernr Location Edit Yew Go Bookmarks Tools Settings Window Help 44h OF OG FD OIGiQ alr As Location en Juan Shane nete tender v ii Je mM zZ warns Meteatender urn alee x desktop tender fF jema 2 Files
21. a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall The File Shares Applet mimics Windows Explorer navigation and provides functionality not available in HTML based File Shares including the ability to overwrite existing files and upload directories This section contains the following subsections e Using the File Shares Applet section on page 71 e Using HITML Based File Shares section on page 84 ay SonicWALL SSL VPN 3 5 User Guide Using File Shares Wa amp Using the File Shares Applet The File Shares Applet has a similar look and feel to the Windows Explorer tool featuring drag and drop and multiple file selection capabilities It also provides the user the ability to set up bookmarks to quickly navigate through networks from the portal level This feature saves time lost moving through network and server paths The File Shares Applet leverages Sun s Java platform browser plug in to increase usability by mimicking the common Windows Explorer interface With the help of the HTTPS protocol the applet securely transfers encrypted files and information to and from the SSL VPN appliance The appliance communicates this data to the individual machines on the remote network This section contains the following
22. a folder that is copied from a remote machine onto the local machine s desktop deleted from the remote machine and moved back from the local machine unto the remote machine all from the File Shares Applet Step 1 Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal Step 2 Double click the C drive double click the Documents and Settings folder then double click a specific folder for example the one that holds the Desktop folder Step 3 The current directory shows the Desktop folder Select a file or folder from the remote machine and drag its icon onto the Desktop folder in the local machine This will copy the item from the remote machine directly onto the desktop fhe dal LOG E hue Fa Fr burps peal Step 4 Once the transfer is complete double click on the Desktop folder The folder copied from the remote machine will display in that folder SonicWALL SSL VPN 3 5 User Guide b 79 3 amp Using File Shares Note The item still exists on the remote machine To initiate a move not a copy you must use the Move command from the right click menu SONAL Pile Shares My Computer OOR Um ou COG Ua Ob Wma pamm mari 45 ard Letangi hr Emha Tak y gree z antes tae 9 FM fit dhe aged biah biah ELLER TET o cheep hias Fabia 4 kaiaa loldi ne JA Wee Fakin K im oa Step5 To delete the original file or folder select it by clicking on it once and press the Dele
23. a location or application conveniently and quickly Options Online Help Provides the option to change user password and use single sign on if enabled by the administrator Launches online help for Virtual Office Tips Help Logout Provides a short list of common questions and tips about the Virtual Office Logs you out of the Virtual Office environment The Home page provides customized content and links to network resources The Home Page may contain support contact information VPN instructions company news or technical updates Only a Web browser is required to access intranet Web sites File Shares and FTP sites VNC Telnet and SSHv1 require Java SSHv2 provides stronger encryption than SSHv1 requires SUN JRE 1 4 or above and can only connect to servers that support SSHv2 Terminal Services requires either Java or ActiveX on the client machine 7 14 d SonicWALL SSL VPN 3 5 User Guide Web Management Interface Overview Wax As examples of tasks you can perform and environments you can reach through Virtual Office you can connect to e Intranet Web or HTTPS sites If your organization supports Web based email such as Outlook Web Access you can also access Web based email e The entire network by launching the NetExtender client e FTP servers for uploading and downloading files e The corporate network neighborhood for file sharing e Telnet and SSH servers e Desktops and desktop applicatio
24. directly to SMS capable phones Contact your cell phone service provider for further information about enabling SMS Below is a list of SMS email formats for selected major carriers where 4085551212 represents a 10 digit telephone number and area code These SMS email formats are for reference only These email formats are subject to change and may vary You may need additional service or information from your provider before using SMS Contact the SMS provider directly to verify these formats and for further information on SMS services options and capabilities e Verizon 4085551212 vtext com e Sprint 4085551212 messaging sprintpcs com e AT amp T 4085551212 mobile att net e Cingular 4085551212 mobile mycingular com e T Mobile 4085551212 tmomail net e Nextel 4085551212 messaging nextel com e Virgin Mobile 4085551212 vmobl com e Qwest 4085551212 qwestmp com For a more complete list see the SonicWALL SSL VPN Administrator s Guide 7 2 d SonicWALL SSL VPN 3 5 User Guide Using NetExtender W amp Verifying User One Time Password Configuration If you are successfully logged in to Virtual Office you have correctly used the One Time Password feature If you cannot login using the One Time Password feature verify the following e Are you able to login to the Virtual Office without being prompted to check your email for a one time password You have not been enabled to use the One Time Password feature Contact your SSL
25. gt COMPREHENSIVE INTERNET SECURITY SonicWALL Internet Security Appliances SonicWALL SSL VPN 3 5 User s Guide SONICWALL gt Table of Contents Using This Guide About GUE 6 4asnd aaa nen ior Roa eed aaiaer nad honed Read ae D Organizanon or tS G Ude esperrecat T ER EA ET A i D Guide CONVENON iaer EEEE E ema ain EEEO EEE E 5 Leons Used in this Manual 25 6 5 saturates Burntetn arcing tre eE T Bie 6 Current Documentation cd bn iio anata aa edhe dune kee eh nadnea aes 7 Important Information You Need cc cece ccc ce eee eee eens 7 Virtual Office Overview Virtual Office Overview 2 0 cect ete eet eee ene ete e tee ene tes 9 Accessing Virtual Office Resources cece cece eee n eens 9 Browser ROQUINEMENIS 274 skonete Gh S coasters 4ouetae eee ey ete ada wees 11 Web Management Interface Overview 0 cece ete tenet neces 12 CC Stal NG A ears save se th ies eg 2 So ea wk a reseed a te ee 15 Using Virtual Office Features poring Cor Cales sim settee eer bedava adawsaweiarseeat aaah 17 Using Two Factor Authentication 0 0 ccc ccc ect ee eee cent neces 18 User Prog IES eunen orale Societe iota gece Bee steals AE 18 User Configuration Tasks saiec tes inpae argacn adhoc ene auare Bo eines ean watarar aed 18 Using One Time Passwords ccc cee cee eee t ee tee tee een etn eennes 21 User PIeMPQuiSiGS 24 3322 c auto ets ndis as canada te enews 21 User ConnguranOn Tasks av cendaace Gus oo Ghee Rees
26. is supported When launching NetExtender from the Web portal if your browser is already configured for proxy access NetExtender automatically inherits the proxy settings To manually configure NetExtender proxy settings perform the following tasks Step 1 Right click on the icon ro in the task bar and click on Preferences The NetExtender Preferences window is aisplayed Step 2 Click on Proxy x Connecter Profiles Salina Connection Scripts fw Erebia g to bering Prey Automaticly detect settings Use automatic configunstiion script f Une pros rea Addii E m2 153 Fat fiosa Le rame bu Patria fe TETTERE Idenrel Explore psy eellenye cwe ie Step 3 Select the Enable proxy settings checkbox Step 4 NetExtender provides three options for configuring proxy settings 7 3B d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Automatically detect settings To use this setting the proxy server must support Web Proxy Auto Discovery Protocol WPAD which can push the proxy settings script to the client automatically Use automatic configuration script If you know the location of the proxy settings script select this option and enter the URL of the scrip in the Address field Use proxy server Select this option to enter the Address and Port of the proxy server Optionally you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that by
27. load During this time the Log window will not be accessible although you can open a new Log window while the Debug Log is loading BP selentender Loy Tierrer Deluy Lory iog ier Bier iep i a alia POOT O312 16 57 23 FO0T 03 12 10 33 09 SOs a THR iA P0070032 22 05 53 20070A 2305 32 OS al SO al a POOTMO31 3 02 22 31 me Aeechve Svchdsg Receive svchsg FBA Aeechve SecMag Receive Svchsg FBA Aeechve Svchdsg Heorive och Heorive cack eB eb eB eb es wParam TIL Pararn wParam 10 Param wParam 10 Param wParam TIL Maran wParam 10 Param D wParam 10 Param content length 0 content length 0 cohen femal I content length 0 content length 0 cohen femal I wParam 0 Param 0 content length 0 OOND I 022221 NetCxtender Core Proc JC Thri 704 Status update statCode 0x2000600 stepData 2007 03 13 02 22 31 NetExtender Core Proc 07 3C Thr Ox17B4 Status update callback SOUS MANS Weel Nelk tenier Cone Proca 3E hO FRA Sade pilata ZOOO I 02 22 71 NetExtender Core Proc IC The Ox1 704 Status update statCode OxJ000600 stepData 2007 03 13 02 22 31 NetExtender Core Proc 07 9C Thr 0x1 7B4 Status update callback SOUS MANS Weel Nelk tenier Cone Poot 3 hO FRA Sas pilata 2007 03 02 22 71 Metixtender Core Proc IC The Ox1 704 Info Attempting RAS Hang Wp 2007 03 02 22 71 NetExtender Core Proc JC The Ox
28. rh SonicWALL SSL VPN 3 5 User Guide b 57 N amp Using Virtual Assist Step 4 When you launch the installer you may see an additional warning message Click Run Interret Laplorer Secunity Warning 1 Mama VASAT LANE A ADAHA JOTEA ebir Ave Pee ero Publisher Son cWALi Tne While Files From the Internet can be useful this file type can potentially harm your computer Oriy run soltrrane from publishers you trust Whats tya rick Step 5 A pop up window asks if you would like to install Virtual Assist as a standalone client Click Yes to save the application A shortcut will be added to your desktop and a link to the application will be added to the program list on your Start Menu Click No to launch Virtual Assist without saving the application for future use Eres al the Virtual Haist ttandalane clenty P De you want bo retal Vietual Assist as a standalone chert wtf You mary also fun it directhy by clicking the No hulton Step 6 If you clicked Yes to save the application you will be prompted to select a location to save the file Select an appropriate location such as C Program Files SonicWALL Sprecily a direc tery be install Lire Virtual fest Madane Cie aster i i OS S C CS Crecutable Fier Cancel TE SonicWALL SSL VPN 3 5 User Guide Using Virtual Assist Wax Step 7 When Virtual Assist launches for the first time you may see a security warning pop up window De select
29. rr icira j T p H E ri 23 Mr Recent Dumt F man oj My Pictures E i he j i T i hi jap in going to check pos malem Magy oe ENA b 7 Misai Giiioe Word 2003 oy Mr Minik picike cian mi Heart Sg Mty Computer ak ird Mada hi ponm ira Aci road e Grea T j ia ae mb Ty iar B i A BE race hice bate SUG Ce ee py i and Sethings Transfer BE cores fa ALm E all E en E oenas j Hei aed eager Perters test jp Search a Sukk F aprii G Peifonce All Peoge anit gt Ef Fun va Ka hack Tine foal Sree iard Soiva Tr Eel FE T Mee te iy F EA chs Ch ya M amaj L The technician now has complete control of the customer s keyboard and mouse The customer can see all of the actions that the technician performs During a Virtual Assist session the customer is not locked out of their computer Both the technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time 7 2 d SonicWALL SSL VPN 3 5 User Guide Using Virtual Assist Wax The customer has a small tool bar in the bottom right of their screen with three options Aciwe Chat E e Wittual Assist The customer has the following options during a Virtual Assist session e Active Toggles to the View Only mode where the technician can view the customer s computer but cannot control the computer e Ch
30. subsections e User Prerequisites section on page 71 e Configuration Overview section on page 71 e Configuration Examples section on page 76 User Prerequisites The SonicWALL SSL VPN File Shares Applet is a Java application that supports Java 1 3 1 and newer and the JRE Version 5 0 Update 10 or newer is recommended To download the latest Java and JRE versions visit http www java com Internet Explorer 6 0 Firefox 1 5 or newer Opera 8 or newer and Safari RSS are recommended Web browsers of optimal performance of the Java File Shares feature The administrator must enable the File Shares Applet for users to use it There must be a computer with open access for the SonicWALL SSL VPN File Shares Applet to log into The remote computer must have shared folders for files to be copied or moved Sharing policy must be set from within the remote computer s own operating system Configuration Overview The SSL VPN File Shares Applet is easy and intuitive to use User should be aware of its functions and limitations Setting up bookmarks and the browser interface are covered in this section along with an overview of the browser and sample use cases This section contains the following subsections e Setting up Bookmarks section on page 71 e Using the Java File Shares Applet section on page 73 e File Shares Applet Browser Overview section on page 75 Setting up Bookmarks Bookmarks can be set up for fo
31. t want to see two mouse cursors one above another Use CopyRect Yes CopyRect saves bandwidth and drawing time when parts of the remote screen are moving around Most likely you don t want to change this setting Restricted colors No If set to No then 24 bit color format is used to represent pixel data If set to Yes then only 8 bits are used to represent each pixel 8 bit color format can save bandwidth but colors may look very inaccurate Mouse buttons 2 and Normal If set to Reversed the right mouse button button 2 will act 3 as if it was the middle mouse button button 3 and vice versa View only No If set to Yes then all keyboard and mouse events in the desktop window will be silently ignored and will not be passed to the remote side Share desktop Yes If set to Yes then the desktop can be shared between clients If this option is set to No then an existing user session will end when a new user accesses the desktop SonicWALL SSL VPN 3 5 User Guide b 7 S 4 Using Bookmarks Using FTP Bookmarks Note FIP bookmarks can use a port designation if the service is not running on the default port Step 1 Click the FTP bookmark The FTP Session dialog box displays 3 httpeM 0 067 687 FTP SonicWALL Virtual Office Mozilla Firefox y P Sarnisions FIF Session b Add Hew Sesion Adi How FIF session F Diena Files aera ami i T T BF Bd Upload Files Les ror ru
32. technician email Some mail servers require that an email address be entered and that it be on a valid domain Optionally enter an Additional Message to the customer Click Invite The customer will receive an email with an HTML link to launch Virtual Assist Customers requesting assistance will appear in the Assistance Queue and the duration of time they have been waiting will be displayed SonicWALL SSL VPN 3 5 User Guide p Gi N amp Using Virtual Assist Assisting Customers Step 1 Step 2 Step 3 A pop up window alerts the technician when a customer is in the assistance queue A Sew Customer Detected x Duae Pree po con 0 Alma Sa os ae Cie Double click on a customer s user name to begin assisting the customer A Techies el bes rala bo heie you dee You z l map cance year regunt arytan by riding hn Careri a Your cuneckitine in gueia kir 0228 awn d z The customer s entire desktop is displayed in the bottom right window of the Virtual Assist application setae If xi Pile Vew Toke Caiman D p ri imuna com piri n bira Tectrecunn E med Addmonal Herse ipigi la ce ob Chamtomer Deskop Fie Manager HP Syrtem Info E Reboot 2 PlequestConbol q Chat gil Sw ch Cuntomer Screen Fleque t_ imis SE Reged Melresh O Afful ren Jel Auto Sealing Toon mE a True Sine EE Sie er Biop ber Hades Mo Bae zj a iieri Lat EF CSA i
33. the Always ask before opening this file checkbox to avoid this window in the future Click Run open ile Security warnana Fy Co du wand bo cum thin fie Bn Hama VASC AnA Publisher Sont WALL Irec Tye Applirabian Pom Solera ier oneal F Alw ack before opering ihi file thin files ham ths Deter csn Gee usrdd this fils bene can paerd haiti pa computer arhi nun boia fon gubie yiu lu Whal g lF kY Step8 The Virtual Assist login window displays Step9 Enter the following information and click Login e Server The IP address or domain name of SonicWALL SSL VPN appliance Username and Password The username and password for the technician s account on the appliance e Domain The domain name for the portal The default value is LocalDomain Note The domain name is case sensitive Step 10 The Virtual Assist standalone application launches e TS joj xj He Yew Tok Commack Hiii Customer E mai Tunipme Techrecisn Glaus Tere Elaprad P Fachrecian C rual Ackland Hacim ra I Pe __________ ____t i j C Customer Desking L File Manager af System inte E isboot 3 Request Cowon 2 Cha pA Suatch Custom Sesser pA Regiel Laie Argel hofia bJ Pal Sereen Fel Aube aii Chom i 3 Tris Gen Hak is a Too fe LIA Flare He Paar SONICWALL gt SonicWALL SSL VPN 3 5 User Guide p 59 N 4 Using Virtual Assist Step 11 The technician is now ready to assist customers 7 O d SonicWAL
34. 1 704 Info call into RastlangWpf 200 T0313 02 22 32 MetExtender Core Proc Oe 3C The 099C Info Exiting thread ssloutgealng handle thres Ne EEE j Keady To clear the log click on Log gt Clear Log Disconnecting NetExtender To disconnect NetExtender perform the following steps Step 1 Right click on the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect Step 2 Wait several seconds The NetExtender session disconnects You can also disconnect by double clicking on the NetExtender icon to open the NetExtender window and then clicking the Disconnect button When NetExtender becomes disconnected the NetExtender window displays and gives you the option to either Reconnect or Close NetExtender SonicWALL SSL VPN 3 5 User Guide WZ 4 Using NetExtender Upgrading NetExtender Beginning with SonicWALL SSL VPN release 2 5 NetExtender automatically notifies users when an updated version of NetExtender is available Users are prompted to click OK and NetExtender downloads and installs the update from the SonicWALL SSL VPN security appliance Co SonicWALL SSL VPH MetExtender SONICWALL SSL VPN Netextender new version of NetExtender ls required to connect to the SSL VPN server click OM to upgrade Copyriht amp 2007 Same ALL Ine When using releases prior 2 5 users should periodically launch NetExtender from the SonicWALL Virtual Office to ensure they have
35. 11111b 111111 TLT b1PP pet Table 1 describes the commands available in the NetExtender CLI and their options Table 1 NetExtender CLI Commands Command Options Description NECLI connect Initiates a NetExtender session S server The IP address or hostname of the SSL VPN server U uSser name The username for the account p password The password for the account d domain name The domain to connect to NECLI createprofile Creates a NetExtender profile S server The IP address or hostname of the SSL VPN server Uu user name The username for the account p password The password for the account d domain name The domain to connect to NECLI deleteprofile Deletes a saved NetExtender profile S server The IP address or hostname of the SSL VPN server u user name d domain name The username for the account The domain to connect to NECLI disconnect NECLI displayprofile Disconnects Displays all NetExtender profiles S server Uu user name Optional Displays only the profiles that are saved for the specified server Optional Displays only the profiles that are saved for the specified user name d domain name Optional Displays only the profiles that are saved for the specified domain name NECLI queryproxy Checks the connect to the proxy server NECLI reconnect Attem
36. 68 4 255 255 255 0 Be SonicWALL Virtual Ohir Displaying Connection Information Shiva Somic al So YPN Aether Didie Cee Cho AEn k Fouts Information You can display connection information by mousing over the NetExtender icon in the system tray Connected Server sslyvpn eng sonicwall com IP 10 126 1 109 Sent 41388 bytes Received 53746 bytes Using the NetExtender Command Line Interface SonicWALL SSL VPN release 3 5 introduces a command line interface CLI for controlling NetExtender Note The NetExtender command line interface is only available on Windows platforms To launch the NetExtender CLI perform the following tasks Step 1 Launch the Windows Command Prompt by going to the Start menu select Run enter cmd and click OK Step 2 Change directory to where NetExtender is installed To do this you first must enter cd to move up to the root drive The enter cd Program Files SonicWALL SSL VPN NetExtender SonicWALL SSL VPN 3 5 User Guide 43 oN amp Using NetExtender Step 3 Enter NECLI exe The NetExtender CLI launches and displays a summary of the available commands C Program Files SonicWALL SSL VPN NetExtender gt NECLI exe rrovrvrrrrrrrrrevge r MMbbbbbb11111111111111111111111bbbbbmm NNN NNN NN NNN NN NON ONONUSN NECLI for Windows Version 3 5 0 1 Copyright C 2008 SonicWALL Inc ae PPPP111111111bm PP1111111bm PP1
37. Ectender Mei gender creates a sere netek Gick a pre defined bookmark or oeme your oah bo securely access a curporale meteurk gonnerhan piran woe 1 acess eure REOR Poured anara and meebo t U ou were on ite local LAG ieee in Cree eure eee consi in ie corpora nese fe z yr neterurk fal Peete apera What is File hares File Snes aos yu bo reee Nettatender 25m File Shares Virtual Assia sree ira iets lex Vesicle a EDEN i per dell r Bee ijare ri S ooh pira lip a i iia pa y a Fr Uae TICE Th fi Ante Sti tar fice ade baking Tirion Pee cN e a gl 3 ur pee eA ies bop Dat od IT Ga he HH re i ee le al itag What it Virtual Assiat ELE eee Ses Wu Le Pee SonicWALL SSL VPN 3 5 User Guide b 25 3 amp Using NetExtender Step 4 The Allowed Sites Software Installation window may appear with the address of the Virtual Office server in the address window Click Allow to allow Virtual Office to install NetExtender and click Close B The ese wants bo ictal the hobim cidan HELX cab frome Sorell Dre T you trust the patahe ond the piden ard wori io nAi x ele Fear NetExtender ActiveX Installer instructions Step 1 Avellowmfermatonba BS i iki miy app i at he lop of Mi ETFWEEI he plow barand eyes inaia Ative Coning Step d ri Securty Wanig window appear Click istai lo proceed be Step 5 The Allowed Sites window displays Click Allow to add the SSL VPN appliance to the list of allowed sites ED A
38. L SSL VPN 3 5 User Guide Using Virtual Assist W amp Performing Virtual Assist Technician Tasks Note To get started the technician logs into the SonicWALL SSL VPN appliance and launches the Virtual Assist application Each technician can only assist one customer at a time Once the technician has launched the Virtual Assist application the technician can assist customers by performing the following tasks e Inviting Customers by Email on page 61 e Assisting Customers on page 62 e Using the Virtual Assist Taskbar on page 63 e Using the Virtual Assist File Transfer on page 64 e Controlling the Virtual Assist Display on page 65 Inviting Customers by Email Step 1 Note Step 2 Step 3 Step 4 Step 5 Step 6 To invite a customer to Virtual Assist use the email invitation form on the left of the Virtual Assist window A Virtual Assist SAC Fils View Teal Commack Customer E mait kisra er Techin Eat raaa Gii Akhian Message Wpis Hay Jay Geek on lhe kh loi Valua Aerei haky m n Customers who launch Virtual Assist from an email invitation can only be assisted by the technician who sent the invitation Customers who manually launch Virtual Assist can be assisted by any technician Enter the customer s email address in the Customer E mail field Optionally enter Technician E mail to use a different return email address than the default
39. PN 3 5 User Guide Using Virtual Assist Wax Step 3 When you launch the installer you may see an additional warning message Click Run Interret Laploner Secunity Warning 1 Mama VASAT PAANS A APAA AT DS GTA ga rn Publisher SonicWALL Tne While Files From the Internet can be useful this file tpe can potentially hara your computer Oniy run sel trrane from publishers you trust What s tbe rekt Step 4 A pop up window asks if you would like to install Virtual Assist as a standalone client Click Yes to save the application A shortcut will be added to your desktop and a link to the application will be added to the program list on your Start Menu Click No to launch Virtual Assist without saving the application for future use instal the Virtaral Assit ctandalone clienky P Do you war bo ieta Vrlual Assel as a sbamdakema chert i Yeu may alsa run it directhy by clicking the We hatten Step 5 If you clicked Yes to save the application you will be prompted to select a location to save the file Select an appropriate location such as C Program Files SonicWALL Specily a me be na Lire Virtual Assit Samd Cier vaSAC ene Evecutstie Filer Cancel w A SonicWALL SSL VPN 3 5 User Guide Wa 4 Using Virtual Assist Step 6 When Virtual Assist launches for the first time you may see a security warning pop up window De select the Always ask before opening this file checkbox to avoid t
40. SL VPN Enter the desired Bookmark Name Enter the Name or IP Address of the resource you are trying to reach You can also use an IPv6 address select Terminal Services RDP ActiveX or Terminal Services RDP Java from the Services list SonicWALL SSL VPN 3 5 User Guide p 39 oN W Managing Bookmarks Step 4 Continue to configure the RDP ActiveX or Java Bookmark as follows Add Hookmark Bookmark Mame Activex DLLs Alar r IP Adis fin ee ed ey SEEE Terminal Serices ROP Activex Siren Sis E Mini BS Cois High Color 16 bit Aopke tion arad Pait Start in the flowing hadar Login as coneoleyacimin session W Enable wale on Laly MacfEthennet address 20 20 60 60 20 E0 Wal Eira tee beck bup scorch g C Send WOL packet to hast rame or IP address 7 Show chent redirect optons fe Acinic pinis fe Redirect parts gp enable plugin Olli E automata bog in T lise SSL VPN account cradentak Use custom credential Option m Redirect dives O Fukai Sirrimi Garii Usage Screen Size Select the default screen size to be used when users execute this bookmark It is advised that you select a size equal to or smaller than your current desktop screen size ActiveX RDP bookmarks also have a full screen option that will display the RDP window in full screen mode To toggle from the RDP window back to your desktop press Alt Tab Colors Select the default color d
41. VPN administrator e ls your email address correct If your email address has been entered incorrectly contact your SSL VPN administrator to correct it e Is there no email with a one time password Wait a few minutes and refresh your email inbox Check your spam filter If there is no email after several minutes try to login again to generate a new one time password e Have you accurately typed the one time password in the correct field Re type or copy and paste the one time password Troubleshooting Common Errors Symptom see an error message indicating that an email configuration is invalid and have verified that the One Time Password feature is configured correctly Possible Cause The SonicWALL SSL VPN One Time Password feature does not support email servers that require passwords or other authentication Your email server must allow anonymous access to allow the One Time Password feature to successfully send a one time password Using NetExtender The following sections describe how to use NetExtender e User Prerequisites section on page 23 e User Configuration Tasks section on page 24 e Verifying NetExtender Operation from the System Tray section on page 42 User Prerequisites Prerequisites for Windows Clients Windows clients must meet the following prerequisites in order to use NetExtender e One of the following platforms Windows 7 Beta Windows Vista 64 bit Windows Vista 32 bit Windows
42. Vista Service Pack 1 Windows XP Home or Professional Windows XP Service Pack 3 Windows 2000 Professional Windows 2000 Server Windows 2003 Server e One of the following browsers SonicWALL SSL VPN 3 5 User Guide p 23o oN amp Using NetExtender Ss Note Internet Explorer 6 0 and higher Mozilla Firefox 1 5 and higher e To initially install the NetExtender client the user must be logged in to the PC with administrative privileges e Downloading and running scripted ActiveX files must be enabled on Internet Explorer e Ifthe SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication then it is necessary to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page Prerequisites for MacOS Clients MacOS clients meet the following prerequisites in order to use NetExtender e MacOS 10 4 and higher e Java 1 4 and higher e Both PowerPC and Intel Macs are supported Prerequisites for Linux Clients Linux clients must meet the following prerequisites in order to use NetExtender e Linux Fedora Core 3 or higher Ubuntu 7 or higher or OpenSUSE e Sun Java 1 4 and higher is required for using the N
43. act SonicWALL Technical Support To contact SonicWALL telephone support see the telephone numbers listed below North America Telephone Support U S Canada 888 777 1476 or 1 408 752 7819 International Telephone Support Australia 1 800 335 1642 Austria 43 0 820 400 105 EMEA 31 0 411 617 810 France 33 0 1 4933 7414 Germany 49 0 1805 0800 22 Hong Kong 1 800 93 0997 India 8026556828 Italy 39 0 2 7541 9803 Japan 81 0 3 3457 8971 New Zealand 0800 446489 Singapore 800 110 1441 Spain 34 0 9137 53035 Switzerland 41 0 1 308 3 977 UK 44 0 1344 668 484 Note Please visit http www sonicwall com us support contact html for the latest technical support telephone numbers SonicWALL SSL VPN 3 5 User Guide Guide Conventions More Information on SonicWALL Products Contact SonicWALL Inc for information about SonicWALL products and services at Web _ http www sonicwall com Email sales sonicwall com Phone 408 745 9600 Fax 408 745 9300 Current Documentation Check the SonicWALL documentation Web site for the latest versions of all SonicWALL product documentation at http www sonicwall com us Support html Quick Access Work Sheet This section should be completed by your network administrator to allow remote users SSL VPN access Important Information You Need IP Address User Name Password Domain SonicWALL SSL VPN 3 5 User Guide Guide Conventions
44. ad Files in the navigation bar SonicWALL SSL VPN 3 5 User Guide p 99 N 4 Using Bookmarks Step 2 Click on the name of the file in the Filename column The File Download window displays Ide Download Security Warning E Xx Co you want to rum of cave this file i Blame MetEchrndlee L Windes 10 2ehupamen Type Appbcation Piom 10 067 89 Bun Tae Cera thin files bhom Hee nhera can Ges usrdul this ile bne ran polenta ham pour Computer IF you do not trust the pounce do mod mary ct are lhes tol eee eal g ra rk Step 3 Click Run to launch the file Click Save to save it to your computer Uploading Files To upload a file perform the following Step 1 Click Upload Files in the navigation bar The Upload FTP Files window will be displayed hltips TPG 79 Sonic WALL Firlual Oflice Picrosell Internet Explurer provided by Sumit WALL IMC SONICWALL P File Transfer Center Po S8aslGeid j Upload FTF Files F Atd New Srusi radal ATL A Files and Folders t G ml g Files Lipica Fili Upload les to SL MP AIMeTe en garnir ins n ne Halp Go bo dinalar Submit t L g uw FIP S ecion reas mew Tolmer HDA Upload Files Reoti fle lo uplead ot Pr grar Files vita Firat wir lenipeort Step 2 The current directory is displayed in the Upload files to field To navigate to a different directory enter the directory name in the Go to directory field To create a new folder in the c
45. aen TE vee ee a ee Re he se eed 98 Using Telnet Bookmarks 0 ccc ccc cette eee eee n et ne eens 101 USING SSrV I DOOKINGIKS siren eni TEE EATE EAT EAEE 102 WSING SSHV2 BOOKMAKS reei T E E A E EA owas 103 Using HTTP and HTTPS Bookmarks sci dix teae sh diiawiideaidek ees 104 Using File Share Bookmarks 0 0 ccc cece cee cent tee eeee 105 Using Citrix Bookmarks 4c du bac achat ata e Sa eo a hale hath hone oa eta eS 105 Global Bookmark Single Sign On Options 0 0 cece eee eee eee 108 Per Bookmark Single Sign On Options 0 0 cee cee eee eee eee 108 Logging Out of the Virtual Office 0 cee ccc ccc eee t net n eens 110 Aae Sansa AEE E E E T aus ie hs Baa ees 110 ITEM ILOG WY Obl aN yt eratea lariat acne Anode aes garde ae Aegis mand i 110 PF wv Og SonicWALL SSL VPN 3 5 User Guide Using This Guide About this Guide Note Welcome to the SonicWALL SSL VPN User s Guide This manual is a user s guide It provides information on using the SonicWALL SSL VPN user portal called Virtual Office that allows you to create bookmarks and run services over the SonicWALL SSL VPN security appliance Always check http www sonicwall com us Support html for the latest version of this manual as well as other SonicWALL products and services documentation Organization of this Guide The SonicWALL SSL VPN User s Guide organization is structured into the following parts Chapter 1 Virtual Office Overview Thi
46. alled you may be prompted to restart your device Click Yes In taling Neti xtender Mobile akha PRO CAG NetExtender ema Device restart is need to TA parpi the rebin Do you wish to restat the device mow SonicWALL SSL VPN 3 5 User Guide bp 53 4 Using NetExtender Step 5 From your Windows Mobile device launch NetExtender The NetExtender login screen displays i ea Fe et Ect enbet ce tm e ok Lonnechon Frofdes Grile Setlinga_ Provy Settings iad E i ki Step6 Enter the IP address or domain name for your SSL VPN server in the Server field The IP address of the last SSL VPN server you connected to is displayed by default To display a list of recent SSL VPN servers you have connected to click on the arrow Step7 Enter your username and password Step8 The last domain you connected to is displayed in the Domain field Step9 The pulldown menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password Step 10 Click Connect When NetExtender successfully connects the NetExtender Status window displays z gt PEEL mck erect pe Ti aji ok Status Connected Server ssvpneng sondcveal com Cent WP 106 128 1104 Sent 626 bytes Received 441 bytes Duration 0 Dave OO 00 24 e S
47. anged or if it has been previously viewed To refresh click the Refresh icon from the toolbar or use the Refresh option from the right click menu Note The remote network can be browsed from the remote window s address bar The local directory can not be changed from the address bar The remote path is capped at 1024 characters The actual maximum string size will change depending on language Step 5 To select multiple items click the items while holding the shift or the ctrl key Clicking on an item again will de select it and remove it from the group Step6 To copy a file or group of files either to or from the network select desired items and click and drag them across the center boundary This will copy the file s into the open directory Alternatively the file s can be copied directly into a folder by dragging the icon and dropping over the desired folder one could also use the copy button on the toolbar or use the copy option from the right click menu A progress bar displays the waiting time required to copy the files Copying Copang lie DSCU1SS7 IPG 7 A d SonicWALL SSL VPN 3 5 User Guide Using File Shares Wax Note The File Shares Applet supports overwriting existing files If a file exists with the same name as the one you are trying to copy over the Applet will prompt you to rename the file being copied If the name is kept the same the copied file will overwrite the existing one Step 7 Double cl
48. application is RDP 6 it also supports e Dual monitors e Font smoothing e Desktop composition Note RDP bookmarks can use a port designation if the service is not running on the default port To terminate your remote desktop session be sure to log off from the Terminal Server session If you wish to suspend the Terminal Server session so that it can be resumed later you may simply close the remote desktop window Step 1 Click on the RDP bookmark Continue through any warning screens that display by clicking Yes or Ok Wanneng Secunty o Xj The web site s certificate is invalid Do you want ta comin Barer I 0 a Publisher 10 067 69 O gias iri anien rom bi puil w The certificate cannot be vefed by a trusted source Orly conire iF menemene eee yiu Brunt the arian of the appia ora information Step 2 Enter your username and password at the login screen and select the proper domain name from the pull down menu 7 A d SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Step 3 A window is displayed indicating that the Remote Desktop Client is loading The remote desktop then loads in its own windows You can now access all of the applications and files on the remote computer Lie a sera EL HSRC BTN Dh pas s 00 0 64 441 Tetetrleal Sarikei MOPY Lillie Micron eC i e a poste De Feot ej PECTS SAN Mietuel HIE e Apresa Meade wait while the Bempe Desktop Javea Cieni inai
49. are fully removed from the original machine they were on These files are not sent to the recycling bin and are in no way recoverable Configuration Examples The following configuration examples provide a demonstration of the usefulness and flexibility of the File Shares Applet e Configuring Bookmarks from Within the File Shares Applet page 76 e Using Bookmarks from Within the File Shares Applet page 78 e Moving Files and Folders page 78 e Launching a File Directly from the File Shares Applet page 82 Configuring Bookmarks from Within the File Shares Applet Step 1 Step 2 Step 3 Navigating a remote computer s directory hierarchy structure takes a long time To reduce this process as much as possible the SonicWALL SSL VPN File Shares Applet allows the user to create bookmarks on the fly from within the File Shares Applet itself This allows the user to skip the hierarchy structure of the remote computer the next time she needs to access a particular file or folder Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal The File Shares Applet displays The File Shares Applet s default location for the local window is the base directory while the remote window shows the entire network Double click on the appropriate folders to navigate the local window to the desktop or another appropriate folder To navigate the remote window double click on a visible computer or input the nam
50. at Initiates a chat window with the technician e End Virtual Assist Terminates the session Using the Virtual Assist Taskbar The Technician s view of Virtual Assist includes a taskbar with a number of options ee ee ee ee ee OU O ee lt j CSS ae File Transfer Launches a window to transfer files to and from the customer s computer See the Using the Virtual Assist File Transfer section on page 64 for more information e System Info Displays detailed information about the customer s computer CF System Information Fie Cee View Tooke mep Syeletn Suny ikem Value Hehu Aramea OS Hama Minnat window AP Prednssicnal Conii ts hama Wenn 62 Senos Peck 2 Budd 20 HA DS Hanah Hiio Copar Fared Hace System Hama TWE IGANG MIPE ii DyHem Manual sche lit Ri Sirem Mawel eee System Type PEE hace PE Fia EAN ab Fandy b Medel 13 Slepe i Gena eri PTEE BIOS Wetsiceu Ll ane IBM TETEA w 1 27 Se A 2 Sollware Evora SHBIOS Version 23 a riara Sella ria Draca CoH Cas Diir HWE Amiin Susiem Dirriny EIN aS aema Daa Deve Weve H abel Volare Lice es Limied Slaied Hardee Shetaction Layer Venn a f 1 P00 PIED ppap spit a Uca Hare Trepar Time 2ore Facit Dagat Tie Teta Physica Hermy 1 024 10 HA ka gt Find what Close Fired Cl fench aniecied category ory Srch caingery ramea only e Reboot Reboot the customer s computer Unless you have Requested full control the customer will be warned about and given t
51. buwed Sites Soltrare Miisa You tan speci y wach we ches are shored bo melal sotma Type Ha cannot sires of the site you want konkre ancl then chek Albee Peddie of web site 10 0 93_ann Step 6 Return to the Virtual Office window and click NetExtender again Step 7 You may see a security warning Click Install Step 8 You may see a Web site certificate warning message Select the Accept this certificate permanently button and click OK Weira Lertilerd by an ahire AULAN irae ba y a any a a be a ud ba Penile pete for a cei TEJ Deore Goes non negroes the Gertie Ahan bat mood the bee oiie The i eee ie dhe eee i ia Tapae conre hoa a obs preterire bhg b JHI 2G TOO 0 pohly bo oben pa Piadas iiy chee uhat mabre mre hes priim Bama wbi Tha ea yous dhl aea the a cere toes Se yo mrg in be areari this cerbfieate fox Hen campeon ol kieetfiirey Ha Wah abe 152 E J Temir Certiicata CO Aiet tho etie im Dh Aep tha patice tenperanfiy For Cher pepan CI Dera ai the orie d de not orri to ther Web abe cet 7 6 d SonicWALL SSL VPN 3 5 User Guide Step9 You may see a Security Error Domain Name Mismatch warning Click OK Security Error Domain Name Mismatch You have athenpted to establish a connection with 10 202 4 40 However the security certificate presented belongs to 192 168 200 1 Itis possible though unlikely that someone may be trying to intercept your communication with this web site
52. by default on other browsers and also works with IE Enabling this checkbox leverages this portability For RDP ActiveX RDP Java and FTP select the box next to Use SSL VPN account credentials to log in to use SSL VPN account credentials to log in Leave the box unchecked to use custom credentials for each bookmark login For SSHv2 you must have SUN JRE 1 4 or 1 5 and must be connecting to a server that supports SSHv2 There are also options to Automatically accept host key and to Bypass username The bypass option should only be used for SSHv2 servers that do not require authentication in the initial connection session such as SonicWALL security appliances For HIT TP S bookmarks you can select Use SSL VPN account credentials to log in or configure custom credentials for use with Single Sign On To disable the use of SSO clear the Automatically log in checkbox Click Add to add the bookmark Once the configuration has been updated the new bookmark will be displayed in the Virtual Office Bookmarks table Click on a bookmark description to go to the bookmark location that you have defined Configuring RDP ActiveX and Java Bookmarks Step 1 Step 2 Step 3 ActiveX and Java RDP bookmarks offer several features that are not available in other bookmarks The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with SonicWALL S
53. cWALL SSL VPN 3 5 User Guide p 9 oN Step 1 Step 2 Step 3 Step 1 Step 2 Step 3 Step 1 Step 2 Step 3 Step 4 Note Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 4 Managing Bookmarks Determining the Remote Computer s Full Name or IP Address Complete the following steps to determine the full name of the computer to which the RDP bookmark is pointing Right click on the My Computer icon on the desktop of the remote computer and select Properties Click the Remote tab The full computer name will be listed under Remote Desktop Complete the following steps to determine the IP address of your computer In the Windows Start menu on the remote computer navigate to Run Type cmd to open the command interpreter and click OK Type ipconfig The IP address of your computer is displayed Configuring Remote Desktop Access on the Remote Computer Complete the following steps to allow remote desktop access to the computer that is the target of the RDP bookmark Right click on the My Computer icon on the desktop and select Properties Click the Remote tab Under Remote Desktop select the checkbox for Allow users to connect remotely to this computer Click OK Editing Bookmarks You can change the IP address domain name or IPv6 address as well as the service and other settings associated with an existing bookmark Only user created Bookmarks can be edited or deleted by the user Global or Group Boo
54. ck protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall The server can be specified either by name or by IP address for example moosedc or 10 50 165 2 For names to work it is necessary that DNS and or WINS be properly configured by the administrator on the SSL VPN appliance to be able to resolve host names ay SonicWALL SSL VPN 3 5 User Guide Using File Shares Wax To create a file share perform the following steps Step 1 Click on the File Shares button Virtual Office displays a dialog box that provides a hot link to a login prompt SP tee AOLA a Sork WALL Virtaal iee Merilla Fiolin la Se a Preko pereita the he ho eee amp a ei Check hera for gpa unt i iki towed Address My Hevarark Places e m irin biaa L Serene s 4 Para a ee GP tides iishe Login d Note Pop up window blockers may prevent File Shares from functioning properly Configure your browser to allow pop up windows on the SSL VPN portal site Step 2 To specify a new share path as an example moosedc in the Address field You need to precede the share name with two back slashes For example file directory01 example com Step 3 To connect to a pre existing file share click the
55. connected ae Drowa sheared thes E Bipini somecce bey access files in the local network You ae Click in connect a nyp erepernie baang eamin ri ther Can abo OMY hies irmi YUM ie mote Note When using the Virtual Office with the admin username the Logout button is not displayed This is a security measure to ensure that administrators log out of the administrative interface and not the Virtual Office Trademarks SonicWALL is a registered trademark of SonicWALL Inc Microsoft Windows 98 Windows NT Windows 2000 Windows XP Windows Server 2003 Windows Vista Windows 7 Internet Explorer and Active Directory are trademarks or registered trademarks of Microsoft Corporation Netscape is a registered trademark of Netscape Communications Corporation in the U S and other countries Netscape Navigator and Netscape Communicator are also trademarks of Netscape Communications Corporation and may be registered outside the U S Adobe Acrobat and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the U S and or other countries Other product and company names mentioned herein may be trademarks and or registered trademarks of their respective companies and are the sole property of their respective manufacturers Limited Warranty SonicWALL Inc warrants that commencing from the delivery date to Customer but in any case commencing not more than ninety 90 days after the original shipment by Son
56. ct Explorer 5 x SG This site might require the follwing ActiveX conrad Cire i web Cent from C iri Syabas Tre M Choke here to rainl Please wait while the Citrix Web Client is installed After unstallation vou will be automatically neadlirected to the Citns portal SonicWALL SSL VPN 3 5 User Guide bp 105 N 4 Using Bookmarks Step 4 Click Yes to the Security Warning message that is displayed Step 5 The Citrix Web Client installs a a2 Citrix Web Client InstallShield Wizard Exttachng Files The coments of thet package are bery extracted r 106 d SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Step 7 When the Citrix Web Client has installed click OK If the Citrix Web Interface login window does not display restart your Web browser and launch the Citrix bookmark again Citrix Web Client E E j Setup completed successfully You may need to restart your web browser to activate changes Step 8 Enter your username password and domain in the Citrix Web Interface login window sipiy Web Interface law CITRIX for MetaFrame Presentation Server 5 Welcome Please lon in to log in to MetaFrame Presentation Server enter the credentials Password neque and then chek Log In If you do not know your log in information please contact your halp Drone ek or syal scm trator al Message Center Advanced Optone gt
57. ct bat checkbox To enable the script that runs when NetExtender disconnects select the Automatically execute the batch file NxDisconnect bat checkbox To hide either of the console windows select the appropriate Hide the console window checkbox If this checkbox is not selected the DOS console window will remain open while the script runs Click Apply Configuring Batch File Commands NetExtender Connection Scripts can support any valid batch file commands For more information on batch files see the following Wikipedia entry http en wikipedia org wiki bat The following tasks provide an introduction to some commonly used batch file commands To configure the script that runs when NetExtender connects click the Edit NxConnect bat button The NxConnect bat file is displayed To configure the script that runs when NetExtender disconnects click the Edit NxDisconnect bat button The NxConnect bat file is displayed By default the NxConnect bat file contains examples of commands that can be configured but no actual commands Too add commands scroll to the bottom of the file To map a network drive enter a command in the following format net use drive letter server share password user Domain name For example to if the drive letter is z the server name is engineering the share is docs the password is 1234 the user s domain is eng and the username is admin the command would be the following net
58. d click Add Step5 Click Ok in the Trusted Sites and Internet Options windows Installing NetExtender from Internet Explorer To install and launch NetExtender for the first time using the Internet Explorer browser perform the following Step 1 Log in to the SSL VPN Virtual Office portal SonicWALL SSL VPN 3 5 User Guide WE 4 Using NetExtender Step 2 Click the NetExtender button ify NetExtender s r Msconnected Click to connect Step 3 The first time you launch NetExtender you must first add the SSL VPN portal to your list of trusted sites If you have not done so the follow message will display SONICWALL Seep EFS TT MetExtender has detected that Microsoft Intermet Explorer is running in Protected Mode In order to launch Nele demier you hare lo add ihe SSL VPN server address mlo trusted sies 854 inviroctiows fo ail SS VEN server arees iaio usien sie gt Coapiright i 20 fonaniwail tren 7 30 d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Step 4 Click Instructions to add SSL VPN server address into trusted sites for help Step 5 Step 6 Step 7 p th ici ia tial yf Page ioo e Step 1 Chk memene Options Pee X oT ele ie i E F Ail r ap tem Tram E Fools menu a moi Deki Erwig Hitit i LEJA Lone cee Pi abileri E Pom up Backer r Phisheng Filter b Minige Add in k Work Olfline d Windmas Update Full S reen FLH
59. e SonicWALL SSL VPN Virtual Office using VASCO two factor authentication perform the following steps Step 1 Enter the IP address of the SSL VPN appliance in your computers browser The authentication window is displayed Beer Marrie erara Password ee Comair VASCO_AUTH ta Step 2 Enter your username in the Username field 7 0 d SonicWALL SSL VPN 3 5 User Guide Using One Time Passwords W amp Step 3 Enter the passcode in the Password field The passcode is the user PIN and the VASCO Digipass token code For example if the users PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 Step 4 Select the appropriate Domain Note If manually entering the Domain it is case sensitive Step 5 Click Login Using One Time Passwords The following sections describe how to use one time passwords e User Prerequisites page 21 e User Configuration Tasks page 21 e Verifying User One Time Password Configuration page 23 e Troubleshooting Common Errors page 23 User Prerequisites Users must have a user account enabled in the SSL VPN management interface Only users enabled by the administrator to use the One Time Password feature will need to perform the following configuration tasks The administrator must enable a correct email address that is accessible by the user Users cannot enable the One Time Password feature and they must be able to access the SSL VPN Virtual Office portal
60. e e a becody rati mia o Ta ey LE wee a Dy a Copy pou See a adden O mal Vs ee Cairn ie j e aa p aoe ko pum Pa ppt maig 4 ha peca of mrtg la on ct 6 Te Appel aap ah oie ts LS i a ee Peg a ee F a pipe pow Hi Fed 2 rere Le yau eed fi pec te Le ime Cather The SonicWALL SSL VPN Management Interface displays and prompts you to enter your user name and password As a default value enter admin in the User Name field password in the Password field and select a domain from the Domain drop down list and click the Login button Only LocalDomain allows administrator privileges Note that your administrator may have set up another login and password for you that has only user privileges SONICWALL 3 Virtual Office Welcome to the SonicWALL Virtual Office GonicVWALL Virtual Office preades secure memet access for remote users to fog in and access private network resources via SSL VPH technology Wena OO Dona Local Domain H aly SonicWALL SSL VPN 3 5 User Guide Web Management Interface Overview W amp The default page displayed is the Virtual Office home page The default version of this page shows a SonicWALL logo although your company s system administrator may have customized this page to contain a logo and look and feel of your company Go to the Virtual Office Overview page 9 to learn more about the Virtual Office home page Note From the Virtual Office portal home page you cannot navigate to the administrator s
61. e in the address bar preceded by and followed by a and press Enter The File Shares Applet will then navigate to the requested computer It may take several seconds for the resources to load depending on the network configuration hates 0 My Computes Bernt irei A ra E T a ra fa ai Fiii puri s CiteSeer aed rga a ah aries if j te z o Thee oo fae peat bo Uet iuri rite kaion Rau Baier Faira08 Ta i rapes hl Heede Heel Pesce Mego a et EZS 7 G d SonicWALL SSL VPN 3 5 User Guide Using File Shares W amp Step 4 Once loaded double click on a folder or enter the target directory path within the address bar This can take some time as the File Shares Applet must browse through the network after every change Note Only the remote window can use the address bar to navigate through a computer s file hierarchy Step 5 To set a bookmark to the current directory right click in an empty location in the remote directory and select Add Bookmark Note To set a bookmark for a specific file or folder select it prior to selecting Add Bookmark from the right click menu SS Mr Compuses Go0G Gm iH 808 Oi ig Wiem T Doomen ond aig hha Diesiing atari reg ase F cider Pies Pole Step 6 Enter a name for the new bookmark in the New Bookmark window that displays COA File Shares m WwW gt a iit E pi en W en S li We Bockraks Eieren and Sennen haa Leribe Hian enga eae i oleler M
62. edirect ports Redirect smartCards Redirect clipboard and Redirect plug and play devices as well as any of the following additional features for use in this bookmark session Display connection bar Auto reconnection Desktop background Window drag Menu window animation Themes or Bitmap caching If the client application will actually be RDP 6 Java you can select any of the following options as well Dual monitors Font smoothing Desktop composition and Remote Application Enable Plugin Dlls Enter the name s of client DLLs which need to be accessed ActiveX only by remote the desktop or terminal service Multiple entries are 6 99 separated by a comma with no spaces Make sure any DLLs are located on the individual client systems in SYSTEMROOT for example C Windows system32 Note The RDP Java client is a native RDP client and supports Plugin DLLs by default Automatically log in Check this option and select Use SSL VPN account credentials to forward credentials from the current SSL VPN session Select Use custom credentials to enter a custom username password and domain for this bookmark Ad Tip The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with SonicWALL SSL VPN Step 5 When you are finished Click the Add button to add this bookmark to your Virtual Office list Soni
63. ep 7 Check the Use File Shares Java Applet box to enable the File Shares Applet for this bookmark Leaving this box unchecked means the portal will launch the original HTML browser when the bookmark is selected Step 8 Optionally select Automatically log in to log in to this file share using either your SSL VPN credentials or by specifying custom credentials Step9 Click Add Bookmark serve as useful shortcuts to quickly access different network locations Bookmarks can also be set up from the File Shares Browser either by clicking the Bookmark button or using the bookmark option from the right click menu 7 R2 d SonicWALL SSL VPN 3 5 User Guide Using File Shares Wax Using the Java File Shares Applet Step 1 Step 2 Step 3 Step 4 While loading the browser interface warning messages might display These messages will look different for different browsers For the purpose of these examples Internet Explorer 6 0 was used If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain pull down Click Login Launch File Shares Applet by clicking the File Shares button or clicking on a link with the File Shares Applet enabled The File Shares Applet will launch in a new windo
64. epth to be used when users execute this bookmark Application and Path Start in the following folder To have the RDP session launch an application when the bookmark is initiated enter the path to the application in the Application and Path optional field For example C Program Files Example app exe optional Enter the local folder to execute application commands in optional Login as console admin session Check this option to enable console and admin commands on login ay SonicWALL SSL VPN 3 5 User Guide Managing Bookmarks W amp Option Usage Enable Wake on LAN Select this option to send WoL packets to the host This option also allows entering one or more Mac Addresses separated by spaces for the machines to wake and the desired Wait time for boot up before cancelling the WoL operation To send the WoL packet to the hostname or IP of this bookmark check the Send WOL packet to bookmark host Name or IP address checkbox this option can be applied in tandem with a Mac address Redirects ActiveX only Optionally expand Show windows advanced options and select any of the redirect checkboxes Redirect printers Redirect drives Redirect ports or Redirect smartCards to redirect those devices on the local network for use in this bookmark session Redirects Java only Optionally expand Show windows advanced options and select any of the redirect checkboxes Redirect printers Redirect drives R
65. er temp OOOO E E BB g statun Connected fever 1AM Aig Cilem gt 192 158 251 1 Fytes Sent 168 bytes File Hame PENT 1 Ryies Receivewt 118 Bytes keea SSS BE Files of Type All Piles w Duro 000k r Fs A diagnostic repon has been created ac homes mk rediag ce ox Copyrig ho 2008 SonicWALh Inc Step 13 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory 7 52 d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Installing and Using NetExtender for Windows Mobile Note Step 1 Step 2 Step 3 Step 4 SonicWALL SSL VPN now supports NetExtender for the Windows Mobile platform NetExtender for Windows Mobile provides the following features e One time passwords e Two factor authentication e HTTP proxy e Connection profiles NetExtender supports the following Windows Mobile platforms e Windows Mobile 5 PocketPC version e Windows Mobile 6 Professional Classic version Windows Mobile 5 Smart Phone version and Windows Mobile 6 Standard version are not currently supported To use NetExtender on your Windows Mobile device perform the following tasks Navigate to the URL or IP address for your SSL VPN Virtual Office using the browser in your Windows Mobile device Log in with your username and password Click on the NetExtender icon Follow the on screen instructions to install NetExtender When NetExtender is inst
66. es Lode Hew Hookrmark SonicWALL SSL VPN 3 5 User Guide A 7 3 amp Using File Shares Step 7 Click OK The bookmark is added to the Virtual Office portal Clicking on the bookmark accesses the selected folder or file Using Bookmarks from Within the File Shares Applet In Addition to accessing bookmarks from the Virtual Office portal bookmarks can be easily accessed from within the File Shares Applet Step 1 Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal Step 2 Click on the Bookmarks button on the task bar in the remote window A pull down menu displays with the message Loading Bookmarks Keep the mouse within the pull down menu as the File Shares Applet loads the bookmarks rile Shares bss f be Enine jeie yi SLOOODRED jit SURDFAMELY bay CRAG by CHINAS HO a GOLD hal GENS pi MOLLOACAT het LATTEDEY a MATT bly MATESI ty MSWOUTE ay rniu bly HE ay MN WwOREGADLE ai Ozee yg Gh pate HOD hate PALL SINE SS hay POMC ALL jets STAGE aG STAALIGHT a4 mum fW ru Step3 Once loaded click book mark to load the desired file or folder z OG Uk amp Endre Metak 40 A BLOGUDRED Moving Files and Folders The File Shares Applet is designed for ease of use There is more than one way to perform file transfers 7 B d SonicWALL SSL VPN 3 5 User Guide Using File Shares W amp This section provides an example of
67. et Tips Help What is Wetextender NelEstender creales a secure network Dick a pre defined boolonark or creabe your oem to securely access a corporate ruebengris connection allows you lo acess resqurce NehiOrk tespitte Servers and P W if H me E Fia TE TLE E F i fi Launch WetEstender lo create a secure nebeork connection to the corpurale netwurk for websiles as if you were on the loca NETTIE What is File Shares full network access NetExtender ees File Shares Virtual Assist Fie Shares allows you to remotely P Hecamede an E aei Euge slep jips 1 Artza Rita Ery ACCESS Hes ifi ie F al near a Ot Citti Connect ae Of your cerpadle baaa Oring co Tii can aise copy fies from your remote ies a compare computer to the ocal network Step2 Under Single Sign On Settings select Use SSL VPN account credentials to log into bookmarks to enable SSO for bookmarks Leave the box unchecked if you do not want to use SSO for bookmarks User Options Single Sign On Settings FP eubornesticaly leg inte becker prre Step 3 Click Save to save your changes Note Fileshares will use the configured domain name of which the user is a member to supply to the backend server HTTP HTTPS FTP RDP ActiveX RDP Java will supply the username and password that was used to login If the server is expecting a domain prefixed username SSO will fail In some cases a default domain can be specified at the server to allow SSO t
68. etExtender GUI Open source Java Virtual Machines VMs are not currently supported If you do not have Sun Java 1 4 you can use the command line interface version of NetExtender User Configuration Tasks SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network drives upload and download files and access resources in the same way as if they were on the local network The following sections describe how to use NetExtender on the various supported platforms Windows Platform Installation e Installing NetExtender Using the Mozilla Firefox Browser section on page 25 e Installing NetExtender Using the Internet Explorer Browser section on page 28 Windows Platform Usage e Launching NetExtender Directly from Your Computer section on page 33 e Configuring NetExtender Preferences section on page 34 e Configuring NetExtender Connection Scripts section on page 36 e Configuring Proxy Settings section on page 38 e Viewing the NetExtender Log section on page 40 e Disconnecting NetExtender section on page 41 7 A d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx e Upgrading NetExtender section on page 42 e Uninstalling NetExtender section on page 42 e Verifying NetExtender Operation from the System Tray sectio
69. h connections From the other side the Tight decoder in TightVNC Java viewer is more efficient than Hextile decoder so this default setting can also be acceptable for fast networks Compression Level Default Use specified compression level for Tight and Zlib encodings Level 1 uses minimum of CPU time on the server but achieves weak compression ratios Level 9 offers best compression but may be slow in terms of CPU time consumption on the server side Use high levels with very slow network connections and low levels when working over higher speed networks The Default value means that the server s default compression level should be used JPEG image quality 6 This cannot be modified Cursor shape updates Enable Cursor shape updates is a protocol extension used to handle remote cursor movements locally on the client side saving bandwidth and eliminating delays in mouse pointer movement Note that current implementation of cursor shape updates does not allow a client to track mouse cursor position at the server side This means that clients would not see mouse cursor movements if the mouse was moved either locally on the server or by another remote VNC client Set this parameter to Disable if you always want to see real cursor position on the remote side Setting this option to Ignore is similar to Enable but the remote cursor will not be visible at all This can be a reasonable setting if you don t care about cursor shape and don
70. hat and file transfer SonicWALL SSL VPN 3 5 User Guide p 6 N amp Using Virtual Assist To launch a Virtual Assist customer session to request help on your computer perform the following steps Step 1 There are several methods for accessing Virtual Assist page Virtual Assist S Assist someone by Navigate to the URL of the Virtual Assist home page that is provided by your support technician If you received an email invitation click on the link in the email or paste the URL into your Web browser The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SONICWALL SSL VPN Login LF Par ar YS Tamet LocaiDomain dom Luh er badri aa Ragi pra l Yrki f Or you may need to login to the Virtual Office and click the Virtual Assist button taking control of their computer Step2 The File Download window displays and Virtual Assist attempts to automatically install Click Run to launch the program directly or click Save to save the installer file to your computer and then manually launch it fide Download Security Warning x Do you want to run of rave this file m Name nAdA bS Soft A gemin n Tipe Application Piom 10 202 440 __ fin sr i Whien files hnm the eters csn bes used this file bepa can Plenti ham pou computer i ygu do not tust the bucs do rol iun i arre bes tallveare hha a trea ek 7 6 d SonicWALL SSL V
71. he opportunity to deny the reboot e Request Control If the customer has switched to view only mode click the button to prompt the customer to give you control of their system again e Chat Launches the chat window to communicate with the customer The technician can also use the dedicated chat window in the bottom left window of the Virtual Assist application e Switch Customer Screen Switches to a second monitor if the customer s computer has more than one monitor configured SonicWALL SSL VPN 3 5 User Guide b 63o S 4 Using Virtual Assist e Request Full Control Allows the technician to reboot the system delete files or over write files on the customer s computer without the customer being prompted for permission first Request Pull Control Permission Grant Full onio pesievaion a ou wall not recane prompts Grice bo cartam actions such as file brarchers fF permisnon i granted E Cancel Using the Virtual Assist File Transfer The File Transfer window is used to transfer files to and from the customer s computer The file directory of the technician s computer is shown on the left and the customer s computer on the right E File Transfer with a VirtualAssisi TECHNICIAN MACHINE E E CUSTOMER MACHINE 4a Ei Path Pah CADgcumen and emmy ipollack Dethten uppat Hane Sate 7 Hame Sat de Riemeriable ee Dl Fokdor C Local Dick fri mag i ETE A rE Te b COAOM na epa 3 Eski
72. his window in the future Click Run ST x Do wou want to pun thii he Hama VASAC Aiie Tye Applirabian Piom iif am Pisoni ALL Bn e e Alaw ack before operig ihi file thin files ham tha nhera can Gees aardi this ile bene can Polentiaip ham ppu computer Onki nun polteane from publishers poa ul Whal lea ik Step7 If you launched Virtual Assist from an email invitation the application launches directly to the customer queue If you manually launched the Virtual Assist application or launched it from the Virtual Office the login window displays Virtual Arrist Login E E Xj e Login s 9 f Technician f Customer Assishonen Cade iF Rerpsiresd _ T rrd 1 Server i virtualsssit sonka com z ljue Description i opion LEEmHaT a iH cant apts ty weed Step 8 Enter the following information and click Login e Login As Select customer e Server The IP address IPv6 address or hostname of the SonicWALL SSL VPN appliance IPv6 addresses must be enclosed in brackets the and symbols e Username Enter your name Assistance Code If the technician provided you with an assistance code enter it here e Issue Description Optionally you can enter a brief description of your problem Step 9 Click Login The Virtual Assist standalone application launches ay SonicWALL SSL VPN 3 5 User Guide Using Virtual Assist Wax Step 10 If you receive the following security alert click Unb
73. hold down the Ctrl button while clicking on the files Controlling the Virtual Assist Display Request Refresh Refreshes the display of the customer s computer e Full Screen Hides all of the Virtual Assist toolbars and displays the customer s desktop on the technician s entire screen with the Virtual Assist taskbar in the top left corner y Bookmarks fools help th i hesian nea sea ep ae p a earls Lat If the Virtual Assist taskbar doesn t display move your mouse to the top middle of the screen Right click on the taskbar and click Restore to exit full screen mode e Auto Scaling Zooms the display to fill the entire Virtual Assist window e Zoom Zooms the display to one of several presets or allows you enter a specific value e True Size Zooms to 100 e Side Bar Toggles the display of the side bar with the email invitation and chat windows e Top Bar Toggles the display of the top bar with the customer queue and toolbar e All Bars Displays both the side bar and top bar e No Bars Hides both the side bar and top bar Note A number of these options can be configured from the pull down menus at the top of the Virtual Assist application Using Virtual Assist from the Customer View Note SSL VPN release 3 5 introduces Virtual Assist customer support for Mac systems The Mac verison of Virtual Assist supports only the basic connect and control features and not advanced features such as c
74. hove NetFetender Rotes T S500 m 10 500 mm f t0 200 0 0 255 154 0 0 TESA Bsa F Step 11 To configure NetExtender options click the Menu button The following options are displayed 7 54 d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx e Connection Profiles Displays all of the NetExtender connections that you have used on this device To remove a Connection Profile highlight the profile click the Menu button and click Remove n het eres T 4 Tonin Frieden SSW Server Oona User goni WEE ne BNO sore FAM Fel Hie Ha Ezlemia when ke varias _ Cespley prense number m status ge Cerro Manager bo stabit thE unea orel H Enable hete tender log E Giver wre ie pes keg elie L Ast terier sharks Cancel Hide NetExtender when closing window Hides NetExtender when you click the ok button Display precise number in status Displays the exact numbers of sent and receive data Use Connection Manager to establish underlying connections Uses the Windows Mobile Connection Manager to establish the device s connection to the mobile network The Connection Manager is designed to determine the optimum network type such as 3G or wi fi If this option is disabled the user manages the connection manually Enable NetExtender log Records log entries for NetExtender events Overwrite the previous log when NetExtender starts Maintains a single NetExtender log f
75. icWALL and continuing for a period of twelve 12 months that the product will be free from defects in materials and workmanship under normal use This Limited Warranty is not transferable and applies only to the original end user of the product SonicWALL and its suppliers entire liability and Customer s sole and exclusive remedy under this limited warranty will be shipment of a replacement product At SonicWALL s discretion the replacement product may be of equal or greater functionality and may be of either new or like new quality SonicWALL s obligations under this warranty are contingent upon the return of the defective product according to the terms of SonicWALL s then current Support Services policies ay SonicWALL SSL VPN 3 5 User Guide Logging Out of the Virtual Office Wax This warranty does not apply if the product has been subjected to abnormal electrical stress damaged by accident abuse misuse or misapplication or has been modified without the written permission of SonicWALL DISCLAIMER OF WARRANTY EXCEPT AS SPECIFIED IN THIS WARRANTY ALL EXPRESS OR IMPLIED CONDITIONS REPRESENTATIONS AND WARRANTIES INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE NONINFRINGEMENT SATISFACTORY QUALITY OR ARISING FROM A COURSE OF DEALING LAW USAGE OR TRADE PRACTICE ARE HEREBY EXCLUDED TO THE MAXIMUM EXTENT ALLOWED BY APPLICABLE LAW TO THE EXTENT AN IMPLIED WARRANTY
76. ick on a file to launch it with the proper application If activating a file on the remote machine the File Shares Applet will first download the file to a temporary folder on your machine and then open it Note The File Shares Applet will not always be able to delete the temporary file after use Use caution when opening files with sensitive material File opened in temporary directory be sure to save any modifications in an accessible location File saved under C DOCUME haliLocalse 1 Tempy Stolen vehicle Why File Shares Applet Browser Overview Each window local and remote contains a set of buttons for commonly used operations in the toolbar Hovering the mouse cursor over these icons displays convenient tool tips to the user Dragging the toolbar by the dotted line on the left side of it undocks the toolbar into its own window To re dock the toolbar close the window These are the same functions as those in the right click menu Here is a list of the buttons on the task bar and their respective function e Back Traverses back in the history Sets the current view of the window to the previous location in history This icon is dimmed if there is no previous history location e Forward Traverses forward in history This icon is dimmed if there are no forward locations in history e Up Traverses up the directory tree to the parent directory of the current view This icon is dimmed if the current view is of the root di
77. ile that is overwritten with each new NetExtender session Disabling this option will create a separate log file for each NetExtender session SonicWALL SSL VPN 3 5 User Guide b 55 amp Using Virtual Assist e Proxy Settings Provides the ability to manually specify a proxy server E z AetEMbencr y Lee Pray Sener Pot ac Liser Camiel Related Documents The following Technical Notes provide more information on advanced NetExtender scenarios e Running NetExtender on a Different TCP Port e Using the SonicWALL CDP Agent over a SonicWALL NetExtender Connection e Using SonicWALL NetExtender to Access FIP Servers e Resolving NetExtender Error With McAfee Enterprise 8 5 Using Virtual Assist Virtual Assist is an easy to use tool that allows SonicWALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Virtual Assist is a lightweight thin client that installs automatically using Java from the SonicWALL SSL VPN Virtual Office without requiring the installation of any external software For computers that do not support Java Virtual Assist can be manually installed by downloading an executable file from the Virtual Office Before using Virtual Assist you must meet the following requirements e Virtual Assist is only supported on deployments utilizing the SSL VPN 2000 SSL VPN 4000 and SRA 4200 platforms e Virtual Assist is only su
78. ing NetExtender on MacOS Step1 To launch NetExtender go the Applications folder in the Finder and double click on NetExtender app tonk WALL NetExtender SONICWALL gt SSL VPN Netextender SSL VPN Server sslvpn com User Name jp Pataword rrtet Bomaln s us sonicwall com Save profile Save name and password if allowed H Copyright 2007 SonicWALL Ime Step2 The first time you connect you must enter the SonicWALL SSL VPN server name in the SSL VPN Server field Step3 Enter your username and password Step4 The first time you connect you must enter the domain name Step5 Click Connect Step6 You can instruct NetExtender remember your profile server name in the future In the Save profile pulldown menu you can select Save name and password if allowed Save username only if allowed or Do not save profile SonicWALL SSL VPN 3 5 User Guide Wa 4 Using NetExtender Step 7 When NetExtender is connected the NetExtender icon is displayed in the status bar at the top right of your display Click on the icon to display NetExtender options T 4 Ce Thu 11 03 AM i Show NetExtender Window Connection Status Routes gt Disconnect Quit L hsasnsasasatl Step 8 To display a summary of your NetExtender session click Connection Status Step 9 To view the routes that NetExtender has installed go to the NetExtender menu and select Routes Routes Available Routes 1 10 0 0 0 255
79. ing into the SSL VPN Virtual Office Using RSA Two Factor Authentication To log in to the SonicWALL SSL VPN Virtual Office using RSA two factor authentication perform the following steps Step 1 Enter the IP address of the SSL VPN appliance in your computers browser The authentication window is displayed ame eCara Gomair Raa AL H ha 7 8 d SonicWALL SSL VPN 3 5 User Guide Using Two Factor Authentication Wax Step 2 Enter your username in the Username field Step3 The first time you log in to the Virtual office your entry in the password field depends on whether you have been given a PIN or if you need to create the PIN lf you already have a PIN enter the passcode in the Password field The passcode is the user PIN and the SecurID token code For example if the user s PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 If you do not have a PIN enter the SecurlD token code in the Password field Step 4 Select the appropriate Domain Note If manually entering the Domain it is case sensitive Step5 Click Login Creating a New PIN The RSA Authentication Manager automatically determines when users are required to create a new PIN will determines that user associated with a particular token requires a new PIN The SSL VPN appliance prompts the user to enter new PIN Step 1 Ifthe user is configured for the Allowed to Create a PIN option users are first asked if they wa
80. ion is automated since creating an external domain creates a corresponding local group However when working with external users a local user entity must exist so that any user created personal bookmarks can be stored within the SSL VPN s configuration files The need to store bookmarks on the SSL VPN itself is because LDAP RADIUS and NT authentication external domains do not provide a direct facility to store such information as bookmarks Rather than requiring administrators to manually create local users for external domain users wishing to use personal bookmarks SonicWALL SSL VPN automatically creates a corresponding local user entity when an external domain user logs in to the Virtual Office The following sections describe basic bookmark tasks e Adding Bookmarks section on page 88 e Editing Bookmarks section on page 92 e Removing Bookmarks section on page 93 SonicWALL SSL VPN 3 5 User Guide bp 87 oN WY Managing Bookmarks Adding Bookmarks Bookmarks provide a convenient way for you to access Web FTP or other services on the remote network that you will connect to frequently To define bookmarks perform the following Step 1 Welcome to the SonicWALL Virtual Office SonicWALL Virtual Office provides secure Internet access for remote users fo log in and access private network resources via SSL VPN technology Click a pre configured bookmark or create your own to gain secure Internet access to i
81. ity risk The Web site could install certificates you do not trust which could allow programs that WOU do mot trust to run on this computer and gain access to your data Do wou want this program to add the certificates now Click Yes iF you trust this Web site Otherwise click No SonicWALL SSL VPN 3 5 User Guide Wa 4 Using Two Factor Authentication Using Two Factor Authentication The following sections describe how to log in to the SSL VPN Virtual Office portal using two factor authentication e User Prerequisites on page 18 e User Configuration Tasks on page 18 User Prerequisites Before you can log in using two factor authentication you must meet the following prerequisites e Your administrator has created your user account e You have either an RSA SecurlD token or a VASCO Digipass token User Configuration Tasks The following sections describe how users log in to the SonicWALL SSL VPN appliance using the two types of two factor authentication e RSA User Authentication Process on page 18 e VASCO User Authentication Process on page 20 RSA User Authentication Process The following sections describe user tasks when using RSA two factor authentication to log in to the SonicWALL SSL VPN Virtual Office e Logging into the SSL VPN Virtual Office Using RSA Two Factor Authentication on page 18 e Creating a New PIN on page 19 e Waiting for the Next Token Mode on page 20 Logg
82. kmarks pre defined by the administrator cannot be edited or deleted To edit a bookmark to change its name or associated IP address perform the following steps Identify a bookmark in the Virtual Office Bookmarks list for which you want to change an IP address or domain name or other settings In the Virtual Office Bookmarks list click on the Configure icon for an existing bookmark The Edit Bookmark dialog box displays To change the bookmark name domain name or IP address of the bookmark edit the names in the Bookmark Name or Name or IP Address fields To change the service select a new Service from the pull down menu Optionally change other settings specific to the Service type Optionally enable or disable the Automatically log in setting or change the credentials selection 7 R2 d SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Step 7 Click Apply The Virtual Office home page displays with the new IP address or domain name Removing Bookmarks To remove a bookmark perform the following steps Step 1 Identify a bookmark in the Virtual Office Bookmarks list that you want to remove Step 2 In the Virtual Office Bookmarks list click on the delete icon for the bookmark you want to remove The bookmark disappears from the list Caution No warning message is displayed after you click the delete icon The bookmark will be deleted immediately Using Bookmarks The following sections describe how to
83. lders and for files A file bookmark will not launch the Applet but instead will download and launch the file directly Bookmarks must be enabled by the administrator To set up bookmarks from the Virtual Office Portal perform the following steps Step 1 Open a Web browser and log into the SSL VPN Virtual Office interface by typing the URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain pull down Click Login SonicWALL SSL VPN 3 5 User Guide p 7 oN amp Using File Shares Step 2 Click the Show Edit Controls link in the middle of the portal page Step 3 Click the New Bookmark tab in the portal page Welcome to the SonicWALL Virtual Office SonicWALL Virtual Office provides secure Memet access for remote users lo log in and access pnvale nelwork resources Via SSL VPN technalacdy Gick a pre configured hookmark or create your Gwn fo gain Secure interet access to intemal corporate resources Launch NelEewtender lo creale an SSL VPN tunnel lo your corporale network for full network access Virtual Assist Ae Sameer By feng conira of lher homer NetExtender ag isronnecten Teck lo ioniad dae File Shares S krase shanna a On YUU pai purdle netancerk Hide Feit Camala Mibookmarks Web hiles New Bookmark Create a naw boukmait 5 FIP Eagle oe ranite Protect WF Use
84. le Directly from the File Shares Applet Files can be launched from within the File Shares Applet This section provides an example where a remote file is queried for its properties bookmarked and opened Step 1 Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal Cb Remote Network GOR FG i W ot etree Step 2 Right click the file and select Properties ay SonicWALL SSL VPN 3 5 User Guide Using File Shares Wa The file s properties will be displayed in a separate window Remote Network 8 TA a amp Wee Bookmarks aaar E TAER z i afi ling JE a bet Hamasaki Ayumi BLUE BIN avi Pr aed Hamasaki Ayumi BLUE AIRD a Location atlande lempaHamacahaAgum Size 100TH I bytes Last Modiied Fridun 16 05 4050 POT 2006 Allies l Zinken ehize whi Thumbid P Meas 2 E Mba Step 3 To open the file double click on the file Alternatively create a bookmark to it and launch the file from the bookmark menu To create a bookmark select the Add Bookmark option from the right click menu The name of the file is the default name of the new bookmark but a new name can be entered if so desired t9 Rernaie Netecrk T 7 UH Wie Maii ffedentinlemp e E TERY m mi rt a aula ob mnnm iri blank ng PFN ii aa Aiea Hookmark Hew Dischumaaric Harna Hanasaki fume ELUE BRD an mm ee aii
85. lock to allow Virtual Assist traffic through the Windows firewall i Windows Security Aler R ai To help protect sour computer Window Firewall hai Hocked VP euw lenalures ol Chee pie oo Do pou sant to keep blocking thn program Publisher lrir keen iht fk Meta fincas Firewall hes blocked this pengees hom serepin ennnecione from thn Weare ce Greek Tl iu pegs the Hogiien or niet Se publi pou can narduoch i When steal urdiost i piega Step 11 A pop up window indicates that you are in the Virtual Assist queue The technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request x A Technicians wil bes arala bo leek po kh You R map cancel pour mguest amtie by clicking thn Cancel Request butoi aA Your tunert ine n gusua m efi Cancel Step 12 When the technician initiates the session the Virtual Assist toolbar appears in the bottom right of your screen The technician now has control of your computer sie ern Virtual Assist __ P 7 Oi Er PM Note During a Virtual Assist session you are not completely locked out of your computer Both the technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time You can resume control when the technician is not actively typing or moving the mouse And you can end the session at any time by clicking the End Virtual Assist bu
86. men anonymous Ondine Help Passownrid Seress Ligii Dya HANE bo Wie ir asl WPA Faba ier Aarme Gnd Peg pond Sulenil HOA oF f Step 2 Enter your username and password If you want to use your Virtual Office username and password simply leave the fields blank 7 B d SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Step 3 Click Submit An FTP session displays OOO FIF fetilin E Ea Steere Miles and Folders eri Pah ni s Go to EE mnie lt lt directory APER ji _ Utility Logout Cle arr Iia Data tu Create new z S folder Utility atr Vey i eas ae ates Delete CI ry Marked oy oi Faia Fe aii mus 3 F 25 emen z ee Rename Liban Siren eee ee iplis harked ae TTL Step 4 You can use the following utilities in the FTP site To manually navigate to a folder enter the folder name in the Go to directory field and click Submit To create new folders in the directory use the Create new folder fields To delete multiple files click in the checkboxes of files or folders you want to remove and click Delete Marked To rename a file or folder click in the checkbox of a file or a folder and click Rename Step 5 To initiate another FTP session click the Add New Session button To return to the initial FTP session click the link for it in the form username ipaddress under the Add New Session button Downloading Files To download a file perform the following Step 1 Click Downlo
87. n on page 42 e Using the NetExtender Command Line Interface section on page 43 MacOS Platform Installing NetExtender on MacOS section on page 45 e Using NetExtender on MacOS section on page 47 Linux Platform e Installing and Using NetExtender on Linux section on page 49 Windows Mobile Platform e Installing and Using NetExtender for Windows Mobile section on page 53 Installing NetExtender Using the Mozilla Firefox Browser To use NetExtender for the first time using the Mozilla Firefox browser perform the following Step 1 To launch NetExtender first log in to the SSL VPN portal Step 2 Click the NetExtender button NetExtender r F Disconnected Click to connect Step3 The first time you launch NetExtender it will automatically install the NetExtender stand alone application on your computer If a warning message is displayed in a yellow banner at the top of your Firefox banner click the Edit Options button Sonic WALL Virtual Office Mozilla Firelor a Bl x Die Edt Yew piton Lochmarks Toole tep Sl ES amp hepaiskpn sni eomjog hinjpertal S Gj 4 Gh Freios meverted the ste eshon corked com rom asking you bo incall sollware on pour computer Edt Optinns SONICWALL Virtual Office Welcome to the SonicWALL Virtual Office Boruc WALLS Varia ee prinades easy and iecur e remote access bo ihe capir aia nehwork from onpehere on the miere Tips Help aj Aiat is Met
88. ns to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall Provides access to the NetExtender utility a transparent SSL VPN client for Windows MacOS or Linux users that allows you to run any application securely on the remote network It acts as an IP level mechanism provided by the virtual interface that negotiates the ActiveX component on Windows with IE using a Point to Point Protocol PPP adapter instance On non Windows platforms Java controls are used to automatically install NetExtender from the Virtual Office portal After installation NetExtender automatically launches and connects a virtual adapter for SSL secure NetExtender point to point access to permitted hosts and subnets on the internal network Virtual Assist SSL VPN 2000 SSL VPN 4000 SRA 4200 only Bookmarks Provides access to Virtual Assist an easy to use tool that allows SonicWALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Virtual Assist is a lightweight thin client that installs automatically using Java from the SonicWALL SSL VPN Virtual Office without requiring the installation of any external software For computers that do not support Java Virtual Assist can be manually installed by downloading an executable file from the Virtual Office Provides a list of available bookmarks which are objects that enable you to connect to
89. ns using Terminal Services or VNC e Email servers via the NetExtender client The administrator determines what resources are available to users from the SonicWALL SSL VPN Virtual Office The administrator can create user group and global policies that disable access to certain machines or applications on the corporate network The administrator may also define bookmarks or preconfigured links to Web sites or computers on the intranet Additional bookmarks may be defined by the end user SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network drives upload and download files and access resources in the same way as if they were on the local network Certificates If the SSL VPN appliance uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page SonicWALL SSL VPN 3 5 User Guide b 15 3 amp Neb Management Interface Overview 7 6 d SonicWALL SSL VPN 3 5 User Guide Using Virtual Office Fea
90. nt Services are supported in SSL VPN release 3 5 Other applications may work but there may be problems accessing pages that are malformed have advanced HTML features use an unsupported authentication method for example Windows Integrated Authentication and URLs that are embedded in Macromedia Flash Java or Activex Using File Share Bookmarks For information on using File Share bookmarks see the Using HT ML Based File Shares section on page 84 Using Citrix Bookmarks Citrix is a remote access application sharing service similar to RDP It enables users to remotely access files and applications on a central computer over a secure connection s Note The Citrix Web Interface feature is supported on the SonicWALL SSL VPN 2000 SSL VPN 4000 and SRA 4200 security appliances Step 1 Click on the Citrix bookmark Step2 The first time you use a Citrix bookmark it will install the Citrix Web Client on your computer if you do not already have it Click Install to install the client Do you want to instal thee software Name Cilio feu Cheri Publisher Citrix Syste Ing 8 More wou Ere Lad Wide fies fon fhe Miene can be ude a fe biyga can moten mi fond eur neuter Gry meatal safer fern qublighers yo Sua Step 3 The Citrix Web Client begins to install If prompted click the banner to grant ActiveX control to the Citrix Web Client Jj https 10 0 61 150 Citrie Installation Micrasalt Intera
91. nt the system to generate a PIN To have the system generate a PIN type y and click OK To create your own PIN type n and click OK AAE EE E tah tbe o o ea a i Sre FUT te PIF par Step2 The new PIN is displayed To accept the PIN type y and click OK To have the system generate a different PIN type n and click OK Step3 If you declined to accept a system generated PIN or if your username is configured for Required to Create a PIN you are prompted to enter your new PIN Enter the PIN in the New PIN field and again in the Confirm PIN field and click OK Ok Ig Cancel SonicWALL SSL VPN 3 5 User Guide b 19 3 4 Using Two Factor Authentication Step 4 The RSA Authentication Manager verifies that the new PIN is an acceptable PIN If the PIN is accepted the user is prompted to log in with the new passcode Waiting for the Next Token Mode If user authentication fails three consecutive times the RSA server requires the user to generate and enter a new token To complete authentication the user is prompted to wait for the token to change and enter the next token VASCO User Authentication Process The following sections describe user tasks when using RSA two factor authentication e Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication on page 20 e Creating a New PIN on page 19 Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication To log in to th
92. nternal corporate resources Launch NetExtender to create an SSL VPN tunnel to your corporate network for full network access F AL MI NetExtender lisconnecied Click to connect i ogy me A lth fay Ta a All Bookmarks Web Files File Shares Browse shared files on your corporate network New Bookmark FTP Eagle e User Bookmark Import Certificate Step 2 40d Bookmark Virtual Assist Assist someone by taking control of their computer Hide Edit Controls Create anew bookmark h File Transfer Protocol F x Web HTTP IX Enter a descriptive name in the Bookmark Name field From the Virtual Office window click Add Bookmark in the Bookmarks table An Add Bookmark window will be displayed TipsiMelp What is NetExtender NetExtender creates a secure network connection allows you to access network resources servers and websites as if you were on the local network What is File Shares File Shares allows you to remotely access files in the local network You can also copy files from your remote computer to the local network What is Virtual Assist Virtual Assist allows you to remotely support customers by taking control of their computers while the customer observes How can add more bookmarks Click show Edit Controls above the bookmark table toward the right hand side then click New Bookmark If either of
93. o succeed Per Bookmark Single Sign On Options SonicWALL SSL VPN supports per bookmark single sign on for the following bookmark services e Terminal Services RDP Active X e Terminal Services RDP Java e FTP iy SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Per Bookmark SSO allows users to enable or disable SSO for individual bookmarks This flexibility in specifying login credentials is useful in the following cases e Users who use multiple accounts to access a variety of resources e Users who use two factor authentication to log in to the SSL VPN Virtual Office but use a Static password to access other resources e Users who need to access servers that require a domain prefix To configure per bookmark SSO perform the following tasks Step 1 Before enabling SSO on an individual bookmark you must first enable SSO globally as described in the Global Bookmark Single Sign On Options section on page 108 Step 2 On the Virtual Office page click on the Add Bookmark button Step 3 Select one of the service types that supports per bookmark SSO Terminal Services RDP Active X Terminal Services RDP Java or FTP Step 4 To use SSO for the bookmark ensure that the Automatically log in checkbox is checked and select the Use SSL VPN account credentials radio button Step 5 To disable SSO for the bookmark ensure that the Automatically log in checkbox is selected and then select the Use custom c
94. ons windows Step 10 Return to the SSL VPN portal and click on the NetExtender button The portal will automatically install the NetExtender stand alone application on your computer The NetExtender installer window opens F Susie WALL Virtual Olive Microsolt Internet Explorer pravided bry Sanic WALL INC 3 2 5 Fle Edt wew Favomes Toole Hep Om O A A G pmen gee Old address EE neti 710 0 93 200 eebingouet al Ejo Gim i us W This sha might requins the Folleeing Arthi control NELS cab From Sania bac Click hree bo intai a SONICWALL gt Virtual Office Welcome joe user Logoul Help NetExtender ActiveX Installer Instructions Step 1 Ayika inforrmalion har niy appear al thie bop ot Be Eniri Stap 2 iil does please click on ihe yellow bar and choose Insiall Acieex Catral Stop 3 iia Security Yearning wiris caper lich ksila to promote Doyma ant bo instali this solivare Piers HES cake Intent Explorer Securily Warna katda Fiber Free tee edie oe bee ell Ue le Lee en pay bars Our Chaat Uy fial iabhair pubis yu trot ver oe hi Copynght 6 20S Sone wae ine Ca Sore WALL Virtual Hike 0r g Step 11 If an older version of NetExtender is installed on the computer the NetExtender launcher will remove the old version and then install the new version 7 32 d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Step 12 If awarning message that
95. p up window may appear prompting you to accept a certificate Click Trust SONICWALL gt Virtual Office Welcome jp Logout Help NetExtender for Mac OS X ine rure Wed can lene Aetna fem your Applications fader show returning ia his ee Bae Acturn to Virtual Office Copyright 2008 Sane Wall Ine sslvpn eng sondcwal com a Do you want to accept this certificate from the web site L idvoom for the purpose of cachanging E encrypted Information Publisher authenticity can not be verti Show Certificate Don t Trust Trust Step 4 A second pop up window may appear prompting you to accept a certificate Click Trust 009 https sslvpn eng sonicwall com oy This applet was signed by SonicWALL Inc and authenticated by a Thawte Consulting oc Do you trusi this certificate Pa LE Click Trust to ron this applet and allow it unrestricted access to your coriputer Click Dent Trust bo runt this appel wath standard lava restrictions E Show Certificate Don t Trust C Trust 7 6G d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wx Step 5 When NetExtender is successfully installed and connected the NetExtender status window displays aA SonicWALL Netkutender SONICWALL gt SSL VPN NetExtender Skatu Carnnacted Lerner gchvpm com Client iF 10 128 1 105 Ayres Sent SO Bytes Bytes Beceni 371 Bytes Duration 00 00 48 Copright 2008 SonecwWaAll ime Us
96. paja pia ta a Che MO Dag iC ATA Pa Paana a F a Erpe Engrs Erini Ena Erini Eine Fngine Erna Engine Enpe Dige Engine Extras Toned woot al uly Caeconnectireg Wading up Revers re cael Initiate e WerPyire Liner Waking ui men Dery HALE Latest Bo replied Oe perier Fie PED e Wiki L Tribiakiring engine Yeri yg Lee Indisinng tonmection pa anaie Tndtiadizing connertion parameters heH uiaei Indtisiareg die Indisditing security functions Ceki Connected acies Disrnnnectirs tii xj Peit eee ras uraia ly eeeuhes Fe serves nae Fea check wine DHS allee i pce rea oueon a bee dem To view details of a log message double click on a log entry or go to View gt Log Detail to open the Log Detail pane To save the log either click the Export icon or go to Log gt Export SonicWALL SSL VPN release 2 5 introduces the ability to filter the NetExtender log To filter the log to display entries from a specific duration of time go to the Filter menu and select the cutoff threshold To filter the log by type of entry go to Filter gt Level and select one of the level categories The available options are Fatal Error Warning and Info in descending order of severity The log displays all entries that match or exceed the severity level For example when selecting the Error level the log displays all Error and Fatal entries but not Warning or Info entries
97. pass the proxy server If required enter a User name and Password for the proxy server If the proxy server requires a username and password but you do not specify them in the Preferences window a NetExtender pop up window will prompt you to enter them when you first connect 5 Sanic WALL SSL VPN NetExtender SONICWALL sst ven NetExtender Prosy ei estaba hoor ts Lie Maree Pa aa et he Cannel Step 5 Click the Internet Explorer proxy settings button to open Internet Explorer s proxy settings SonicWALL SSL VPN 3 5 User Guide bp 39 oN amp Using NetExtender Viewing the NetExtender Log The NetExtender log displays information on NetExtender session events The log is a file named NetExtender dbg It is stored in the directory C Program Files SonicWALL SSL VPN NetExtender To view the NetExtender log right click on the NetExtender icon in the system tray and click View Log NelEnlender Liu Tierrer SelEnbener Log Ife GOrte DOO 17 43 50 Info Ga27j200 11 47 45 info CefPT PENN 1206 ride OET iano 1262 Info CARS SOU 12 06 Airo Gamia 13 06 39 Bio Oa27i2007 12 05 32 Tin TAr ee Vt Le ee fo ajamien 12038 Ide COPE 12 80 3 Info 3 Crary 12 10 Info CAPSTONE 120 Ifo COPE 12 10 40 Info Gajz7ja00 12 10 40 trio onii 13100 dbio OaaTi2007 12 10 40 info Gal2mia007 1210 41 hirio cafetjang AAS Mem EE ran d e MN a Log laval Ena Time Ara eiae Cantus D anma piut E rare Derm Skah i a
98. pported on Windows platforms Virtual Assist is certified to work on Windows Vista Windows XP and Windows 2000 There are two sides to a Virtual Assist session the customer view and the technician view The customer is the person requesting assistance on their computer The technician is the person providing assistance A Virtual Assist session consists of the following sequence of events 1 The technician launches Virtual Assist from the SonicWALL SSL VPN Virtual Office 2 The technician monitors the Assistance Queue for customers requesting assistance 3 The customer requests assistance by one of these methods Logs into the SonicWALL SSL VPN Virtual Office and clicks on the Virtual Assist link Receives an email invitation from the technician and clicks on the link to launch Virtual Assist 7 56 d SonicWALL SSL VPN 3 5 User Guide Using Virtual Assist Wax Navigate directly to the URL of the Virtual Assist home page that is provided by the technician The Virtual Assist application installs and runs on the customer s system The customer appears in the Virtual Assist Assistance Queue The technician clicks on the customers name and launches a Virtual Assist session NDO oO US The technician s Virtual Assist window now displays the customers entire display The technician has complete control of the customer computer s mouse and keyboard The customer sees all of the actions that the technician performs 8 If at any
99. pts can be used to map or disconnect network drives and printers launch applications or open files or Web sites To configure NetExtender Connection Scripts perform the following tasks Step 1 Right click on the icon yl in the task bar and click on Preferences The NetExtender Preferences window Is aisplayed Step 2 Click on Connection Scripts Preferences X Connection Profiles Set irae Cannectian crits Wihen HAE teres Diaa corre Prony Bem in eee ama kag ei FH Pe uhman eaecute the haich file Heinamad ha Ed None bal I Aedes Se curreode vera When Hat eden letters cheung i dutenaho aly execute the batch fle Nidinconnectbet Ode Nodlisconnect bat fe Hide tee onde wni CE e ar 7 6 d SonicWALL SSL VPN 3 5 User Guide Step 3 Note Step 4 Step 5 Step 6 Step 7 Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Using NetExtender W amp To enable the domain login script select the Attempt to execute domain login script checkbox When enabled NetExtender will attempt to contact the domain controller and execute the login script Enabling this feature may cause connection delays while remote client s printers and drives are mapped Make sure the domain controller and any machines in the logon script are accessible via NetExtender routes To enable the script that runs when NetExtender connects select the Automatically execute the batch file NxConne
100. pts to reconnect to the server 7 M d SonicWALL SSL VPN 3 5 User Guide Using NetExtender Wa Table 1 NetExtender CLI Commands NECLI showstatus Displays the status of the current NetExtender session NECLI setproxy Configures proxy settings for NetExtender t 1 2 3 There are three options for setting proxy settings e 1 Automatically detects proxy settings The proxy server must support Web Proxy Auto Discovery Protocol WPAD e 2 Uses a proxy script e 3 Manually configure the proxy server S proxy address The address of the proxy script or proxy server O port The port number u user name The user name for the proxy server p password The password name for the proxy server b bypass proxy Bypasses the previously configured proxy settings save Saves the proxy settings NECLI viewlog Displays the NetExtender log Installing NetExtender on MacOS SonicWALL SSL VPN supports NetExtender on MacOS To use NetExtender on your MacOS system your system must meet the following prerequisites e MacOS 10 4 and higher e Java 1 4 and higher e Both PowerPC and Intel Macs are supported To install NetExtender on your MacOS system perform the following tasks Step 1 Log in to the SonicWALL Virtual Office Step 2 Click the NetExtender button SonicWALL SSL VPN 3 5 User Guide b 4 oS 4 Using NetExtender Step 3 The Virtual Office displays the status of NetExtender installation A po
101. quire any client applications to be downloaded to remote users machines e Using Java thin client access to corporate desktops and applications The SonicWALL SSL VPN security appliance includes several Java or ActiveX thin client programs that can be launched from within the SonicWALL SSL VPN security appliance Terminal Services and VNC Java clients allow remote users to access corporate servers and desktops open files edit and store data as if they were at the office Terminal Services provides the ability to open individual applications and support remote sound and print services In addition users may access Telnet and SSH servers for SSH version 1 SSHv1 and SSH version 2 SSHv2 from the SSL VPN portal SonicWALL SSL VPN 3 5 User Guide b 9 S amp Virtual Office Overview Using the NetExtender SSL VPN client The SonicWALL SSL VPN network extension client NetExtender is available through the SSL VPN Virtual Office portal via an Activex control or through stand alone applications for Windows Linux and MacOS platforms To connect using the SSL VPN client log into the portal download the installer application and then launch the NetExtender connector to establish the SSL VPN tunnel Once you have set up the SSL VPN tunnel you can access network resources as if you were on the local network The NetExtender standalone applications are automatically installed on a client system the first time you click on the NetExtende
102. r Bookmark Wen HTTry 4 m maon Cartticata Tips Help a What is NetExtender NETExender creates a secure network Connection allows you to access nchwork Pesce Severs aed websiles as if you were on ihe focal REWORK What is File Shares Pie Shares a ows you to remotely access Tes in the local network You can also copy files from your remote Computer to he local network What is Virtual Assist Virtual Assist sows you to remotely Support customers by taking control of iheir computers while the customer obsemnea How can add more bookmarks Click Show Edit Controls above the Docimarmk labie loward he mgni hand Side then Catk New Bookmark M cher of these options are missing your adminisirator may mol have given Vou Peamission to add Hoakmarks Step 4 The Add Bookmark screen displays Enter a friendly name for the bookmark in the Bookmark Name field Arik Brockniuirk Bookmark Name 10 20 4117 7h test a Cerir a Fits Shares IFS j Hame or IP acddress in erica FY ise Fie Shares Java apolet fF wutomaticaly lon in f ike SSL VPN account credentials C se custom credential Step 5 Enter the IP address and file directory path to the File Share in the Name or IP Address field Note When using the Java applet the Name or IP Address field must be to a file directory and end with a or character Step 6 In the Service pull down menu select the File Shares CIFS option St
103. r Guide Step 2 Step 3 Step 4 Step 5 Step 6 Using NetExtender Wx The Connection Profiles tab displays the SSL VPN connection profiles you have used including the IP address of the SSL VPN server the domain and the username li 2a lind EY La a rchpr gi Wom E pr eng oom 2 enm k hpr can iv Lk aT E Creste Shortcut Flemave Remove at To create a shortcut on your desktop that will launch NetExtender with the specified profile highlight the profile and click Create Shortcut To delete a profile highlight it by clicking on it and then click the Remove buttons Click the Remove All buttons to delete all connection profiles The Settings tab allows you to customize the behavior of NetExtender Tm Te dh meee e Connertion Scripts Safina etal E T EN Automatically connect with Connection Profile When kog ar lo iny complet r Aomaicai itat Hat tender U M Display Mint sirndea U when I m using Mett steed U PP Mterereced bo tha iray econ when Melistende sarc ic cimed W Digis Connect Ditconmect Tips bom the Syitem Tray ie uhmaa mennan when the commecton is emina pee ick ee i i F Urni Miele anha analea Dincermect on active connector To have NetExtender automatically connect when you start your computer check the Automatically connect with Connection Profile checkbox and select the appropriate connection profile from
104. r link in the Virtual Office portal The standalone client can be launched directly from users computers without requiring them to log in to the SSL VPN portal first For SSL VPN to work as described in this guide the SonicWALL SSL VPN security appliance must be installed and configured according to the directions provided in the SonicWALL SSL VPN Getting Started Guide for your model 7 10 d SonicWALL SSL VPN 3 5 User Guide Browser Requirements W amp amp Browser Requirements The following Web browsers are supported for the SSL VPN portal features For administrator portal Web browser compatibility refer to the SonicWALL SSL VPN Administrator s Guide ew NetExtender 1 5 2 es ROPS Activex eS Gil ROPS ava 1 44 a W162 QO e Gir VNC Java 1 14 vse Q a ily Telnet Java 11 a Wisi QO 3 al SSHv1 SSHw2 Java 14 Se Visa O 9 a l HTTP HTTPS FTP Browser a 1S2 Q e eu File Sharing Browser ise OE a Bl File Sharing Java 12 171 572 O a 67 Citrix Activex 2 bi Citrix Java 14 S 1152 Q J g Bi Virtual Assist 3 Java not required 4 eo OEP CO DOSD OED O DOOOO O 0 o S a i a al oa D aj i i a 3O P WIS ae bod browser brewster independent independent Java 1 4 Java 14 W152 a 5 2 K 2 O 3 a 152 0 1 5 2 amp 2 Ss VSA 0 a si e 2 O g amp 5
105. rectory or if the parent directory cannot be resolved e Refresh Refreshes the current view by either polling the local file system or remote network via the SSL VPN The refresh icon will be dimmed in the remote window if its contents are currently being refreshed e New Folder Creates a new folder within the respective file system Clicking this icon displays the New Folder dialog box allowing the user to assign a name to the new folder This icon is dimmed when the location of the window is such that a new folder cannot be created for example Root of a Windows filesystem domain list machine list e Copy Copies the selected file s folder s to the location of the remote window Clicking this icon displays the Copy dialog box that will show the status information of the copy procedure If the file being copied already exists a new dialog will display asking the user whether or not the existing file should be replaced The copy icon is dimmed when there are no selected files folders to copy for example if no drive or domain is selected It is also dimmed if the remote location cannot accept files copied to it for example Domain List Machine List Copying a folder also copies everything within the folder SonicWALL SSL VPN 3 5 User Guide b 75 N amp Using File Shares Note e Delete Deletes the selected file s folder s Deleting a folder will delete everything within the folder Files deleted this way
106. redentials radio button Step 6 Enter the User name and password for the service SETVET Erie Praa E Seapine he rie ___ Elhimma Ganx User 10 q TI wer Mate ee orbood AST ane pea Agent My Compuber i Se Be eram Gairen and es Qai Set peas lm tee hal een Wirntkows Geever 2003 Enterprise Erling p H Log aif E ht oon Evam copy Bud 3780 Service Pack 1 De armea HF SonicWALL SSL VPN 3 5 User Guide b 109 X 4 Logging Out of the Virtual Office Logging Out of the Virtual Office To end your session simply return to the Virtual Office home page from wherever you are within the portal and click on the Logout button SONICWALL Virtual Office uoopo poo pean Welcome to the SonicWALL Virtual Office n Tips Help i Somit WALL Virtual Office provides easy and secure remote access to the corporate E R Logout network from anywhere on the Internet PENAT 1E PORES EeT eT E NetExtender creales a secure network Click a pre defined bookmark of creale your dan fo securely access a corporale neteork connection allows you lo access resource Network resources servers and Launch MetExtender to create a secure nebwork connection to the corporale network for hit PS A PSMA WETS OF TE OTS full netorik ACCESS What is File Shares File Strares allows you bo reneotely NetExtender a File Shares amp Virtual Assist T A Dis
107. s chapter provides an overview of new SonicWALL SSL VPN security appliance user features NetExtender File Shares services sessions bookmarks and service tray menu options Chapter 2 Using Virtual Office This chapter provides procedures on how to install NetExtender working with the NetExtender system tray displaying the NetExtender log configuring bookmarks and using file shares Guide Conventions The following conventions used in this guide are as follows Convention Use Bold Highlights dialog box window and screen names Also highlights buttons Also used for file names and text or values you are being instructed to type into the interface Italic Indicates the name of a technical manual Also indicates emphasis on certain words in a sentence Also sometimes indicates the first instance of a significant term or concept SonicWALL SSL VPN 3 5 User Guide Guide Conventions Icons Used in this Manual These special messages refer to noteworthy information and include a symbol for quick identification Tip Useful information about security features and configurations on your SonicWALL Note Important information on a feature that requires callout for special attention SONICWALL Technical Support For timely resolution of technical support questions visit SonicWALL on the Internet at http www sonicwall com us Support html Web based resources are available to help you resolve most technical issues or cont
108. shea eS 21 Verifying User One Time Password Configuration e eens 23 Troubleshooting Common Errors cc ec cece cece eens 23 USMO NGENUT eerren sien ners cata eae ee 2 cea ah Soa he 23 User Prerequisites naes Plaid a detente Steeda hear ind Ohba esete 23 User Configuration Tasks 20 65 his aught dota R ind net aead ie lo eR eens es 24 SonicWALL SSL VPN 3 5 User Guide Wit Related DOCUMEN errenneren sie se dndrao bai ob debits 07h a a 56 Using Vru ASSIST acts connec A E E E E E E AEAEE 56 Launching a Virtual Assist Technician Session 0 cece cece e ee ees 97 Performing Virtual Assist Technician Tasks 0 cece eee ee ees 61 Using Virtual Assist from the Customer View ccc eee ee eee nee 65 USING Pile SKa oeira na E E EARE EE AEAEE RE EEE 70 Using the File Shares Applet 0 ccc ccc cece tee cee cent eee annes 71 Using HTML Based File Shares 0 0 cc ccc ccc eceec ee cee tne nnes 84 Managing Bookmarks ics dada von cok ataeiacnshornee Staal ata a aie Wena wanes oe aa 87 Adding BOOKMAMS ts5 05 soteiareaaet ebad AA hat aawe Meee ecaeees 88 EGitinG DOO KINGIKSsc sta wae oddone 4 te aie a een ee dea de aoe tas 92 REMOVING BO OKINGIKS ayeni ia Scho e EEE ace EERE TOREEN 93 USNO DOOKINEUKG 2 aiudaatn te ee TAE LEE ETER EEEE 93 Using Remote Desktop Bookmarks 0 ccc cece cee eee eens 93 Using VNC BOOKMARKS cecair ecen i daha tdea tare ba hae toa 95 Using P BOOKMARKS renait a
109. sites It is recommended that you add the URL or domain name of your SSL VPN server to Internet Explorer s trusted sites list This will simplify the process of installing NetExtender and logging in by reducing the number of security warnings you will receive To add a site to Internet Explorer s trusted sites list complete the following procedure Step 1 In Internet Explorer go to Tools gt Internet Options Step 2 Click on the Security tab Step 3 Click on the Trusted Sites icon and click on the Sites button to open the Trusted sites window intarnet Options Trusted sites Genera Seourky Privacy Content Connechens gt Programs advanced eer Jf You can add and remove websites from this zone All websites in this zone will use the zone s security settings Delect A Done tO view Or Change Security satis e amp vy Imeiel Local inranel Reira shes Add this website to the zone Websites https 10 202 4 40 Trusted sites cae a Thies iets caniarg abatas that pce bunt not ho damage your rompuber or ya i Gah laal fier thet Sore Require server verification https For all sites in this zone close Cushonm Tuhan selling gt To change the settings cick Custom ewe To we Ue revoir eE cack Deel gull ewe custom level Defautleve _ Remi A pones bo def nat eri Step4 Enter the URL or domain name of your SSL VPN server in the Add this Web site to the zone field an
110. ssist Virtual Assist allows you io remotely Ehia Evid Corbet i AN Gomunarks Emaon Sa ARER ee suppr customers Dy taking contral of k Agile Produ Ltecycie Wartepement lici computers while the customer Observes Citi Gira OT TRS Citrix to home bbc How can add more bookmarks ff DFS Dastributed ie ahem Cack Show Edel Contras above the P gt hockinark table toward the nght hand w HiH Lonnector Teimeial Services AOP Activex side then click New Bookmark If ie Webmail SONALE Weti either of these options are missing YOUr a0Mineiraion may not have given YOU Permrsseon bo add tenokinebrks Note The Virtual Office content will vary based on the configuration of your network administrator Some bookmarks and services described in the SonicWALL SSL VPN User s Guide may not be displayed when you log into the SonicWALL SSL VPN security appliance SonicWALL SSL VPN 3 5 User Guide b 13o 3 amp Neb Management Interface Overview The Virtual Office consists of the nodes described in the following table Node Description File Shares NetExtender Provides access to the File Shares utility which gives remote users with a secure Web interface access to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissio
111. stic Report i A diagnostic report has been created aa Users mk NetEntenderDemo adiag tect File Forman All Piles E Siew Falder Cancel Save Step 12 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory Installing and Using NetExtender on Linux SonicWALL SSL VPN supports NetExtender on Linux To use NetExtender on your Linux system your system must meet the following prerequisites e i386 compatible distribution of Linux e Linux Fedora Core 3 Ubuntu 7 or OpenSUSE Linux 10 3 e Sun Java 1 4 and higher is required for using the NetExtender GUI N Note Open source Java Virtual Machines VMs are not currently supported If you do not have Sun Java 1 4 you can use the command line interface version of NetExtender To install NetExtender on your Linux system perform the following tasks Step 1 Log in to the SonicWALL Virtual Office SonicWALL SSL VPN 3 5 User Guide b 49o o3 amp Using NetExtender Step 2 Click the NetExtender button A pop up window indicates that you have chosen to open the NetExtender tgz file Click OK to save it to your default download directory ty Opening NetFwesdercg You have chosen to open NetExtender tgz which is a tar archive q7ip compressed from http 10 0 61 81 What should Firefox do with this file Open wih Browse Save to Disk _ Oo this automatically for files like this from now on
112. te button on the tool bar Alternatively the item can be deleted by using the right click menu The File Shares Applet displays a delete confirmation window Click the Delete button in the pop up to delete the item La Warning The File Shares Applet will completely delete the file or folder from the remote machine In the case of a folder nested items will also be deleted These items will not be sent to the recycle bin on either machine and are not recoverable G64 U4 E BOS GS Sik Hram Cicer ane amlee Piha E erh 5 rier Fld e sans ei GUS 41 debate roii Plesa F rece H J ii ay SonicWALL SSL VPN 3 5 User Guide Using File Shares W amp Step 6 Once the file or folder has been deleted the File Shares Applet will automatically refresh removing the item from the current directory To copy it from the local machine back to the remote machine click and drag like in Step 2 or use the Copy icon from the local machine s tool bar Note The Copy icon in the toolbar automatically moves the selected file to whatever directory is currently open To move an item to a different folder either drag and drop it into the desired destination or open the desired destination prior to clicking Copy ea ee N BO Uie o Ai aR ari Dairi hha Deris ke FFH iing a Gh Haramai pan DLUC PFD s hoien bet ea bored Pl aj fou A SonicWALL SSL VPN 3 5 User Guide b 81 3 amp Using File Shares Launching a Fi
113. the latest version Prior to release 2 5 the standalone NetExtender does not check for updates when it is launched directly from a user s computer Uninstalling NetExtender The NetExtender utility is automatically installed on your computer To remove NetExtender click on Start gt All Programs click on SonicWALL SSL VPN NetExtender and then click on Uninstall You can also configure NetExtender to automatically uninstall when your session is disconnected To do so perform the following steps Step1 Right click on the NetExtender icon gs in the system tray and click on Preferences The NetExtender Preferences window is uisplayed Step 2 Click on the Settings tab Step 3 Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session Verifying NetExtender Operation from the System Tray To view options in the NetExtender system tray right click on the NetExtender icon in the system tray The following are some tasks you can perform with the system tray ay SonicWALL SSL VPN 3 5 User Guide Displaying Route Information Using NetExtender Wx To display the routes that NetExtender has installed on your system click the Route Information option in the system tray menu The system tray menu displays the default route and the associated subnet mask 10 0 0 205 255 00 1 0 eS 2S5 000 0200 0 255 254 00 Lanzo Neo 5 255 000 Le 0 Ss eS 10 2 0 255 255 0 0 LO es 2 2 od 1
114. the pulldown menu SonicWALL SSL VPN 3 5 User Guide b 35 9 amp Using NetExtender Note Only connection profiles that allow you to save your username and password can be set to automatically connect Step 7 To have NetExtender launch when you log in to your computer check the Automatically start NetExtender UI NetExtender will start but will only be displayed in the system tray To have the NetExtender log in window display check the Display NetExtender UI checkbox Step 8 Select Minimize to the tray icon when NetExtender window is closed to have the NetExtender icon display in the system tray If this option is not checked you will only be able to access the NetExtender UI through Window s program menu Step9 Select Display Connect Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon Step 10 Select Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection Step 11 Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session Step 12 Select Disconnect an active connection to have NetExtender log out of all of your SSL VPN sessions when you exit a NetExtender session Step 13 Click Apply Configuring NetExtender Connection Scripts SonicWALL SSL VPN provides users with the ability to run batch file scripts when NetExtender connects and disconnects The scri
115. these options are missing your administrator may not have given you permission to add bookmarks Bookmark Name ie eee 10 20 4117 Aes CD Desenin Po Service File Shares CIFS M Use File Shares Java Applet Automatically log in Use SSL VPN account credentials Use custom credentials Step 3 Enterthe domainname IP address or IPv6 address of a host machine on the LAN in the Name or IP Address field IPv6 addresses should be enclosed in brackets i e the and symobls Step 4 Select the service type in the Service menu You can select from the following services Telnet SonicWALL SSL VPN 3 5 User Guide Terminal Services RDP ActiveX Terminal Services RDP Java Virtual Network Computing VNC File Transfer Protocol FTP Step 5 Step 6 Step 7 Step 8 Step 9 Managing Bookmarks Wa amp Secure Shell version 1 SSHv1 Secure Shell version 2 SSHv2 Web HTTP Secure Web HTTPS File Share CIFS SMB Citrix Portal Citrix For Citrix bookmarks you can optionally designate that it be a secure Citrix connection by checking the HTTPS Mode checkbox Optionally select Always use Java in Internet Explorer to use Java to access the Citrix Portal when using Internet Explorer Without this setting a Citrix ICA client an ActiveX client must be used with IE This setting lets users avoid installing a Citrix ICA client specifically for IE browsers Java is used with Citrix
116. time the customer wants to end the session they can take control and click on an End Virtual Assist button in the bottom right corner of the screen 9 When the session ends the customer resumes sole control of the computer The following sections describe how to use Virtual Assist e Launching a Virtual Assist Technician Session section on page 57 e Performing Virtual Assist Technician Tasks section on page 61 e Using Virtual Assist from the Customer View section on page 65 Launching a Virtual Assist Technician Session Step 1 Step 2 Step 3 To launch a Virtual Assist session as a technician perform the following steps Log in to the SonicWALL SSL VPN security appliance Virtual Office If you are already logged in to the SonicWALL SSL VPN customer interface click on the Virtual Office button Click on the Virtual Assist button Virtual Assist iy Sant somaane iry Ea t nt el her comoulet The File Download window displays and Virtual Assist attempts to automatically install Click Run to launch the program directly or click Save to save the installer file to your computer and then manually launch it x Do wou sand to pun of rave this file Mame 40 4 3 0 SWie ebar l Sort ens gee dren ee Tepe Appbcation Fiom 10 200 4 40 Fun ave i thin files ham Hee leben bes uari this file bene can pihen hami eeu commuter I ecu donc trust Hit pecs che cd mary cet rare Lore al eae ahal Ue
117. tton in the bottom right corner Step 13 Click the Chat button or enter Alt c to open an instant message style chat session with the technician The Chat button is located in the bottom right corner of your desktop next to the End Virtual Assist button SonicWALL SSL VPN 3 5 User Guide b 69o 3 4 Using File Shares Step 14 The technician can also open a Chat window to communicate with you To chat type text in the Chat window and type Enter or click Send B Chat with technician E Xj ihes hay haia can iai paa tae aduen t vep le comeco e gad Send Step 15 To regain sole control of your computer while still allowing the technician to view your system click the Active button in the bottom right corner Acta Chat jEred Virtual ASEE zl at QDI 5 47PM Step 16 The Active button changes to display View Only indicating that you are in View Only mode Click View Only to give the technician control again Via Condy ch a WB tnd Virtual Assist E at OGM Sore Step 17 You can end the Virtual Assist session at anytime by clicking on the End Virtual Assist button in the bottom right corner of the screen or by entering Alt q This will end the technician s control of your computer Using File Shares File shares provide remote users with a secure Java applet or HTML based interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using
118. tures This chapter provides details on how to use the features in the SonicWALL SSL VPN user portal including NetExtender configuring bookmarks accessing services and using file shares This chapter contains the following sections e Importing Certificates section on page 17 e Using Two Factor Authentication section on page 18 e Using One Time Passwords section on page 21 e Using NetExtender section on page 23 e Using Virtual Assist section on page 56 e Using File Shares section on page 70 e Managing Bookmarks section on page 87 e Using Bookmarks section on page 93 e Logging Out of the Virtual Office section on page 110 Importing Certificates If the SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page The following warning messages may be displayed Click Yes The certificate will be imported Potential Scripting iolation i x This Web site is adding one or more certificates to this computer Allowing an untrusted Web site to update your certificates is a secur
119. urrent directory enter the name of the folder in the Create new folder field and click submit Step 3 Select the file you want to upload by clicking the Browse button and navigating to the file You can upload up to three files at once ay SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Note To navigate between uploads click the Sessions link Step 4 Click Import to upload the files Using Telnet Bookmarks Step 1 Click on the Telnet bookmark Note Telnet bookmarks can use a port designation for servers not running on the default port Step 2 Click OK to any warning messages that are displayed A Java based Telnet window launches PRS ERE a ATAT o Paaa erea E a Step 3 Ifthe device you are Telnetting to is configured for authentication enter your username and password SonicWALL SSL VPN 3 5 User Guide p 10 N WY Using Bookmarks Using SSHv1 Bookmarks Note SSH bookmarks can use a port designation for servers not running on the default port Step 1 Click on the SSHv1 bookmark A Java based SSH window is launched beeps 10 099 200 cgi bin shri US 1 100 95 91 Microsoft Internet Eaplorer pros 2 5 x ERAH Authoriation required Yger name Password Cangal Login Jana Appel Window Conmnicled te 100 49 31 sah Step 2 Enter your username and password Step 3 A SSH session is launched in the Java applet some versions of the JRE may cause the SSH a
120. use the various types of bookmarks e Using Remote Desktop Bookmarks section on page 93 e Using VNC Bookmarks section on page 95 e Using FTP Bookmarks section on page 98 e Using Telnet Bookmarks section on page 101 e Using SSHv1 Bookmarks section on page 102 e Using SSHv2 Bookmarks section on page 103 e Using HTTP and HTTPS Bookmarks section on page 104 e Using File Share Bookmarks section on page 105 e Using Citrix Bookmarks section on page 105 e Global Bookmark Single Sign On Options section on page 108 e Per Bookmark Single Sign On Options section on page 108 Using Remote Desktop Bookmarks Remote Desktop Protocol RDP bookmarks enable you to establish remote connections with a specified desktop SonicWALL SSL VPN supports the RDP5 standard with both Java and ActiveX clients RDP5 ActiveX can only be used through Internet Explorer while RDP5 Java can be run on any platform and browser supported by the SonicWALL SSL VPN The basic functionality of the two clients is the same however the Java client is a native RDP client and supports the following features that the ActiveX client does not e Redirect clipboard e Redirect plug and play devices e Display connection bar e Auto reconnection e Desktop background e Window drag SonicWALL SSL VPN 3 5 User Guide p 93 o oN 4 Using Bookmarks e Menu window animation e Themes e Bitmap caching If the Java client
121. use z engineering docs 1234 user eng admin To disconnect a network drive enter a command in the following format net use drive letter delete For example to disconnect network drive z enter the following command net use z delete To map a network printer enter a command in the following format net use LPT1 ServerName PrinterName user Domain name For example if the server name is engineering the printer name is color print1 the domain name is eng and the username is admin the command would be the following net use LPT1 engineering color printl user eng admin SonicWALL SSL VPN 3 5 User Guide WE 4 Using NetExtender Step 7 To disconnect a network printer enter a command in the following format net use LPT1 delete Step 8 To launch an application enter a command in the following format C Path to Application Application exe Step 9 For example to launch Microsoft Outlook enter the following command C Program Files Microsoft Office OFFICE11 outlook exe Step 10 To open a Web site in your default browser enter a command in the following format start http www website com Step 11 To open a file on your computer enter a command in the following format C Path to file myFile doc Step 12 When you have finished editing the scripts save the file and close it Configuring Proxy Settings SonicWALL SSL VPN supports NetExtender sessions using proxy configurations Currently only HTTPS proxy
122. uthentication window to pop up behind the SSH window aay SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa Using SSHv2 Bookmarks Note SSH bookmarks can use a port designation for servers not running on the default port Step 1 Click on the SSHv2 bookmark A Java based SSH window displays Type your user name in the Username field and click Login A ipa i TA gh bine TT 1008741 2 Micro tern Laioner provita on hee ey ALI ie m a a eer A ae gt Be 4 aa a 1 J m e ii n mama MM ee ee Step2 A hostkey popup displays Click Yes to accept and proceed with the login process Selec an Oplion r Sabor oe ia i Cat i ta aa labo Series i bess Leora SonicWALL SSL VPN 3 5 User Guide 103 X WY Using Bookmarks Step 3 Enter your password and click OK Password Audihenticadben Ener passwd fer admin OH i ijp SSA arin Step 4 The SSH terminal launches in a new screen E soi FALL 8 Terminai br SHy Java Clien base loaded A ii S eked inlet del 4 lore Using HTTP and HTTPS Bookmarks Note HTTP bookmarks can have a port designation and a path Step 1 Click on the HTTP or HTTPS bookmark Step 2 A new window is launched in your default browser that connects to the domain name or IP address specified in the bookmark aay SonicWALL SSL VPN 3 5 User Guide Using Bookmarks Wa amp Note OWA Premium Lotus Domino Web Access and Sharepoi
123. w separate from the Virtual Office portal Depending on available browser and Java plug in a warning may display click OK to continue Windows Internet Explorer 2 Warning vou may not be running the optimal browser and Jawa Version For this produck Some Features may not be hs P available while running the File Shares Java Applet From this machine Click OK to continue Note To avoid this warning upgrade browser to Internet Explorer 6 or newer Firefox 1 5 or newer Opera 8 or newer or Safari RSS Also updates to Java 5 0 Update 10 or newer are recommended Depending on the networks configurations and browser one or more security warnings may display click Yes or Run to continue Warning Securliy Do you want inacerpl the ceiinate hoes wh site ENDL Eng ere oon bie Ge Guepute ol ection eile MEHTAR Pubista mha ca reel a ered ed A Thr areunty arihicaha wat bam by a company that is nol ineted E J The security oiis hra noi eapi ard is shil wali More Detak ERETTE SonicWALL SSL VPN 3 5 User Guide WRT amp Using File Shares The File Shares Applet displays File Shares lt My Computer GOB Ja gt G Dy ALITORXFE RAT BOOT IH BOOTLOG PRY i BOOTLEG TT BOOTSECT DOS ay cemas wer Th corel bit at COMPS Sis Sa eee Helios ony Hebat Renere Please a Note The File Shares Applet window will not automatically refresh when its contents have ch
Download Pdf Manuals
Related Search
Related Contents
American Standard Hampton 4751.732 User's Manual Mechanical & Electrical Design Guide BCD How the LC-C90 Charging System Operates GE JEM3072DHBB Use and Care Manual manal - Panacom JVC AV-28T5SP User's Manual Untitled Untitled QBOX-200S Series User Manual Istruzioni per l`uso Copyright © All rights reserved.
Failed to retrieve file