Home
SRA 7.0 User Guide
Contents
1. llle 148 Using DOOKIMAIKS c acea diem ona dod ehe Ob HL ote ed n pras Doa a a iras 148 Using Remote Desktop BookmarkS 000 cee eee 148 Using VNC Bookmarks nannaa cee eene 151 Using FTP Bookmarks 0 000 eens 153 Using Telnet BOOKImaIKS 2 e Du onde whee de ods oe EE Perg 156 Bsing oSoHv1 BOOKITISIKS esis ot cece ea dane OR dens Sheba badd Sob Toe ad 156 Using SSHv2 Bookmarks 0 0002 cc ee en eens 157 Using WeDb BOOKIIAEI KS xod oret uta decer Tv ade te Soda bike api ee 158 Using File Share Bookmarks 0 c cece cee eee eee eens 158 Using Citrix BookmarksS 0 000 eee 159 Global Bookmark Single Sign On Options 0 0 00 ce eee eee 164 Per Bookmark Single Sign On Options 000 cece eee eee 164 Appendix A Support Information 2 0 0 0 ee 167 Contact Informal ON s aos oem ues EA bo a e r EE bar epee ua doe dubi anus 167 GNU General Public License GPL Source Code 005 167 Limited Hardware Warranty 0 0 00 c cece eee eee en 167 End User Licensing Agreement 0 000 eee tenes 168 Table of Contents 5 6 SRA 7 0 User Guide Chapter 1 Using This Guide About this Guide Welcome to the Dell SonicWALL SRA User Guide It provides information on using the Dell SONICWALL SRA user portal called Virtual Office that allows you to create bookmarks and run services over the Dell SonicWALL SRA
2. Server sslvpn eng sonicwall com Client IP 10 128 1 107 Sent 6 63 KB Received 4 58 KB Throughput Duration Connection Profiles Show NetE1 System Settings Proxy Settings Sent amp Received gt Throughput id Exit Disconnect Step 12 Select the Sent amp Received menu tab to adjust the metric used for sent and received statistics on the status window Select the Throughput menu tab to adjust the throughput measurement displayed on the status window Step 13 To configure NetExtender options click the Menu button The following options are displayed e Connection Profiles Displays all of the NetExtender connections that you have used on this device To remove a Connection Profile highlight the profile click the Menu button and click Remove NetExtender Connection Profiles SSL VPN Server IIR ER 3 M LocalDom sslvpn eng sonic sv us so J Remove Back System Settings Provides several configuration options NetExtender Hide NetExbender when closing window L Display precise number in status Automatically establish the underlying connection Connection Manager compatibility made Enable Framing amp Caching optimizations Enable NetExtender log go Overwrite the previous log when NetExtender starts Apply zs Cancel 58 SRA 7 0 User Guide Hide NetExtender when closing window Hides NetExtender when you click the o
3. Proxy Settings Provides the ability to manually specify a proxy server Address 10 0 61 1 Liser Password Cancel Using NetExtender 59 Passwords in NetExtender Mobile NetExtender Mobile supports the ability for users to change passwords Also if configured by an Administrator users can be alerted that the their password is scheduled to expire soon If a user must change their password a screen prompt will ask for the user s old password along with a new password and re verification of the new password Tb enn e Yu Me ok You must change your password before connecting NewPasswrd aga 1 Cancel Another screen prompt will be presented to the user if their password is scheduled to expire within a configured number of days by the Administrator Click Yes to enter updated password information rS NetExtender e lx 4 Server 10 0 61 8 Your password will expire in 14 days Do you want to change it now Disconnect The process for updating password information is the same as above Installing NetExtender on Android Smartphones Dell SonicWALL SSL VPN supports NetExtender on smartphones running the Android operating system The NetExtender Android client supports the following features e One time passwords e Two factor authentication e HTTP HTTPS proxy e Connection profiles The NetExtender Android installer is available on MySonicWALL in the standard apk p
4. If no PIN has yet been configured or if the Administrator has reset the account the following screen asks if the system should generate a new PIN To allow the system to generate it tap Yes To type in a PIN yourself tap No and skip to Step 7 DE B8 P 9 13 em A new PIN is required Do you want system to generate your new PIN y n Step 6 If you chose to allow the system to generate the PIN the display then prompts you to accept the generated PIN Tap Yes to accept it or tap No to have the system generate a different PIN You are prompted each time until you tap Yes DE B Fl 9 14em Are you satisfied with system generated PIN 1536 y n Step7 lf you chose to generate the PIN yourself type a PIN into the PIN field and again in the second field to confirm it Typically PINs are required to be 4 to 8 digits Tap OK OG B Fl 9 15 em PIN accepted Please wait for token to change then login with the new passcode OK Cancel 66 SRA 7 0 User Guide Step 8 Step 9 After entering the PIN or creating a new PIN the Two Factor Authentication process requires you to enter the token code shown on your token device Wait for the token code to change on the device and then type the code into the field on your smartphone and tap OK OG B WEE 9 17PM Please wait for the token to change then enter the next code If a proxy server is configured in the smartphone via Preferences
5. Intel R 825 9LM Gigabit Network Connection Properties Power Management A Intel R 8257S8LM Gigabit Network Connection Allow the computer ta tum off this device to save power Allow this device to wake the computer E Only allow a magic packet to wake the computer W aming If this is a laptop computer and you run it using battery power allowing the network adapter to wake the computer could drain the battery more quickly t might also cause the laptop to become very hot if it wakes up while packed in a camying case 1 Open Device Manager by right clicking the Computer icon on the client PC desktop selecting Properties from the drop down list and then selecting Device Manager 2 Expand the Network adapters folder and select the Network Connection used for Virtual Access 3 Click the Power Management tab and check the Allow the device to wake the computer check box 4 Click OK Step3 While in the Secure Virtual Access mode select Enable WOL from the Virtual Access menu Settings Change Virtual Access Parameters Run Virtual Access at Startup v Wake on Lan Exit Virtual Access CH EM a dE BN E LL PUEDEN If the client PC sleeps shuts down or hibernates the pending client enters the Offline state where it can be woken by a Technician Step4 Next a Virtual Assist Technician double clicks the customer s entry in the Pending List and the client PC is woken automatically i
6. Step 1 Step 2 Within the NetExtender Properties dialog box click the Advanced heading in the menu on the left panel The available options allow you to adjust advanced settings on NetExtender network properties and protocols NetExtender Properties Connection Profil Advanced Settings Connection Script Proxy NetExtender Connection Settings NetExtender Virtual Link Speed Log Report the underlying network speed to OS Advanced 100000000 bps to OS Packet Capture Report a fixed speed at p Advanced Network Properties Modifying settings under the Advanced Network Properties may impact NetExtender performance and or functionality It is recommended to make changes here only if advised to do so by SonicWALL support NetExtender Protocol Settings 4 Enable Framing amp Caching optimizations Note The settings in this page may impact NetExtender performance please be careful when modifying them Modifications will take effect when NetExtender is connected next time cance NetExtender allows users to customize the link speed that the NetExtender adapter reports to the operating system To select a virtual link speed to report select either the Report the underlying network speed to OS radio button or select the Report a fixed speed radio button and designate a speed Note Users can click the Advanced Network Properties button to make adjustments However modifying these setti
7. Tme ea Required E mail s ns Optional E mail s RedGured E mal s m T Coordinator s E mail Optional Optional E mails Additional Message Optional Note Email settings must be configured in the management console Log gt Settings page before Virtual Meeting email can be sent 116 SRA 7 0 User Guide Polling To invite someone to a Virtual Meeting enter the email address and click Invite Additional fields are optional Invited users receive an email similar to the following Accept Tentative X Decline Propose New Time iij Calendar Meeting Invatation derekk sonicwall com Please respond Required Derek When 201241 H11 BE BB 13 41 14 11 aMT 4 08 00 Beijing Chonaging Hang Kong Urumqi Location SonicWall SSLVPN VirtualMeeting A meeting invitation has been generated for you by derek The meeting s start time is 2012 01 10 21 41 and the end time is 2012 01 10 22 11 UTC 8 00 You can jom the meeting with the meeting code ee Meeting Description Click the below link below to join the meeting https 1 103 62 204 cm bm meetingstart minrtebyurl true amp server 10 103 62 204 amp port 443 Tneetinginvite ics 261 B amp meetmg cc WEssTE amp portal TestPortal After receiving the email invitation attendees click the link in the email which accesses the appliance to join the meeting If the Secure Virtual Meeting plug in is installed it
8. Yes Mo moro Step 11 The shared application is now launched Managing Bookmarks 161 Java Citrix Bookmark When using a non Internet Explorer web browser Citrix bookmarks launch the Java Citrix client The following steps describe how to launch and use the Java Citrix client Step1 Click the Citrix bookmark The login window displays Step2 For Logon type select either Anonymous or Explicit Select Anonymous to login without providing a user name Note that you may not be able to access resources that require authentication Select Explicit to login with a user name and password You may also be required to provide a domain name or NDS context Welcome To log on select an authentication method enter the required information and then click Log On IF vou do not know your logon details contact your system administrator Logon type Log on Step3 Click the Log On button The Citrix Java applet displays The default applications will display in the Applications section in the middle of the window CITRIX Applications Messages i Preferences Logged on as Guest Lag Off Applications Seleck view Icons proe Notepad Hint Unable to Find the resource you need Use Search to locate it For you x Step4 Click Messages to view any Citrix messages you have received Messages Showing 1 message s amp Warning Step 5 Click Preferences to customize the Citrix Java applet setting
9. 2010 SonicWALL Inc PREFERENCES PROXY SETTINGS Step 14 To configure NetExtender preferences including proxy and notification settings select the Preferences option BHA nea 6 45 PM NetExtender Preferences 3 General settings Connection notification Notify in status bar during connection Proxy Use Proxy a rT iO T Connect through a proxy serve Proxy settings Lontigure a proxy Server Step 15 Under General settings select the Connection notification check box to display the NetExtender traffic indicator i in the notification bar Clear the check box to prevent the indicator from being displayed Step 16 Under Proxy select the Use Proxy check box to configure NetExtender Android to access external networks through a proxy server A proxy server is often used for access to the Internet if the initial connection is made to a local zone such as LAN or WLAN Using NetExtender 73 Step 17 After selecting the Use Proxy check box tap Proxy settings to open the configuration screen for the proxy server IE A cs B FI 6 45 pm Configure a proxy server Server d Il 192 168 168 3 OK Cancel Step 18 Type the IP address of the proxy server into the Server field Type the port number of the port that the server listens on into the Port field This field displays 8080 by default but there is no standard listening port for a proxy server Step 19 Opt
10. E i Log Viewer S File Action Level Time User Role Information ES 11 201210 22 o engin Multiple Portals Ouro 1 11 2012 10 22 derek Login OK mro 1 11 2012 10 22 derek Qmro 1 11 2012 10 22 derek Qro 1 11 2012 10 22 derek Qro 1 11 2012 10 26 derek Create the virtual meeting se Create meeting OK participant coor Start the meeting host coordinator Set cyu as a host Qro Qmnro Qmnro Qro Qmro Qmro 1 11 2012 10 26 1 11 2012 10 26 1 11 2012 10 26 1 11 2012 10 27 1 11 2012 10 27 1 11 2012 10 27 derek derek derek derek derek derek participant coor participant coor participant coor participant coor participant coor participant coor Meeting start to share the sc Participant sharing state sta Participant sharing state re derek accepts to be a host Set derek as a host Participant sharing state chi Oro 1 11 2012 10 27 derek Ouro 1 11 2012 10 28 derek host coordinator Host start sharing screen host coordinator Meeting start to share the sc mro 1 11 2012 10 28 derek host coordinator Host sharing state ready men 3 11 M17 10327 dareb l oheetfceerdinater i End Hie mastna 4 t Information Login Multiple Portals Using the Control Menu during a Meeting 114 The Control Menu is available at the top of a shared desktop when the Host shares the desktop during an active meeting uel ui cx 99 Invite Polling
11. To start chatting with the Technician assisting you click the Chat button or enter Alt c which opens an instant message chat session with the Technician The Technician can also open a Chat window to communicate with you To chat type text in the Chat window and type Enter or click Send Changing the Secure Virtual Assist Level of Control There are three levels of control that a customer can grant to the Technician e View Only The Technician can view the customer s computer but cannot control it To switch to View Only mode click the Status Active button The Status switches to View Only Active The Technician can control the customer s computer but the customer must give permission for certain action such as allowing the Technician to reboot the system delete files or over write files on the customer s computer without the customer being repeatedly prompted for permission To switch from View Only mode to Active mode click the Status View Only button Using Secure Virtual Assist 99 e Trusted The Technician has complete control of the customer s computer To toggle between Trusted mode and Active mode enter Ctrl Alt T Virtual Assist Virtual Assist Status Active Status Trusted Open Chat Dialog AIC Altec Sy Open Chat Dialog Alte Alc Exit Virtual Assist Alte Alt q Exit Virtual Assist Ale Alt q Press Ctrl Alt T to Press ChrAlt
12. is 11 Descending sima 7905813 Jun 13 16 04 1 ar apache 1 3 331ar dz 2466567 sep 2 10 46 C 8 tBase uparade t 4 toyz 5519825 Jun 301810 Osm 0 Sep 1 22 43 JE vipa32 exe 318876 Mar 251 Pager exe Aug 16 0 04 Delete Marked Rename Go to directory Utility Create new folder o 4 Submit E cree new folder Utility Delete Marked Hename Utility Managing Bookmarks 153 Step4 You can use the following utilities in the FTP site To manually navigate to a folder enter the folder name in the Go to directory field and click Submit To create new folders in the directory use the Create new folder fields To delete multiple files click in the check boxes of files or folders you want to remove and click Delete Marked To rename a file or folder click in the check box of a file or a folder and click Rename Step5 Toinitiate another FTP session click the Add New Session button To return to the initial FTP session click the link for it in the form username ipaddress under the Add New Session button Downloading Files To download a file perform the following Step1 Click Download Files in the navigation bar Step2 Click the name of the file in the Filename column The File Download window displays File Download Security Warning X Do you want to run or save this file Mame MetExkender 1 Windows 1 0 2 setup exe Type
13. the Proxy Authentication screen is displayed next Enter the username and password for the proxy and tap OK BHA i ffl G3 6 42 pm Proxy authentication Situ Te ay Password OK Cancel Step 10 NetExtender will connect at this point unless there is a problem or error You will see the NetExtender traffic indicator appear in the notification bar at the top of the display unless it is disabled in Preferences The up and down arrows appear white when data is passing through the VPN tunnel When no data is currently passing the arrows appear gray Control traffic does not affect the arrow colors The up arrow indicates that data is being sent from the smartphone to the network and the down arrow indicates that data is being received from the network by the smartphone Using NetExtender 67 Step 11 If the NetExtender service running on the smartphone has a problem or has stopped running the following screen is displayed Tap Exit to quit the application You may need to restart the service possibly by turning the phone off and on again or you may need to re install NetExtender EAE WMS 12 20 AM SONICWALL gt Exit NetExtender Error Unable to communicate with MetExtender service Exiting or Disconnecting from NetExtender EXIT Exiting and restarting NetExtender is useful when NetExtender cannot connect possibly after a long period of disuse To exit from NetExtender perform the following s
14. Installing NetExtender Using the Chrome Browser To install and launch NetExtender for the first time using the Chrome browser perform the following Step1 Log in to the SSL VPN Virtual Office portal Step2 Click the NetExtender button Ra NetExtender Q LM 4 Disconnected f Click to connect Step 3 Pull the NetExtender plug in to Chrome Extensions f ichromej e 4 Developer mode Extensions Load unpacked extension Pack extension Update extensions now i MetExtender Launcher 6 0 0 95 4 Enabled G F i ID balnecojokdhnmagejgkifhhjaofmf Allow in incognito 32 SRA 7 0 User Guide Step 4 Step 5 Return to the SSL VPN portal and click the NetExtender button The portal will automatically install the NetExtender stand alone application on your computer The NetExtender installer window opens PW Gee adita Lire H bee UB E Lee pa Iniztalimng Het atender If an older version of NetExtender is installed on the computer the NetExtender launcher will remove the old version and then install the new version When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected SonicWALL NetExtender User admin Connected 0 Days 00 00 03 s oo c NNNM Server 10 5 106 138 Client IP 10 5 254 10 Sent 10 92 KB Received 5 45 KB Throughput 1 19 KB Sec x Disconnect 32012 Dell
15. Off ty v 100 v Step 6 Enter a name for the new bookmark in the New Bookmark window that displays ke My Computer 3 Remote Network ete A T Entire Network New Bookmark New Bookmark Name test Internet Protected Mode Off gt 100 v Step7 Click OK The bookmark is added to the Virtual Office portal Clicking on the bookmark accesses the selected folder or file SRA 7 0 User Guide Using Bookmarks from Within the File Shares Applet Step 1 Step 2 Step 3 In Addition to accessing bookmarks from the Virtual Office portal bookmarks can be easily accessed from within the File Shares Applet Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal Click the Bookmarks button on the task bar in the remote window A pull down menu displays with the message Loading Bookmarks Keep the mouse within the pull down menu as the File shares Applet loads the bookmarks SonicWALL File Shares HTML Version Help My Computer 3 Remote Network Entire Network Once loaded click book mark to load the desired file or folder Moving Files and Folders Step 1 Step 2 Step 3 Step 4 Step 5 The File Shares Applet is designed for ease of use There is more than one way to perform file transfers This section provides an example of a folder that is copied from a remote machine onto the local machine s desktop deleted f
16. This appendix provides the Limited Hardware Warranty End User Licensing Agreement and Dell SonicWALL Support contact information Using This Guide 7 Guide Conventions The following conventions used in this guide are as follows Convention Use Bold Highlights dialog box window and screen names Also highlights buttons Also used for file names and text or values you are being instructed to type into the interface Italic Indicates the name of a technical manual Also indicates emphasis on certain words in a sentence Sometimes indicates the first instance of a significant term or concept Current Documentation Check the Dell SonicWALL documentation Web site for the latest versions of all Dell SONICWALL product documentation at http www sonicwall com us Support html Quick Access Work Sheet 8 SRA 7 0User Guide Use the Quick Access Work Sheet to collect important information that you will need and should be completed by your network Administrator to allow remote users SSL VPN access IP Address User Name Password Domain Chapter 2 Virtual Office Overview This chapter provides an overview of the Dell SonicWALL SSL VPN user portal It also includes an introduction to the SRA appliance and its features and applications This chapter contains the following sections e Virtual Office Overview section on page 9 Browser Requirements section on page 10 e Web Management Interface Overview secti
17. domain is independent of the privileges set up for the user Logging in as a user takes you directly to Virtual Office The Virtual Office Home page displays as shown here SonicWall Virtiial Office Jptlons Help leen dmn amp segror Sete AHE Welcome to the SonleWALL Virtual Office Tips Help uic Ha q Sun cALI s Wi lual Office provides easw and secure emale access lu lie corporale network from anywhere on the Internet How can change my password You may be able to change your passworz ltiauaglh s Ree Desklup 5ess 2n 2r a webpage Flease contact Launch NetExtender to create a secure network connection to the corporate network for Your zadministrator for Specie Tull nelwuirk access instructions What ia NetExtender HetExtender M de File Shares q Het xtender creates 2 Secure network f Discornzcicd s g Browac shared files on your corporolt connection slows you ta access FEM EMEN NE ae rela resources servers am webostei as T you were on the local network What ia File Shares E iie Shares allows you to remotely R New Bookmark zraste a naw b3okriri 5 access files in the loca network You ru iri ETT can also copy files fron your rele m Citrix s us compuler lo bie local nelwa k SICK a pre dctined bookmark or create your own ED Sccurc y access a corporate nctwork ie Al Bookmarks Desktop Hidz Edit Controls How can add more bookmarks Click Show Edit controle 3bove ihe The Virtual Office
18. domain name or IPv6 address as well as the service and other settings associated with an existing bookmark Note Only user created Bookmarks can be edited or deleted by the user Global or Group Step 1 Step 2 Step 3 Step 4 Bookmarks pre defined by the Administrator cannot be edited or deleted To edit a bookmark to change its name or associated IP address perform the following steps Identify a bookmark in the Virtual Office Bookmarks list for which you want to change an IP address or domain name or other settings In the Virtual Office Bookmarks list click the Configure icon for an existing bookmark The Edit Bookmark dialog box displays To change the bookmark name domain name or IP address of the bookmark edit the names in the Bookmark Name or Name or IP Address fields To change the service select a new Service from the drop down menu Managing Bookmarks 147 Step5 Optionally change other settings specific to the Service type Step6 Optionally enable or disable the Automatically log in setting or change the credentials selection Step 7 Click Apply The Virtual Office home page displays with the new IP address or domain name Removing Bookmarks To remove a bookmark perform the following steps Step1 Identify a bookmark in the Virtual Office Bookmarks list that you want to remove Step2 In the Virtual Office Bookmarks list click the delete icon for the bookmark you want to remove The b
19. e Optionally create a poll for the invited attendees e Start the meeting Use meeting features during a meeting e End the meeting The functions you are allowed to perform depend on your role and whether a meeting is in progress The following sections describe roles and how to use Secure Virtual Meeting e Installing and Launching Secure Virtual Assist section on page 78 e Configuring Secure Virtual Assist Settings section on page 79 e Selecting a Secure Virtual Assist Mode section on page 81 User Roles Secure Virtual Meeting has several user roles Coordinator Owner of the meeting The Coordinator must be a Dell SonicWALL SRA user on the appliance The Coordinator schedules sets up and controls the meeting In addition the Coordinator has the sole power to promote a Participant to the Assistant 104 SRA 7 0 User Guide e Assistant Coordinator designated Assistant The Coordinator selects an Assistant from the list of available Participants and assigns the Assistant privileges When the Coordinator exits the meeting the Assistant automatically becomes the Coordinator A meeting may have multiple Assistants each with the same or a different set of privileges An Assistant need not be a user of the SSL VPN appliance Possible Assistant privileges are Start End Meeting Set Host Open Polling Share Files Set Unset View Only Invite Participants Kick out Participants Reschedule Mee
20. jpollock Permission for full control granted Customer will not be prompted for certain actians Using the Secure Virtual Assist File Transfer The File Transfer window is used to transfer files to and from the customer s computer The file directory of the Technician s computer is shown on the left and the customer s computer on the right C File Transfer Manager TECHNICIAN CUSTOMER FA e MACHINE Lng E d MACHINE EL E Fath Path Fame Se Mok Fed Mame Sire Modified w c Local Disk ae ake Removable wh De CD ROM ex rc Local Disk af 0 Network k CD ROM CO Desktop Desking Cel My Documents cal My Documents C3 Metwork Favorites lx L3 Network Favorites E iem Renam Farca Carpe ene peg The File Transfer window functions in much the same manner as Windows Explorer or an FTP program Navigate the File Transfer window by double clicking on folders and selecting files The File Transfer window includes the following controls Desktop jumps to the desktop of the Technician s or customer s computer Up navigates up one directory on either the Technician s or customer s computer Download transfers the selected file or files from the Technician s computer to the customer s computer Upload l transfers the selected file or files from the customer s computer to the Technician s computer Delete ig deletes the selected file or files SRA 7
21. oelect Minimize to the tray icon when NetExtender window is closed to have the NetExtender icon display in the system tray If this option is not checked you will only be able to access the NetExtender UI through Window s program menu Select Display Connect Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon oelect Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection Select Display precise number in connection status to display precise byte value information in the connection status Select the Enable Ul animations check box to enable the sliding animation effects in the UI oelect Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session select Disconnect an active connection to have NetExtender log out of all of your SSL VPN sessions when you exit a NetExtender session Click Apply 36 SRA 7 0 User Guide Configuring NetExtender Connection Scripts Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Dell SonicWALL SSL VPN provides users with the ability to run batch file scripts when NetExtender connects and disconnects The scripts can be used to map or disconnect network drives and printers launch applications or open files or Web sites To configure NetExtender Connection Scripts perform the following tasks Right click the icon in the task bar and
22. perform the following tasks Step 1 and click OK Step 2 Launch the Windows Command Prompt by going to the Start menu select Run enter cmd Change directory to where NetExtender is installed To do this you first must move up to the root drive by entering the cd command Repeat this command until you are at the root drive Then enter cd Program Files SonicWALL SSL VPN NetExtender Note The specific command directory may be different on your computer Use Windows Explorer to find the directory path where NetExtender is located The following table describes the commands available in the NetExtender CLI and their options Table 1 NetExtender CLI Commands Command Option Description NECLI addprofile Creates a NetExtender profile S Server The IP address or hostname of the SSL VPN NECLI connect Server u user name p password The username for the account The password for the account d domain name The domain to connect to Initiates a NetExtender session S Server The IP address or hostname of the SSL VPN server u user name The username for the account p password The password for the account d domain name The domain to connect to clientcertificatethumb thumb The SSL Client Certificate thumbprint value clientcertificatename name The SSL Client Certificate name NECLI deleteprofile NECLI disconnect S Server Deletes a
23. ANYTHING ELSE IN THIS AGREEMENT OR OTHERWISE TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL SONICWALL ITS SUPPLIERS DISTRIBUTORS OR RESELLERS BE LIABLE FOR ANY INDIRECT INCIDENTAL PUNITIVE OR CONSEQUENTIAL DAMAGES LOST OR CORRUPTED DATA LOST PROFITS OR SAVINGS LOSS OF BUSINESS OR OTHER ECONOMIC LOSS OR COSTS OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES ARISING OUT OF OR RELATED TO THIS AGREEMENT THE PRODUCTS OR THE SERVICES WHETHER OR NOT BASED ON TORT CONTRACT STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND WHETHER OR NOT SONICWALL HAS BEEN ADVISED OR KNEW OF THE POSSIBILITY OF SUCH DAMAGES TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW SONICWALL S MAXIMUM LIABILITY TO CUSTOMER ARISING FROM OR RELATING TO THIS AGREEMENT SHALL BE LIMITED TO THE AMOUNTS RECEIVED BY SONICWALL FOR THE PRODUCTS AND THE SERVICES PURCHASED BY CUSTOMER PROVIDED THAT WHERE ANY CLAIM AGAINST SONICWALL RELATES TO PARTICULAR PRODUCT AND OR SERVICES SONICWALL S MAXIMUM LIABILITY SHALL BE LIMITED TO THE AGGREGATE AMOUNT RECIEVED BY SONICWALL IN RESPECT OF THE PRODUCTS AND OR SERVICES PURCHASED BY CUSTOMER AFFECTED BY THE MATTER GIVING RISE TO THE CLAIM FOR MAINTENANCE SERVICES OR A PRODUCT SUBJECT TO RECURRING FEES THE LIABILITY SHALL NOT EXCEED THE AMOUNT RECEIVED BY 172 SRA 7 0 User Guide SONICWALL FOR SUCH MAINTENANCE SERVICE OR PRODUCT PURCHASED BY CUSTOMER DURING THE TWELVE 12 MONTHS PRECEDING THE CLAIM CUSTOMER EXPRESSLY
24. All Participants All Participants If the lobby is hidden click GS on the control menu once the meeting has started and the Host is sharing the screen The chat window is displayed in a stand alone chat window Recording a Meeting Any meeting Participant can record the meeting screens in a wmv file The file is automatically named with the Host s name and the date and time the recording was started for example Holi EST 2013 2 12 09h47m43s wmv The file location can be set on the Connection Settings window To record a meeting 1 Click the Record button to start recording which displays recording controls at the bottom right of the window X e n E 00 00 00 2 Use the recording controls te Start Pause and Stop the recording 3 When recording starts the Record button changes to the Stop Recording button Click the Stop Recording button to end recording Participant Role Participants can be designated as View only Participants or regular Participants View only Participants enter and exit meetings like other Participants but cannot perform most functions However they can be kicked out of meetings like other regular Participants Regular Participants can also e Respond to polls e Download shared files e Text chat e Request control of the Host keyboard and mouse e Request to become the Host and share the Participant s desktop e Become the Assistant e Become a View only Assistant 122 SRA 7 0
25. Application From 10 0 67 89 Bun While files from the Internet can be useful this file type can potentially harm your computer IF vau do not trust the source do nat run ar save this software what s the risk Step3 Click Run to launch the file Click Save to save it to your computer 154 SRA 7 0 User Guide Uploading Files To upload a file perform the following Step1 Click Upload Files in the navigation bar The Upload FTP Files window will be displayed A https 10 0 67 89 SonicWALL Virtual Office Microsoft Internet Explorer provided by SonicWALL INC DELL SonicWALL E File Transfer Center b Sessions p Upload FTF Files bo Add New Session c mous 0 0 87 64 asd b Download Files Upload files to SSL VPMNM MetExtendervindaws Create new folder fo Submit b Upload Files b Online Help b Logout FTP Session Upload Files Select file to upload i aa Upload Cancel fe Be tee Z Step 2 The current directory is displayed in the Upload files to field To navigate to a different directory enter the directory name in the Go to directory field To create a new folder in the current directory enter the name of the folder in the Create new folder field and click submit Select the file you want to upload by clicking the Browse button and navigating to the file You can upload up to three files at once To navigate between uploads cli
26. Assist over RDP will have a limited set of features There are two sides to a Virtual Assist session the customer view and the Technician view The customer is the person requesting assistance on their computer The Technician is the person providing assistance A Virtual Assist session consists of the following sequence of events 1 The Technician launches Virtual Assist from the Dell SonicWALL SSL VPN Virtual Office 2 he Technician monitors the Assistance Queue for customers requesting assistance Using Secure Virtual Assist 77 3 The customer requests assistance by one of these methods Logs into the Dell SonicWALL SSL VPN Virtual Office and clicks on the Virtual Assist link Heceives an email invitation from the Technician and clicks on the link to launch Virtual Assist Navigate directly to the URL of the Virtual Assist home page that is provided by the Technician The Secure Virtual Assist application installs and runs on the customer s system The customer appears in the Virtual Assist Assistance Queue The Technician clicks on the customers name and launches a Virtual Assist session MM E E The Technician s Virtual Assist window now displays the customers entire display The Technician has complete control of the customer computer s mouse and keyboard The customer sees all of the actions that the Technician performs 8 lfatanytime the customer wants to end the session they can take control and clic
27. Day 2 Days View Time 01 05 20 01 05 20 01 05 20 01 05 20 01 05 29 All 01 05 20 01 05 2012 1728 01 09 2012 08 37 36 01 10 2012 14 41 10 01 12 2012 16 03 32 01 16 2012 09 17 58 01 26 2012 10 33 28 3 Days 1 Week 2 Weeks 1 Month Source Service Engine Engine Engine Engine Fatal Error Warning Ox00000 Service OxOO00Dn Service Jf Info 7 Description NetExtender Starting Initializing engine Initializing driver Version 5 5 156 Initializing security functions Connecting Connected successfully NetExtender has been disconnected for one of the following NetExtender Starting NetExtender Starting NetExtender Starting NetExtender Starting J MetFxtender Startinna Version 5 5 156 Version 5 5 156 Version 5 5 156 Version 5 5 156 Version 5 5 156 Using NetExtender 43 To view the Debug Log either click the Debug Log icon or go to Log Debug Log Note It may take several minutes for the Debug Log to load During this time the Log window will not be accessible although you can open a new Log window while the Debug Log is loading To clear the log click Log gt Clear Log Disconnecting NetExtender Step 1 Step 2 To disconnect NetExtender perform the following steps Right click the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect Wait several seconds The NetE
28. Details Deny Allow Step 3 The Secure Virtual Assist client installs and launches In the future you can either launch Virtual Assist either by navigating to the Virtual Office window in your browser or you can launch it directly from your Applications folder Step4 Ifthe Server address is not auto propagated in the login window enter the Server address and click Request Support The server address can be either an IP address IPv6 address or hostname of the Dell SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols ammo VirtualAssist Server Request Request Support Support Step5 The list of Available Portals is displayed To connect to a specific portal select it and click OK To have your request be serviceable by all of the portals click OK without selecting a specific portal treo Available Portals Please select the portal associated with your techncian for service select none to have your request serviceable to all technicians No Portal Name 1 TestPortal 12 VirtualOffice OoOoOoOoorr OK Cancel Your service request will be displayed to all Technicians if you do not select a specific Technician When you request a specific Technician only that Technician will see your request 94 SRA 7 0 User Guide Step6 You may be prompted to enter an Assistance Code Fh Assistance Code OK Cancel Step7 If promp
29. External Web Site bookmarks are used to access an offloaded Web site or portal using a bookmark Select Disable security warning if you do not want a security warning dialog box 146 SRA 7 0 User Guide to be displayed when a user clicks this bookmark If left unchecked the warning dialog will allow the user to select a Do not show this warning again option if the user has permissions to edit this bookmark set above You are about to be redirected to a Web Site that may not be secure Do VOLI want to contin uper bel Lo not snow this vea ming aga me Yes Cancel For more information about offloaded applications see the Application Offloading section in the Dell SonicWALL SSL VPN Aaministrator Guide FIP Bookmarks For FTP bookmarks click Show advance server configuration to select the character encoding You can also select Use SSL VPN account credentials to log in or configure custom credentials for use with Single Sign On To disable the use of SSO clear the Automatically log in check box SSHv2 Bookmarks For SSHv2 bookmarks you must have SUN JRE 1 6 0 10 or higher and must be connecting to a server that supports SSHv2 There are also options to Automatically accept host key and to Bypass username The bypass option should only be used for SSHv2 servers that do not require authentication in the initial connection session such as Dell SonicWALL security appliances Editing Bookmarks You can change the IP address
30. Guide Step4 Enter a Password and click Login The Waiting window displays and shows the length of time you have been in the queue Step5 You need to provide the Technician with the password you just defined An easy way to do this is to click Add Information and give the Technician your password Enabling a System for Secure Virtual Access Note Secure Virtual Access is supported only on Windows clients Secure Virtual Access is installed automatically when Secure Virtual Assist is installed and can be accessed from the Programs list under the Window s start button Secure Virtual Access is similar to Secure Virtual Assist Unattended Mode in that Administrator privileges are required to install these client features and a Technician is prompted to provide the password established during set up to gain access to the system If Secure Virtual Access has been enabled on the Virtual Assist tab on the Portals Portals page of the management interface users should see a link on the Virtual Office portal to set up a system for Secure Virtual Access The following process allows Secure Virtual Access to be set up on a system Step1 Loginto the Virtual Office portal through the system you wish to set up for Secure Virtual Access and click the Virtual Access link Virtual Ge Access Setup this system for Virtual Access Mode Step 2 A file should download with parameters to install the VASAC exe file that will provide the needed c
31. IMPLIED WARRANTY CANNOT BE EXCLUDED SUCH WARRANTY IS LIMITED IN DURATION TO THE WARRANTY PERIOD BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS THE ABOVE LIMITATION MAY NOT APPLY TO YOU THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS AND YOU MAY ALSO HAVE OTHER RIGHTS WHICH VARY FROM JURISDICTION TO JURISDICTION This disclaimer and exclusion shall apply even if the express warranty set forth above fails of its essential purpose DISCLAIMER OF LIABILITY DELL SONICWALL S SOLE LIABILITY IS THE SHIPMENT OF A REPLACEMENT PRODUCT AS DESCRIBED IN THE ABOVE LIMITED WARRANTY IN NO EVENT SHALL DELL SONICWALL OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS BUSINESS INTERRUPTION LOSS OF INFORMATION OR OTHER PECUNIARY LOSS ARISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT OR FOR SPECIAL INDIRECT CONSEQUENTIAL INCIDENTAL OR PUNITIVE DAMAGES HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE HARDWARE OR SOFTWARE EVEN IF DELL SONICWALL OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES In no event shall Dell SonicWALL or its suppliers liability to Customer whether in contract tort including negligence or otherwise exceed the price paid by Customer The foregoing limitations shall apply even if the above stated warranty fails of its essential purpose BECAUSE
32. Konsole mk tar zxf MetExtender tgz mk cd netExtendercClient mk netExtendercClient install SonicWALL MetExtender 2 5 17 Installer Please run the NetExtender installer as root On many systems you can use the sudo command mk netExtendercClient sudo install Password SonicWALL NetExtender 2 5 17 Installer Checking Library dependencies Checking pppd INSTALLATION SUCCESSFUL Type netExtenderGui to launch NetExtender Look in usr share netExtender for a desktop shortcut and icon files nk netExtenderClient Jj Step4 Enter the cd netExtenderClient command SRA 7 0 User Guide Step5 Enter su C install to install NetExtender datta fl4 vm Downloads netextenderclient File Edit View Search Terminal Help datta ftl4 vm Downloads cd netExtenderClient datta fl4 vm netExtenderClient su c install Password SonicWALL NetExtender 5 5 786 Installer Checking library dependencies Checking pppd Do you want non root users to be able to run NetExtender If so I can set pppd to run as root but this could be considered a security risk Set pppd to run as root y N y mode of usr sbin pppd retained as 4555 r sr xr x mode of usr sbin pppd retained as 4555 r sr xr x mode of etc ppp retained as 8755 rwxr xr x mode of etc ppp peers retained as 8755 rwxr xr x mode of etc ppp peers sslvpn retained as 8644 rw r r mode of etc ppp peers wv
33. Management Interface displays and prompts you to enter your user name and password As a default value enter admin in the User Name field password in the Password field and select a domain from the Domain drop down list and click the Login button Only LocalDomain allows Administrator privileges Note that your Administrator may have set up another login and password for you that has only user privileges e SonicWALL Virtual Office Welcome to the Dell Virtual Office The Dell SonicWALL Virtual Office provides easy and secure remote access to your corporate network from anywhere on the Internet Domain ocalDomain v The default page displayed is the Virtual Office home page The default version of this page shows a SonicWALL logo although your company s system Administrator may have customized this page to contain a logo and look and feel of your company Go to the Virtual Office Overview page 9 to learn more about the Virtual Office home page From the Virtual Office portal home page you cannot navigate to the Administrator s environment If you have Administrator s privileges and want to enter the Administrator environment you need to go back to the login page and enter a username and password that 12 SRA 7 0 User Guide have Administrator privileges and login again using the LocalDomain domain Only the LocalDomain allows Administrator access to the management interface Also note that the
34. NetExtender SonicWALL MetExtender User oot Connected 0 Days 0003 13 Stats Routes DAS Server 10 5 106 142 Client IP 10 5 254 10 cent 20 10 EB Received 9 85 K Throughput 0 bytes Sec x Disconnect The Status tab provides the following information Field Description Server Indicates the name of the server to which the NetExtender client is connected Client IP Indicates the IP address assigned to the NetExtender client Sent Indicates the amount of traffic the NetExtender client has transmitted since initial connection Heceived Indicates the amount of traffic the NetExtender client has received since initial connection Throughput Indicates the current NetExtender throughput rate Using NetExtender 29 Closing the window clicking the x icon in the upper right corner of the window does not close the NetExtender session but minimizes it to the system tray for continued operation Also a balloon icon in the system tray appears indicating NetExtender has successfully installed Connected Server sslvpn eng sonicwall com IPs 1 128 1 111 Sent 121 74 KB Recerved 80 21 KB amp 5TPM 7 18 2011 p od SM i alll LS Step7 The NetExtender icon is displayed in the task bar Installing NetExtender Using the Internet Explorer Browser Dell SonicWALL SSL VPN NetExtender is fully compatible with Microsoft Windows 7 32 bit and 64 bit and supports the
35. Note If the client PC cannot be woken reinstall the Wake on Lan software and reconfigure the client PC The customer may end the service session at any time Using Secure Virtual Assist 103 Ending Secure Virtual Access Mode Disconnecting from a Secure Virtual Access session will place the system back in the support queue for later access by the Technician From the personal system side the user Technician may uninstall or terminate the application from the tray option icons An Administrator can forcibly remove a system from the queue If this occurs the Secure Virtual Access system should no longer attempt to connect to the support queue and should display an error message Using the Request Assistance Feature If the Display Request Help Button option has been enabled on the Virtual Assist tab on the Portals Portals page of the management interface users will see the Request Assistance button on the Virtual Office portal By clicking this button on the portal the user is placed in the Virtual Assist support queue for assistance fa Request E 28 Assistance Get assistance from a live technician For information on using Virtual Assist from the customer perspective see Initiating a Secure Virtual Assist Session from the Customer View on page 89 Using Secure Virtual Meeting To set up a Virtual Meeting the meeting Coordinator performs the following steps Login e Schedule a meeting e Invite meeting attendees
36. Out of the Virtual Office To end your session simply return to the Virtual Office home page from wherever you are within the portal and click the Logout button When using the Virtual Office with the admin username the Logout button is not displayed This is a security measure to ensure that Administrators log out of the administrative interface and not the Virtual Office Virtual Office Overview 15 16 SRA 7 0 User Guide Chapter 3 Using Virtual Office Features This chapter provides details on how to use the features in the Dell SonicWALL SSL VPN user portal This chapter contains the following sections e Importing Certificates section on page 17 e Using Two Factor Authentication section on page 17 e Using One Time Passwords section on page 22 Importing Certificates If the SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority Dell SonicWALL recommends that you import the certificate If using Internet Explorer the easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page The following warning messages may be displayed Potential Scripting Violation j x certificates is a security risk The Web site could install cert
37. Remote Application 3 Automatically log in 3 Display Bookmark to Mobile Con 7 Redirect drives 9 F Redirect SmartCards 7 Redirect plug and play devices y Auto reconnection v Bitmap caching y Visual styles Show window cantents while Play on this computer v F Span monitors Desktop composition nect clients Tips Help Which version of RDP should I use If you are using Internet Explorer on Windows you can use the ActiveX version For all other browsers and operating systems you should use the Java version How can I find my MAC address On the Windows computer that will act as the RDP server open a command window and run ipconfig all then look for physical address Option Usage Screen Size Select the default screen size to be used when users execute this bookmark It is advised that you select a size equal to or smaller than your current desktop screen size ActiveX RDP bookmarks also have a full screen option that will display the RDP window in full screen mode To toggle from the RDP window back to your desktop press Alt Tab Colors SRA 7 0 User Guide this bookmark Select the default color depth to be used when users execute Option Usage Application and Path To have the RDP session launch an application when the bookmark is initiated enter the path to the application in the Application and Path optional fiel
38. Service window Step 1 Double click a customer s user name to begin assisting the customer Service m Las Ticket ID Customer Pending To0004 user Technician Status Time Hapsed Issue Description Comments Pending 0 00 28 Note Return a customer to the queue by right clicking the user name on the Service List and selecting Requeue Someone else in a Technician role can then service this user This is useful if one Technician needs to hand off the user to another Technician because of differing areas of expertise or the end of shift Step2 The customer s entire desktop is displayed in the bottom right window of the Secure Virtual Assist application SRA 7 0 User Guide Virtual Assist 10 061105 user View Tools Commands Eo ir s its 4 Customer E mal Techescan E nad Addtionad Message IOpobonal P E 03 50 fuser Connected to customer 1 Pa X auu L3 ME eit cU ol eei kwte Ow Senece Logogng Viewer Ophore Expand About Sevee m 1 EMEND er Ticket ID Customer Techwaan Status Time Elapsed issue Desciption Commerts In Serace amp toome In evwce 00121 e ute Geey Scale Trusted Mode Ej Ful Screen a Auto Scaling Zoom 10 ie True Sae UD Refresh File Transfer e Chat C Syitemlnfo I Reboot Customer v GB Active Screens C Global Support Services Sonic WALL Inc 28 xij DD CEE S O T Ph fe Edt Wew F
39. Systems Inc asserts that this content is safe You should only install view this content if you trust Citrix Systems Inc to make that assertion Always trust content from Citrix Systems Inc tee Woe Step 5 The Citrix Web Client installs Citrix Receiver Citrix License Agreement CITRIX R LICENSE AGREEMENT This is a legal agreement AGREEMENT between you the Licensed User or representative of the Licensed User and Citrix Systems Inc or Citrix Systems Intemational GmbH Your location of receipt of this PRODUCT determines the the applicable entity is hereinafter refered to as licensing entity hereunder CITRIX Citrix Systems Inc a Delaware corporation markets and supports this product or feature release both hereinafter PRODUCT in the Americas Citrix Systems Intemational GmbH a Swiss company wholly owned by Citrix Systems Inc markets and supports this PRODUCT in Europe the Middle East Africa Asia and the Pacific BY SELECTING I ACCEPT BELOW YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS AGREEMENT IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT SELECT I DO NOT ACCEPT BELOW AND DO NOT INSTALL OR USE THE PRODUCT NO RIGHT OF RETURN AND REFUND I5 AVAILABLE TO YOU IF YOU WERE PROVIDED WITH NOTICE OF AND ACCESS TO THE TERMS OF THIS AGREEMENT PRIOR TO LICENSE PURCHASE IF YOU DO NOT AGREE AND WERE NOT NOTIFIED OF AND PROVIDED WITH ACCESS TO SRA 7 0 User Guide 9 St
40. Using the Secure Virtual Assist File Transfer on page 88 Changing the Secure Virtual Assist Level of Control on page 99 e Ending a Virtual Assist Session on page 100 e Ending a Virtual Assist Session on page 100 Inviting Customers by Email Step 1 Step 2 Step 3 Step 4 Step 5 To invite a customer to Virtual Assist use the email invitation form on the left of the Virtual Assist window If it is not displayed click the Invite button in the toolbar Note Customers who launch Virtual Assist from an email invitation can only be assisted by the Technician who sent the invitation Customers who manually launch Virtual Assist can be assisted by any Technician Enter the customer s email address in the Customer Email field Optionally enter Technician Email to use a different return email address than the default Technician email Some mail servers require that an email address be entered and that it be on a valid domain Optionally enter an Additional Message to the customer Click Invite The customer will receive an email with an HTML link to launch Virtual Assist Customers requesting assistance will appear in the Assistance Queue and the duration of time they have been waiting will be displayed Using Secure Virtual Assist 83 Assisting Customers 84 A pop up window in the bottom right task bar alerts the Technician when a customer is in the assistance queue The customer queue is also displayed in the
41. VPN to enable secure mobile connections to private networks protected by Dell SonicWALL security appliances For information about installing and using SonicWALL Mobile Connect see the SonicWALL Mobile Connect User Guide available on www sonicwall com at http www sonicwall com app projects file_downloader document_lib php t PG amp id 482 For SSL VPN to work as described in this guide the SonicWALL SRA security appliance must be installed and configured according to the directions provided in the SonicWALL SRA Getting Started Guide for your model Browser Requirements The following Web browsers are supported for the SSL VPN Virtual Office portal e Internet Explorer 8 0 9 0 d Firefox 16 0 Safari 5 0 Chrome 22 0 For Administrator management interface Web browser compatibility refer to the SonicWALL SSL VPN Administrator Guide 10 SRA 7 0 User Guide The following table provides specific browser requirements How to read this table MacOSX browser XU NUR independent independent Java 1 6 0_10 Java 1 6 0 104 RDP5 Java 1 6 0 Feature Browser OS Platform RDP5 Java 1 6 0 104 Minimum Recommended VNC Java 1 6 0 104 Telnet Java 1 6 0 104 GEP I SSHv2 Java 1 6 0_10 Notes 1 MacOS and Linux supports Virtual Assist on the client side only Technician must be running a supported version of Windows operating system e e browser Vir
42. YUSERGROUP USERNAME Password PASSWORD PASSWORD or leave the field blank For Web HTTP and Secure Web HTTPS bookmarks select the Forms based Authentication check box to use this method for SSO and then fill in the following fields that are exposed e Configure the User Form Field to be the same as the name or id attribute of the HTML element representing User Name in the Login form for example input type text namez userid e Configure the Password Form Field to be the same as the name or id attribute of the HTML element representing Password in the Login form for example input typezpassword namez PASSWORD idZ PASSWORD maxlength 128 gt Managing Bookmarks 165 Step7 Click OK Step8 Enter the User name and password for the service a Server Citrix Program Neighborhood f Citrix User 10 n a orhood d gt Agent o Recycle Bin Windows Server 2003 Enterprise Edition Evaluation copy Build 3790 Servi k 1 166 SRA 7 0 User Guide Appendix A Support Information This appendix contains the following sections e Contact Information on page 167 e GNU General Public License GPL Source Code on page 167 e Limited Hardware Warranty on page 167 e End User Licensing Agreement on page 168 Contact Information For timely resolution of technical support questions visit Dell SonicWALL on the Internet at lt htip www sonicwall com us support h
43. a secure file on the smartphone EU AL ta ff 12 09 AM mG ACS amp FI 6 42PM SON WALL gt SONICWALL NetExtender NetExtender Server Login 10 0 61 8 Initializing engine user LocalDomain ssonicwall sonicwall com soraesonic sonicwall com Domain LocalDomain Save user name amp password cw If One Time Password is enabled on the Dell SonicWALL SRA appliance the One Time Password prompt is displayed Enter the temporary password that was emailed to your configured account and tap OK Sat B8 RU 114905 A temporary password has been sent to your sonicwall com address Please enter it below OK Cancel If your smartphone is synchronized to your email account you can pull down the email notification from the top bar or switch to your home page and access your email from there After viewing the temporary password in your email or copying it to your clipboard tap the NetExtender application icon to return directly to this screen To use the clipboard press the password in your email and select Select Text Press the selected text again and select Copy Then in the OTP screen press the field and select Paste Some Android smartphones require you to hold the OK button for clipboard access If Two Factor Authentication is enabled on the Dell SonicWALL SRA appliance you may be prompted to update your PIN Personal Identification Number or create a new one Using NetExtender 65
44. appliance Always check http www sonicwall com us Support html for the latest version of this manual as well as other Dell SonicWALL products and services documentation Organization of this Guide The Dell SonicWALL SRA User Guide organization is structured into the following parts Chapter 1 Using this Guide This chapter provides helpful information for using this guide It includes conventions used in this guide information on how to obtain additional product information and a Quick Access Worksheet that you should complete before using the SRA appliance Chapter 2 Virtual Office Overview This chapter provides an overview of new Dell SonicWALL SRA appliance user features NetExtender File Shares Secure Virtual Assist Secure Virtual Access Secure Virtual Meeting services sessions bookmarks and service tray menu options Chapter 3 Using Virtual Office Features This chapter provides procedures on importing certificates using Two Factor authentication and using One Time Passwords Chapter 4 Using NetExtender This chapter provides procedures on installing configuring and using NetExtender Chapter 5 Using Virtual Assist This chapter provides procedures on installing and using Virtual Assist and Virtual Meeting Chapter 6 Using File Shares This chapter provides procedures on using file shares Chapter 7 Managing Bookmarks This chapter provides procedures on configuring bookmarks Appendix A Support Information
45. be contradicted by evidence of any prior or contemporaneous agreement unless such agreement is signed by both parties In the absence of such an agreement this Agreement shall constitute the complete and exclusive statement of the terms and conditions and no extrinsic evidence whatsoever may be introduced in any judicial proceeding that may involve the Agreement This Agreement represents the complete agreement and understanding of the parties with respect to the subject matter herein This Agreement may be modified only through a written instrument signed by both parties 174 SRA 7 0 User Guide
46. can be launched directly from the client s computer The following sections describe how to use Secure Virtual Assist and Secure Virtual Meeting e Using Secure Virtual Assist section on page 77 Using Secure Virtual Meeting section on page 104 Using Secure Virtual Assist The following sections describe how to use Secure Virtual Assist e Installing and Launching Secure Virtual Assist section on page 78 e Configuring Secure Virtual Assist Settings section on page 79 e Selecting a Secure Virtual Assist Mode section on page 81 e Launching a Secure Virtual Assist Technician Session section on page 81 e Performing Secure Virtual Assist Technician Tasks section on page 83 e Initiating a Secure Virtual Assist Session from the Customer View section on page 89 e Using Secure Virtual Assist section on page 99 e Using Secure Virtual Assist in Unattended Mode section on page 100 e Enabling a System for Secure Virtual Access section on page 101 e Using the Request Assistance Feature section on page 104 Secure Virtual Assist is fully supported on Windows platforms Secure Virtual Assist is certified to work on Windows 8 Windows 7 Windows Vista and Windows XP The Secure Virtual Assist client is also available for Linux and Mac OS Note When a user requests service as a customer Virtual Assist can be run while connected to the system over an RDP session for Windows 7 and Windows Vista platforms however Virtual
47. click Properties The NetExtender Preferences window is displayed Click Connection Scripts NetExtender Properties Connection Profil Connection Scripts Settings When NetExtender becomes connected Connection Scripti Proxy Attemptto execute domain logon script Log Hide the console window Advanced Packet Capture V Automatically execute the batch file NxConnect bat Edit NxConnect bat __ Hide the console window When NetExtender becomes disconnected Automatically execute the batch file NxDisconnect bat Edit NxDisconnect bat Hide the console window C cence To enable the domain login script select the Attempt to execute domain logon script check box When enabled NetExtender will attempt to contact the domain controller and execute the login script Optionally you may now also select to Hide the console window If this check box is not selected the DOS console window will remain open while the script runs Note Enabling this feature may cause connection delays while remote client s printers and drives are mapped Make sure the domain controller and any machines in the logon script are accessible via NetExtender routes To enable the script that runs when NetExtender connects select the Automatically execute the batch file NxConnect bat check box Optionally you may now also select to Hide the console window If this check box is not selected the DOS conso
48. days after the original shipment by Dell SonicWALL and continuing for a period of twelve 12 months that the product will be free from defects in materials and workmanship under normal use This Limited Warranty is not transferable and applies only to the original end user of the product Dell SonicWALL and its Support Information 167 suppliers entire liability and Customer s sole and exclusive remedy under this limited warranty will be shipment of a replacement product At Dell SonicWALL s discretion the replacement product may be of equal or greater functionality and may be of either new or like new quality Dell SonicWALL s obligations under this warranty are contingent upon the return of the defective product according to the terms of Dell SonicWALL s then current Support Services policies This warranty does not apply if the product has been subjected to abnormal electrical stress damaged by accident abuse misuse or misapplication or has been modified without the written permission of Dell SonicWALL DISCLAIMER OF WARRANTY EXCEPT AS SPECIFIED IN THIS WARRANTY ALL EXPRESS OR IMPLIED CONDITIONS REPRESENTATIONS AND WARRANTIES INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE NONINFRINGEMENT SATISFACTORY QUALITY OR ARISING FROM A COURSE OF DEALING LAW USAGE OR TRADE PRACTICE ARE HEREBY EXCLUDED TO THE MAXIMUM EXTENT ALLOWED BY APPLICABLE LAW TO THE EXTENT AN
49. enter the lobby OK Start the meeting immediately at the next available time slot based on the current time and enter the lobby 108 SRA 7 0 User Guide After you create a meeting you enter the meeting s lobby automatically Secure Virtual Meeting 7 0 0 8 Settings Help E i a gt ill pet Meeting Name meeting 1 Meeting State Waiting Meeting Members Role State Participant Coordinator Waiting To All Participants Please select the host Welcome ta SonicWALL Secure Virtual Meeting When a meeting is scheduled for a later time the Coordinator exits the meeting and returns to the lobby at the meeting start time If the Allow starting meeting without meeting creator setting is disabled and the Coordinator has not joined the meeting by the start time the participants will be kept waiting in the lobby until the scheduled meeting end time when all participants automatically exit the lobby If the Allow starting meeting without meeting creator setting is enabled and the Coordinator has not joined the meeting by the start time within two minutes past the scheduled start time an existing participant is chosen randomly to become the Coordinator If the Coordinator enters but does not start the meeting when the meeting time ends the Coordinator receives a notification to reschedule or end the meeting When the end time is reached the meeting ends and all meeting members automatically exit the meeting In t
50. same functionality as with other Windows operating systems NetExtender is also compatible with the Mac OS X Lion 10 7 Note It may be necessary to restart your computer when installing NetExtender Windows 7 Internet Explorer Prerequisites It is recommended that you add the URL or domain name of your SSL VPN server to Internet Explorer s trusted sites list This will simplify the process of installing NetExtender and logging in by reducing the number of security warnings you will receive To add a site to Internet Explorer s trusted sites list complete the following procedure Step1 In Internet Explorer go to Tools gt Internet Options Step2 Click the Security tab Step3 Click the Trusted Sites icon and click the Sites button to open the Trusted sites window General Security Privacy Content Connections Programs Advanced You can add and remove websites from this zone All websites in this zone will use the zone s security settings Select a zone to view or change security settings Qo amp 9 Internet Localintranet Trusted sites Restricted sites Trusted sites This zone contains websites that you trust not to damage your computer or your files You have websites in this zone Add this website to the zone 1713122 03575 2222 12 02522 52 22 2 0 9 08 Sites n pup eevee Security level for this zone Custom settings To change t
51. servers an weos 165 as T you were on tne local Step2 Under Single Sign On Settings select Use SSL VPN account credentials to log into bookmarks to enable SSO for bookmarks Leave the box unchecked if you do not want to use SSO for bookmarks User Options Single Sign On Settings M Automatically log into bookmarks Save Cancel Step 3 Click Save to save your changes Fileshares will use the configured domain name of which the user is a member to supply to the backend server HTTP HTTPS FTP RDP ActiveX RDP Java will supply the username and password that was used to login If the server is expecting a domain prefixed username SSO will fail In some cases a default domain can be specified at the server to allow SSO to succeed Per Bookmark Single Sign On Options Dell SonicWALL SSL VPN supports per bookmark single sign on for the following bookmark services e Terminal Services RDP Active X e Terminal Services RDP Java e Web HTTP e Secure Web HTTPS e File Shares CIFS e File Transfer Protocol FTP 164 SRA 7 0 User Guide Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Per Bookmark SSO allows users to enable or disable SSO for individual bookmarks This flexibility in specifying login credentials is useful in the following cases e Users who use multiple accounts to access a variety of resources e Users who use two factor authentication to log in to the SSL VPN Virtual Office but use a stat
52. storage Step9 Tap Turn on USB storage to prepare for copying the apk installer to the Android smartphone B Q B ME 1 36 USE storage in use Turn off USB storage Step 10 On the computer copy the apk file to the Android SD card Step 11 Unmount the Android SD card from your computer On Windows it will show up under My Computer as a new drive On Mac a new drive will show up on the desktop Step 12 After unmounting the Android SD card from your computer tap Turn off USB storage Step 13 On your Android smartphone launch a file browser application 62 SRA 7 0 User Guide Step 14 Using the file browser locate the apk file and run it to install NetExtender Android After installation the NetExtender icon appears on the applications page of the smartphone B UG BR 1 597 search a did Le ra Market Messagin Newton and We Lite A Settings Spare Parts CT Terminal Torch Emulat Music Phone i a i Speech Record G Twitter re Navigatic F p eS Superuser Untangle me Using NetExtender on Android Smartphones Instructions for using NetExtender on your Android smartphone are available in the following sections Connecting to NetExtender on page 64 Exiting or Disconnecting from NetExtender on page 68 Checking Status Routes and DNS Settings on page 69 Configuring Profiles Preferences and Proxy Servers on pa
53. the Password field You will be prompted to create a PIN f the RSA server does not require a PIN simply enter the SecurlD token code Note Consult with your network Administrator to determine if your configuration requires a PIN Step4 Select the appropriate Domain If manually entering the Domain it is case sensitive Step5 Click Login Creating a New PIN The RSA Authentication Manager automatically determines when users are required to create a new PIN will determines that user associated with a particular token requires a new PIN The SRA appliance prompts the user to enter new PIN Using Virtual Office Features 19 Enter the PIN in the New PIN field and again in the Confirm PIN field and click OK The PIN must be between 4 and 8 characters long Enter a new PIN having From 4 ka 8 digits Step6 The RSA Authentication Manager verifies that the new PIN is an acceptable PIN If the PIN is accepted the user is prompted to log in with the new passcode PIN accepted Please wait For token to change then login with the ish new passcode conan REA AUIR E Waiting for the Next Token Mode If user authentication fails three consecutive times the RSA server requires the user to generate and enter a new token To complete authentication the user is prompted to wait for the token to change and enter the next token Please wait For the token to change then enter the next code VASCO Two Factor User Au
54. them in the Properties window a NetExtender pop up window will prompt you to enter them when you first connect Step5 Click the Internet Explorer proxy settings button to open Internet Explorer s proxy settings Using NetExtender 39 Configuring NetExtender Log Properties Step 1 Step 2 Step 3 Step 4 Within the NetExtender Properties dialog box click the Log heading in the menu on the left panel The available options provide basic control over the NetExtender Log and Debug Log NetExtender Properties Connection Profil Log Settings Connection Script Proxy Unlimited log file size Log Advanced Packet Capture The log file is currently 10 06 KB Clear NetExtender Log NetExtender Log Set maximum log file size to v Enable NetExtender Debug Log The log file is currently 295 54 KB Clear Debug Log Log Viewer To establish the size of the NetExtender Log select either the Unlimited log file size radio button or the Set maximum log file size to radio button If you choose to set a maximum size use the adjoining arrows To clear the NetExtender Log select the Clear NetExtender Log button To Enable the NetExtender Debug Log select the corresponding check box To clear the debug log select the Clear Debug Log button Click the Log Viewer button to view the current NetExtender log Click Apply 40 SRA 7 0 User Guide Configuring NetExtender Advanced Properties
55. this Limited Warranty unless SonicWALL receives Customer s detailed written warranty claim within the applicable warranty period b Disclaimer EXCEPT FOR THE EXPRESS WARRANTIES SET FORTH ABOVE TO MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW SONICWALL HEREBY DISCLAIMS ON BEHALF OF ITSELF ITS SUPPLIERS DISTRIBUTORS AND RESELLERS ALL WARRANTIES EXPRESS STATUTORY AND IMPLIED APPLICABLE TO THE PRODUCTS SERVICES AND OR THE SUBJECT MATTER OF THIS AGREEMENT INCLUDING BUT NOT LIMITED TO ANY WARRANTY OF MERCHANTABILITY NON INFRINGEMENT OR FITNESS FOR A PARTICULAR PURPOSE 6 LIMITATION OF LIABILITY The Products are not designed manufactured authorized or warranted to be suitable for use in any system where a failure of such system could result in a situation that threatens the safety of human life including without limitation any such medical life support aviation or nuclear applications Any such use and subsequent liabilities that may arise from such use are totally the responsibility of Customer and all liability of SonicWALL whether in contract tort including without limitation negligence or otherwise in relation to the same is excluded Customer shall be responsible for mirroring its data for backing it up frequently and regularly and for taking all reasonable precautions to prevent data loss or corruption SonicWALL shall not be responsible for any system downtime loss or corruption of data or loss of production NOTWITHSTANDING
56. 0 User Guide Note When deleting or overwriting files the customer is warned and must give the Technician permission unless the Technician has clicked the Request Full Control button and the customer has confirmed New folder creates a new folder in the selected directory Rename renames the selected file or directory When a file is transferring the transfer progress is displayed at the bottom of the File Transfer window Click the Exit button to cancel a transfer in progress Note File Transfer supports the transfer of single or multiple files It does not currently support the transfer of directories To select multiple files hold down the Ctrl button while clicking on the files Initiating a Secure Virtual Assist Session from the Customer View The following sections describe how to initiate and use Virtual Assist on the three supported client platforms e Initiating Secure Virtual Assist on a Windows Client section on page 89 e Initiating Secure Virtual Assist on a MacOS Client section on page 93 e Initiating Secure Virtual Assist on a Linux Client section on page 96 e Using Secure Virtual Assist section on page 99 e Using Secure Virtual Assist in Unattended Mode section on page 100 e Enabling a System for Secure Virtual Access section on page 101 e Using the Request Assistance Feature section on page 104 Initiating Secure Virtual Assist on a Windows Client To launch a Virtual Ass
57. 5 0 61 65 cgi bin soniclauncher JRE OK SonicWALL File Shares HTML Version Help My Computer 3 Remote Network ca E i v att S E Il Bookmarks Entire Network Note The File Shares Applet window will not automatically refresh when its contents have changed or if it has been previously viewed To refresh click the Refresh icon from the toolbar or use the Refresh option from the right click menu Note he remote network can be browsed from the remote window s address bar The local directory can not be changed from the address bar The remote path is capped at 1024 characters The actual maximum string size will change depending on language Step5 To select multiple items click the items while holding the shift or the ctrl key Clicking on an item again will de select it and remove it from the group Step6 To copy a file or group of files either to or from the network select desired items and click and drag them across the center boundary This will copy the file s into the open directory Alternatively the file s can be copied directly into a folder by dragging the icon and dropping over the desired folder one could also use the copy button on the toolbar or use the copy option from the right click menu A progress bar displays the waiting time required to copy the files Note The File Shares Applet supports overwriting existing files If a file exists with the same na
58. 61 84 cgi bin sshv27HOST 10 0 61 41 Microsoft Internet Explorer provide SonicWALL SSHv2 Step 2 A hostkey popup displays Click Yes to accept and proceed with the login process Select an Option Step 3 Enter your password and click OK E https 10 0 61 84 cgi bin sshv2 7HOST 10 0 61 41 Microsoft Internet Explorer provide Password Authentication BO rere Managing Bookmarks 157 Step4 The SSH terminal launches in a new screen i SonicWALL sstiv2 Terminal DX gt SSHv2 Loading Google Chrome EX beer 10 5 106 140 cqi bin sshv2 bmid File Options Last login Mon Feb 18 13 59 28 2 root FEDORA 8 The SSHv2 Java Client has loaded Click the Close window button to close this window after you are finished your SSHv2 session Close Window Using Web Bookmarks Step1 Click the HTTP or HTTPS bookmark Note HTTP bookmarks can have a port designation and a path Step2 A new window is launched in your default browser that connects to the domain name or IP address specified in the bookmark HTTP amp HTTPS Bookmarks have been tested and verified to support the following web applications e Microsoft Outlook Web Access 2010 Outlook Web Access 2007 and Outlook Web Access 2003 e Windows Sharepoint 2007 Windows Sharepoint Services 3 0 and Windows Sharepoint services 2 0 e Please note the client integrated features of Sharepoint are not supported e Lotus Domin
59. 7 0 User Guide Step3 Optionally you can enter your name and a summary of your issue and click Request Support Step 4 Step 5 Step 6 Tour Take the Tour to learn how Virtual Assist works FAQ Why do have to install software to receive assistance You will then be prompted to install the Secure Virtual Assist client After the installation is complete the Secure Virtual Assist client will launch automatically Request Assistance Wait for Tech Install Software Receive Assistance To begin a virtual assist session with your technician please enter your name and click the Request Assistance button In just a few moments there will be an established remote desktop connection between your computer and your technician What if deal with sensitive information How do install the browser plug in Virtual Assist Client Download for Linux More FAC S gt Request help directly by saving the Virtual Assist Client to your computer then unpacking and running it M Issue Summary 128 characters maximum x EJ Request Support You will be asked to install software so that a technician can control your machine remotely You will always have overriding control of your machine throughout the cnaccinn You can now launch Virtual Assist either from a shortcut on your desktop or by typing VirtualAssistGui in the Terminal window If the Server address is not auto propagated in the login win
60. 94 About StatusID Source Ox00000 Ox00000 Ox00070 Ox00080 Ox01000 Ox01010 OxO06000 Ox00000 Phennnnn Service Engine Engine Engine Engine Engine Engine Service S oannca Description NetExtender Starting Version 5 5 156 Initializing engine Initializing driver Initializing security functions Connecting Connected successfully NetExtender has been disconnected for one of the f NetExtender Starting NetEvtender Startin _ Version 5 5 156 Mercinn 55 15h To view details of a log message double click a log entry or go to View gt Log Detail to open the Log Detail pane To save the log either click the Export icon or go to Log gt Export To filter the log to display entries from a specific duration of time go to the Filter menu and select the cutoff threshold To filter the log by type of entry go to Filter gt Level and select one of the level categories The available options are Fatal Error Warning and Info in descending order of severity The log displays all entries that match or exceed the severity level For example when selecting the Error level the log displays all Error and Fatal entries but not Warning or Info entries zl NetExtender Log Viewer NetExtender Log Log ine Level amp Info amp Info Info nfo amp Info nfo aA Er d amp Info amp Info d amp Info d amp Info ki 2 Filter i
61. AGREES TO THE ALLOCATION OF LIABILITY SET FORTH IN THIS SECTION AND ACKNOWLEDGES THAT WITHOUT ITS AGREEMENT TO THESE LIMITATIONS THE PRICES CHARGED FOR THE PRODUCTS AND SERVICES WOULD BE HIGHER 7 GOVERNMENT RESTRICTIONS 8 GENERAL Customer agrees that it will not export or re export the Products without SonicWALL s prior written consent and then only in compliance with all requirements of applicable law including but not limited to U S export control regulations Customer has the responsibility to obtain any required licenses to export reexport or import the Products Customer shall defend indemnify and hold SonicWALL and its suppliers harmless from any claims arising out of Customer s violation of any export control laws relating to any exporting of the Products By accepting this Agreement and receiving the Products Customer confirms that it and its employees and agents who may access the Products are not listed on any governmental export exclusion lists and will not export or re export the Products to any country embargoed by the U S or to any specially denied national SDN or denied entity identified by the U S Applicable export restrictions and exclusions are available at the official web site of the U S Department of Commerce Bureau of Industry and Security www bis doc gov For purchase by U S governmental entities the technical data and computer software in the Products are commercial technical data and commercial computer soft
62. ALL Secure Virtual Assist is fully tested on the Ubuntu distribution of Linux It Step 1 Step 2 has not been tested on other Linux distributions To launch a Virtual Assist customer session to request help on your Linux computer perform the following steps There are several methods for accessing Virtual Assist e Navigate to the URL of the Virtual Assist home page that is provided by your support Technician e f you received an email invitation click the link in the email or paste the URL into your Web browser e The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SonicWALL Virtual Office Welcome to the Dell Virtual Office The Dell SonicWALL Virtual Office provides easy and secure remote access to your corporate network from anywhere on the Internet Domain LocalDomain bd Login Looking For technical assistance Request help with Virtual Assist e Or you may need to login to the Virtual Office and click the Request Assistance button Request Assistance Get assistance fram a live technician MD You will be prompted to click the Virtual Assist Client Download for Linux button It will prompt you to download the VACLinux x86 tgz file Unpackage the file and run the Install file You can now launch Virtual Assist either from a shortcut on your desktop or by typing VirtualAssistGui in the Terminal window 96 SRA
63. Ask Me Later Windows Firewall has blocked this program from accepting connections from the Internet or a network IF you recognize the program or trust the publisher you can unblock it Wher should unblock a program If you selected Appoint Technician a window listing all Technicians on duty appears Select the Technician you would like to assist you and click Request Support Your service request will be displayed to all Technicians if you do not select a specific Technician When you request a specific Technician only that Technician will see your request Select the portal for the requested Technician and click OK If you do not select a portal you will be assisted by any Technician Portals Please select the portal associated with your Technician for service Select none to have your request serviceable to all Technicians Portal Name VirtualAssist VirtualOffice Using Secure Virtual Assist 91 After selecting a portal a certificate prompt appears followed by an assistance code and or disclaimer if configured by the Administrator Step9 A pop up window indicates that you are in the Virtual Assist queue The Technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request C Waiting Jl E E 4 Technician will be available to help you shortly You 3 may cancel your request anytime by clicking the Cancel button Your current time in queue is 0 11 Information Cance
64. Displays Connection Profile and Connection Settings options e Expand Displays the Email Invite Service Logging and Chat panes e About Displays the version information for the Secure Virtual Assist client Note Clicking the button in the bottom right corner of the Taskbar will minimize the view so only the titles of the buttons are displayed and not the icons Clicking the x button in the top right of the corner will close Virtual Assist You can also display additional shortcuts and controls by selecting View Tab Controls for Current Customer View Tools Commands 3b user Full Color Vier Oni a EH Full Screen 4 Auto Sealing G Zeom Auto Sca ae True ese iQ Gray Scale QD Refresh 1t File Transfer Gp Chet Eh System lefa DM Reboot Customer Sil Active Screens C The following options appear at the top of the Virtual Assist window e Full Screen Expands the Virtual Assist window to the Technicians entire monitor e Auto Scaling Fits the customer s screen to the Virtual Assist window e Zoom Customizes the zoom of the customer s screen e True Size Zooms to the actual size of the customer s monitor resolution e Gray Scale Change the display to gray scale instead of full color e Refresh Refreshes the customer s screen File Transfer Opens the File Transfer utility See the Using the Secure Virtual Assist File Transfer on page 88 for more information e Chat Opens a chat window with
65. FS e File Transfer Protocol FTP Telnet e Secure Shell version 1 SSHv1 e Secure Shell version 2 SSHv2 The following sections provide additional details about adding the different types of bookmarks e Citrix Bookmarks on page 141 e RDP ActiveX and Java Bookmarks on page 143 e Web Bookmarks on page 146 FTP Bookmarks on page 147 SSHv2 Bookmarks on page 147 Once the configuration has been updated the new bookmark will be displayed in the Virtual Office Bookmarks table Click a bookmark description to go to the bookmark location that you have defined Citrix Bookmarks For Citrix bookmarks you can select the following options e Designate that it be a secure Citrix connection by selecting the HTTPS Mode check box e Select Always use Java in Internet Explorer to use Java to access the Citrix Portal when using Internet Explorer Without this setting a Citrix ActiveX client or plugin must be used with IE This setting lets users avoid installing a Citrix client or plugin specifically for IE browsers Java is used with Citrix by default on other browsers and also works with IE Enabling this check box leverages this portability Managing Bookmarks 141 142 SRA 7 0 User Guide Select Always use specified Citrix ICA Server to explicitly specify the Citrix ICA Server Address for the Citrix ICA Session By default the Bookmark uses the information provided in the ICA configuration on the Citrix s
66. IUS Server Two Factor Authentication Process To log in to the Virtual Office using another type of RADIUS server for two factor authentication perform the following steps Step1 Enter the IP address of the SRA appliance in your computers browser The authentication window is displayed 9 SonicWALL Secure Remote Access DP300 Challenge 1048 Domain VASCOIKEY x Step2 Enter your username in the Username field Step3 Enter your password in the Password field Step4 Select the appropriate Domain If manually entering the Domain it is case sensitive Step5 Click Login Using Virtual Office Features 21 Step6 You will be prompted to enter additional information the details of which will depend on the type of RADIUS server used The example below shows an M ID RADIUS server which first prompts you to Please enter the M ID PIN Enter the PIN in the Challenge field and click OK Please enter the M ID PIN Step 7 You will then be prompted to Please enter the M ID Passcode Enter the passcode received through email or text message in the Challenge field and click OK Using One Time Passwords The following sections describe how to use one time passwords User Prerequisites page 22 e User Configuration Tasks page 23 e Verifying User One Time Password Configuration page 24 User Prerequisites Users must have a user account enabled in the SSL VPN management interface Only users enabled by the Admini
67. Java you can select any of the following options as well Dual monitors Span monitors Font smoothing Desktop composition and Remote Application Automatically log in Check this option and select Use SSL VPN account credentials to forward credentials from the current SSL VPN session Select Use custom credentials to enter a custom username password and domain for this bookmark Display Bookmark to Mobile Check this option to display bookmarks to Mobile Connect Connect clients clients running Mobile Connect 2 0 or higher Some devices may require supported third party applications for this feature to work properly w Tip The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with Dell SonicWALL SSL VPN Step7 When you are finished Click the Add button to add this bookmark to your Virtual Office list Managing Bookmarks 145 Determining the Remote Computer s Full Name or IP Address Step 1 Step 2 Step 3 Step 1 Step 2 Step 3 Complete the following steps to determine the full name of the computer to which the RDP bookmark is pointing Right click the My Computer icon on the desktop of the remote computer and select Properties Click the Remote tab The full computer name will be listed under Remote Desktop Complete the following steps to determine the IP address of your computer In the Windows S
68. L secure NetExtender point to point access to permitted hosts and subnets on the internal network Virtual Office Overview 13 Node Description Secure Virtual Assist Provides access to Virtual Assist an easy to use tool that allows Sonic WALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Virtual Assist is a light weight thin client that installs automatically using Java from the Sonic WALL SSL VPN Virtual Office without requiring the installation of any external software For computers that do not support Java Virtual Assist can be manually installed by downloading an executable file from the Virtual Office Secure Virtual Meeting Provides access to Virtual Meeting which allows multiple users to view a desktop and interactively participate in a meeting from virtually any where with an Internet connection Virtual Meeting is similar to the one to one desktop sharing provided by Virtual Assist except multiple users can share a desktop Secure Virtual Access if config Secure Virtual Access allows Technicians to gain access to systems ured by Administrator outside the LAN of the SRA appliance After downloading and installing the thin client for Secure Virtual Access mode the system will appear only on that Technician s Virtual Assist support queue within the SRA s management interface Bookmarks Provides a list of available bookmarks whi
69. Login failed you must change your password Please contact your administrator Type your old password into the Current Password field then type a new password into the New password field and again into the Type it again field Tap OK Related Documents The following Technical Notes provide more information on advanced NetExtender scenarios e Running NetExtender on a Different TCP Port http www sonicwall com us support 2134 3154 html e Using the Dell SonicWALL CDP Agent over a Dell SonicWALL NetExtender Connection http www sonicwall com us support 2134 3487 html e Using Dell SonicWALL NetExtender to Access FTP Servers http www sonicwall com us support 2134 3465 html e Resolving NetExtender Error With McAfee Enterprise 8 5 http www sonicwall com us support 2134 6813 html 76 SRA 7 0 User Guide Chapter 5 Using Secure Virtual Assist oecure Virtual Assist provides remote assistance and virtual meeting capabilities Secure Virtual Assist is an easy to use tool that allows Dell SonicWALL SSL VPN users to remotely support customers by taking control of their computers while the customer observes Secure Virtual Meeting allows Dell SonicWALL SSL VPN users to participate in virtual meetings via the internet Secure Virtual Assist is a lightweight thin client that installs automatically using the Dell SonicWALL SSL VPN Virtual Office Secure Virtual Assist can also be installed as a stand alone client that
70. Record Chat Ei Invite button is available for the Coordinator or Assistants with invite permission It opens the invite dialog if the lobby is not open Invite details are described in Creating Email Invites on page 116 dei The Polling button is available for the Coordinator or Assistants with polling permission It opens the polling dialog detailed in Polling on page 117 EL The Chat button is available for all Participants including View only Participants It opens a chat dialog if the lobby is not open Chat details are described in Text Chatting on page 122 SRA 7 0 User Guide 4 4 The Lobby button is available for all meeting members including View only Participants If the lobby is hidden during a meeting it displays the lobby window when the Host is sharing the screen 203 The Options button opens the Meeting Settings window described in Revising Meeting Settings on page 112 and is available for all Participants The Viewer button is available for all Participants except the Host It toggles the window between the Participant s window and the Host s desktop Q The About button opens the About dialog which identifies the Secure Virtual Meeting client and version The About button is available for all meeting members including View only Participants In addition Participants can double click something on the Host s desktop while it is being shared to call the Host s attention to it
71. S Client To launch a Virtual Assist customer session to request help on your MacOS computer perform the following steps Step1 There are several methods for accessing Virtual Assist Navigate to the URL of the Virtual Assist home page that is provided by your support Technician If you received an email invitation click the link in the email or paste the URL into your Web browser The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SonicWALL Virtual Office Welcome to the Dell Virtual Office The Dell SonicWALL Virtual Office provides easy and secure remote access to your corporate network from anywhere on the Internet Password Domain LocalDomain il Login Looking For technical assistance Request help with Virtual Assist Or you may need to login to the Virtual Office and click the Request Assistance button a Request P Assistance Get assistance from a live technician Using Secure Virtual Assist 93 Step2 The first time you launch Virtual Assist you will be prompted to allow the Secure Virtual Assist applet to be installed on your computer Click Allow An applet from sslvpn eng sonicwall com is requesting A KL access to your computer Si e The digital signature from SonicWALL Inc has been verified Allow all applets from sslvpn eng sonicwall com with this signature ril z K A L Show
72. SOME STATES OR URISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF CONSEQUENTIAL OR INCIDENTAL DAMAGES THE ABOVE LIMITATION MAY NOT APPLY TO YOU End User Licensing Agreement PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SONICWALL PRODUCT BY INSTALLING OR USING THE SONICWALL PRODUCT YOU AS THE CUSTOMER OR IF NOT THE CUSTOMER AS A REPRESENTATIVE AGENT AUTHORIZED TO BIND THE CUSTOMER INDICATE ACCEPTANCE OF AND AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT FOR AND ON BEHALF OF THE CUSTOMER IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT THEN DO NOT USE THE PRODUCT AND RETURN IT TO THE PLACE OF PURCHASE WITH PROOF OF PURCHASE WITHIN THIRTY 30 DAYS OF PURCHASE FOR A REFUND IF YOU DO PROCEED TO INSTALL OR USE THE SONICWALL PRODUCT YOU WILL HAVE INDICATED ACCEPTANCE AND AGREEMENT WITH THE TERMS AND CONDITIONS HEREIN NOTWITHSTANDING THE FOREGOING THIS AGREEMENT SHALL NOT SUPERSEDE ANY OTHER SIGNED AGREEMENT BETWEEN YOU AND SONICWALL THAT EXPRESSLY GOVERNS THE SONICWALL PRODUCT 168 SRA 7 0 User Guide Product means the SonicWALL labeled hardware and related documentation Hardware and or proprietary SonicWALL labeled software firmware and related documentation Software purchased by the end user of the product either directly from SonicWALL or a Reseller Customer Services means the Support Services described below and any other services provided with or for the Products directly b
73. SRA 7 0 User Guide SonicWALL Notes Cautions and Warnings NOTE A NOTE indicates important information that helps you make better use of your system CAUTION A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed A WARNING A WARNING indicates a potential for property damage personal injury or death 2013 Dell Inc Trademarks Dell the DELL logo SonicWALL SonicWALL ViewPoint Reassembly Free Deep Packet Inspection Dynamic Security for the Global Network SonicWALL Clean VPN SonicWALL Clean Wireless SonicWALL Global Response Intelligent Defense GRID Network SonicWALL Mobile Connect and all other SonicWALL product and service names and slogans are trademarks of Dell Inc 2013 4 P N 232 002179 00 Rev A 2 SRA 7 0 User Guide Table of Contents Chapter 1 Using This Guide 0 0 ce eee 7 ADOUFINIS GUE oid dort Deb bien nte erede etra daa ter Das dud Pid 7 Organization of this Guide 0 0 0 ee ee ence eens 7 Guide Conventions soon Sods e RERO Geol mie Dae Ede nwa UR Roe on wae au E wun d 8 Curent Documentation ss 5 3 9 4 cn taken se aie dor ql ro HERE elo rd e daa 8 Quick ACCESS Work Shet s reete rane one PV bti EU PRI P 8 Chapter 2 Virtual Office Overview 0 0 00 eens 9 Virtual Office OVSIVIGOW reie aco AC ER cR dE Cd Avia Nina GN dead aw law A ae a 9 Accessing Virtual Office Resources 0 00 cee le
74. Saving profiles Done 1 Clear Log E Close Step 11 To generate a diagnostic report with detailed information on NetExtender performance go to Help gt Generate diagnostic report NetExtender Window Bil ANLO Save diagnostic report Save As nxdiag tgz Bj report B Namee a Date Modified NetExtender Diagnostic Report A diagnostic report has been created at Users sonicwallqa Desktop report nxdiag tgz Cw File Format All Files n New Folder Cancel Save Step 12 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory Installing NetExtender on Linux Dell SonicWALL SSL VPN supports NetExtender on Linux To use NetExtender on your Linux system your system must meet the following prerequisites e i386 compatible distribution of Linux e Linux Fedora Core 15 or higher Ubuntu 11 10 or higher or OpenSUSE 10 3 or higher e Java 1 5 and higher is required for using the NetExtender GUI Note Open source Java Virtual Machines VMs are not currently supported If you do not have Java 1 5 you can use the command line interface version of NetExtender Using NetExtender 51 To install NetExtender on your Linux system perform the following tasks Step 1 Step 2 Log in to the Dell SonicWALL Virtual Office Click the NetExtender button A pop up window indicates that you have chosen to open a tgz file Click OK to save i
75. Software and to destroy all copies of the Software which may have been provided or created hereunder 4 SUPPORT SERVICES SonicWALL s current Support Service offerings Support Services and the terms and conditions applicable to such Support Services are set forth in SonicWALL s Support Services Terms located http www sonicwall com us support Services html and are incorporated herein by reference Support Services may require an additional fee Unless otherwise agreed to in writing SonicWALL s Support Services are subject to SonicWALL s Support Services Terms which are in effect at the time the Support Services are purchased by Customer and these terms and conditions will be incorporated herein by reference at that time SonicWALL reserves the right to change the Support Services Terms from time to time by posting such changes on its website which shall apply to any Support Services purchased on or after the date of such posting 5 SONICWALL WARRANTY a Warranty SonicWALL warrants to Customer original purchaser Customer only that for the applicable warranty period Warranty Period the Hardware will be free from any material defects in materials or workmanship and the Software if any will substantially conform to the Documentation applicable to the Software and the License purchased Limited Warranty Except as may indicated otherwise in writing by SonicWALL the Warranty Period for Hardware is one year from the date of
76. System Info Window on the customer s computer e Open Remote Task Manager Window Opens the Task Manager on the customer s computer e Send Ctrl Alt Del Enters Control Alt Delete on the customer s computer e Open Remote Run Menu Opens the Run menu on the customer s computer e Open Remote Start Menu Opens the Start menu on the customer s computer e Send Alt Tab to Remote Enters Alt Tab on the customer s computer to toggle between open windows e Ctrl Key Down Engages the Control key on the customer s computer e Ctrl Key Up Disengages the Control key on the customer s computer Alt Key Down Engages the Alt key on the customer s computer e Alt Key Up Disengages the Alt key on the customer s computer Using Secure Virtual Assist 87 88 Viewing Secure Virtual Assist Session Log The Secure Virtual Assist Session Log window can be displayed by clicking the Logging button in the Taskbar The log displays a history of timestamped events for the session such as opening Chat or File Transfer requesting Full Control etc Logging Permission for full control denied Customer must confirm before certain actions may be taken 12 52 jpollock Permission for Full control granted Customer will not be prompted for certain actions 12 52 jpollock Full Control Permission has been canceled bv customer Please request with the full control button if vau need full control functionality 12 52
77. T to change to Trusted Status change to Active Status No prompts will occur Ma TE will occur while in Trusted Status while in Trusted Status L Note By default Virtual Assist sessions are launched in Trusted mode To modify this mode 1 Click the Settings button on the top left corner of the window 2 Select the Connection Settings tab 3 Select either Auto View Only or Active Mode Ending a Virtual Assist Session You can end the Virtual Assist session at anytime by clicking on the Exit Virtual Assist button in the bottom right corner of the screen or by entering Alt q This will end the Technician s control of your computer Using Secure Virtual Assist in Unattended Mode Note Unattended Mode is supported only on Windows clients Unattended Mode allows customers to set their computer to be accessible by a Technician at a later time when the customer will not be available to click to confirm their consent To set your computer for Secure Virtual Assist Unattended Mode perform the following tasks Step1 Launch Virtual Assist Step2 Click Change Mode select Unattended and click Change Mode again c Virtual Assist Login 5 0 0 15 x Settings Help E Server virtualassist eng sonicwall com 443 i Password helpme Unattended Support Enter your password Change Mode Step3 Select or enter the IP address or domain name of the SSL VPN server 100 SRA 7 0 User
78. The Participant Mark will be displayed on the shared desktop in the area where the Participant double clicked This feature which is enabled by default is enabled disabled on the Settings General Settings tab The drop down arrow shown on the right of the Control Menu opens a list of additional features Per App Sharing White Board and Annotation e inp 9 So m SOR a X PE ERN ee inii y zl Invite Poling Record Chat Lobby Options About Per App sharing White Board Annotation Per App Sharing allows the Coordinator to select specific windows to share with meeting Participants instead of sharing the entire desktop Selecting this feature displays a window where the windows are chosen Shared Windows Application Window Title Y Desktop oy Taskbar of 7 0 Release Grab e HAPrajeck Project Source Insight Search Results W untitled Paint Select All Unselect All Using Secure Virtual Assist 115 White Board displays a white board and is also displayed on the Lobby toolbar See Using a White Board on page 119 for additional information Annotation allows any meeting Participant to add text objects and highlighting to a white board using the white board toolbar as described in Using a White Board on page 119 Re y oome e NEESSe o BE Creating Email Invites Invitations can be sent when creating the meeting or while in an active meeting 1 11 2012 Tee eo 1112012
79. The information provided in the NetExtender Status window is described in the table on Installing NetExtender Using the Mozilla Firefox Browser on page 28 Launching NetExtender Directly from Your Computer Step 1 Step 2 After the first access and installation of NetExtender you can launch NetExtender directly from your computer without first navigating to the SSL VPN portal To launch NetExtender complete the following procedure Navigate to Start gt All Programs Select the Dell SonicWALL NetExtender folder and then click SonicWALL NetExtender The NetExtender login window is displayed Using NetExtender 33 Step3 The IP address of the last SSL VPN server you connected to is displayed in the SSL VPN Server field To display a list of recent SSL VPN servers you have connected to click the arrow SonicWALL NetExtender Server sslvpn sonicwall com i Username p Password Domain s sonicwall com Connect Save user name amp password if server allows JPR rr ne nnn YEN EY Y EYE YE Y EVEN rer EET YEN YEN EVEN EYE YE EYE EY YE VY YET YN VENE EY YEN YE Y EVEN YEN ECE EE Y COED EEE FEY YEN TELE EE EY FEY EE EET COTE M 8H RIT AA AMA MAAO0OOA Always ask for user name amp password Step4 Enter your username and password Step5 The last domain you connected to is displayed in the Domain field Note The NetExtender cli
80. User Guide Login Participants click the link from the meeting email invitation or type the server name or IP address in the Server field of the Secure Virtual Meeting window Settings Help Available Portals M i g Welcome to Sonic WALL Secure Virtual Meeting Please enter the server name or IP address to begin the meeting 1 Hel Settings Help Meeting Details Meeting Mame test Meeting Owner admin Meeting Start Time 2012 03 26 11 30 Meeting End Time 2012 03 26 12 00 Meeting State Waiting Sharing State Share none Meeting Members 0 eem Please select the meeting you want to join Select the meeting to join and click the Join button The following prompt is displayed if you are required to enter a meeting code to join the meeting Settings Help Please enter the meeting code to join meeting i Meeting Code Loc eme jJ Using Secure Virtual Assist 123 Enter the meeting code that was provided in the meeting email invitation and click the OK button to join the meeting After joining the meeting you will be in the meeting lobby Secure Virtual Meeting 7 0 0 8 Settings Help q Meeting Name meeting1 Meeting State Waiting Meeting Members Name Role State admin Participant Coordinator Waiting Welcome to SonicWALL Secure Virtual Meeting 124 SRA 7 0 User Guide Chapter 6 Using File Shares File shares provide remote users with
81. User Guide e Bitmap caching e Menu window animation e Visual styles e Window drag If the Java client application is RDP 6 it also supports e Dual monitors e Span monitors e Font smoothing e Desktop composition e Remote Application Note RDP bookmarks can use a port designation if the service is not running on the default port M Tip To terminate your remote desktop session be sure to log off from the Terminal Server session If you wish to suspend the Terminal Server session so that it can be resumed later you may simply close the remote desktop window Step1 Click the RDP bookmark Continue through any warning screens that display by clicking Yes or Ok Warning Security X The web site s certificate is invalid Do you want to continue Name 10 0 867 89 Publisher 10 0 57 89 Always trust content From this publisher QU The certificate cannot be verified by a trusted source Only continue iF qeesesssescecsesssseeceeessssceeeceteeeee vou trust the origin of the application 0 Eme nea E aaa n Step2 Enter your username and password at the login screen and select the proper domain name from the drop down menu Managing Bookmarks 149 Step 3 A window is displayed indicating that the Remote Desktop Client is loading The remote desktop then loads in its own windows You can now access all of the applications and files on the remote computer Mfice Microsoft Internet E
82. Using the Mozilla Firefox Browser 28 Installing NetExtender Using the Internet Explorer Browser 30 Installing NetExtender Using the Chrome Browser 05 32 Launching NetExtender Directly from Your Computer 33 Configuring NetExtender Properties 0 0 ccc cece ee eee 35 Configuring NetExtender Connection Scripts 0 000 e ae eee 37 Configuring Batch File Commands 0 0 0 0 e eee ene 38 Gonrgurhg Proxy SENGS ed ie Tute eret eed dd OT IHE EUEE Deeds 39 Configuring NetExtender Log Properties 0 0 c cence 40 Configuring NetExtender Advanced Properties 006 41 Configuring NetExtender Packet Capture Properties 42 Viewing the NetExtender Log 0 ccc ee eens 43 Disconnecting NetExtender 0 ccc eee eens 44 Upgrading NetExtender 0 0 oaa eaa eee eens 44 Changing PaSSwOndS sm usce dott metit at nn e lien hed nee Bee Ges 44 Authentication Methods 0 0 cc eee eee ees 45 Uninstalling NetExtender 0 0 0 0 cc eee ene 46 Verifying NetExtender Operation from the System Tray 46 Using the NetExtender Command Line Interface 0 47 Installing NetExtender on MacOS 0 0 00 ccc ees 48 Using NetExtender on MacOS 0 0c cc eee nee 50 Installing NetExtender on Linux 0 0 cee eee 51 Using N
83. Virtual Office using the browser in your Windows Mobile device Log in with your username and password Click the NetExtender icon Follow the on screen instructions to install NetExtender When NetExtender is installed you may be prompted to restart your device Click Yes From your Windows Mobile device launch NetExtender The NetExtender login screen displays Enter the IP address or domain name for your SSL VPN server in the Server field The IP address of the last SSL VPN server you connected to is displayed by default To display a list of recent SSL VPN servers you have connected to click the arrow Enter your username and password The last domain you connected to is displayed in the Domain field The drop down menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password Click Connect When NetExtender successfully connects the NetExtender Status window displays Select the Show NetExtender Routes check box to see routes 75 NetExtender Server sslvpn eng sonicwall com Client IP 10 128 1 107 Sent 6 62 KB Received 4 98 KB Throughput 16 bytes Sec Duration 0 Days 00 00 15 E Show NetExtender Routes Disconnect Using NetExtender 57 Step 11 Click the Menu button to see the NetExtender properties menu NetExtender rag Tur a E
84. a secure Java applet or HTML based interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s familiar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall The File Shares Applet mimics Windows Explorer navigation and provides functionality not available in HTML based File Shares including the ability to overwrite existing files and upload directories This section contains the following subsections e Using the File Shares Applet section on page 125 e Using HTML Based File Shares section on page 136 Using the File Shares Applet The File Shares Applet has a similar look and feel to the Windows Explorer tool featuring drag and drop and multiple file selection capabilities It also provides the user the ability to set up bookmarks to quickly navigate through networks from the portal level This feature saves time lost moving through network and server paths The File Shares Applet leverages Sun s Java platform browser plug in to increase usability by mimicking the common Windows Explorer interface With the help of the HTTPS protocol the applet securely transfers encrypted files and information to and from the SRA appliance The appliance communicates this data to the indi
85. ackage format The installer is also available from Play Store as the NetExtender Technology Preview 60 SRA 7 0 User Guide Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 The following features are not supported or not applicable on NetExtender Android in Dell SonicWALL SSL VPN e Automatic connection of NetExtender before Windows login e Automatic proxy support and Internet Explorer proxy synchronization e Connection scripts e Pv6 support e Client certificate support e Exit client after disconnect To install NetExtender on an Android smartphone using the apk package from MySonicWALL perform the following tasks On a computer log in to http mySonicWALL com Click Downloads In the Software Type drop down menu select one of the following e SRA 4200 Firmware e SRA 1200 Firmware e SRA VM Click the NetExtender Android link Save the apk file onto your computer Using the USB cable connect your computer to the Android smartphone On the Android smartphone pull down the notifications November 5 2010 Q B ME 1 2271 AT amp T USB connected Select to copy files to from your computer Using NetExtender 61 Step8 Tap USB connected to connect to the computer The next screen shows the connection E G ci ea 1 35 pw USB connected You have connected your phone to your computer via USB t the button below if ut vou want r LODy Tes Det computer and your Android Turn on USB
86. ahar View Tool Commands Windows E4nai hvile i tensalul Coor Trusted Mods Customer E mail HE FullScreen a Auto Sealing Ej Zoom 100 CE True Size q9 Refrech File Transfer Gy Chat E System Trfn m Rehnnt Customer w Call Active Screens 7 Record m Technician E nall Additioral Weseag iOstional Maximu Ly Comauter cd Recycle Bin Fcady Invite ne B33 terez Google Conmeckad te custemar Chrome bl Ill Customer D is2cennezted 643 terse Connected be nusterer The Technician is now ready to assist customers SRA 7 0 User Guide Performing Secure Virtual Assist Technician Tasks To get started the Technician logs into the Dell SonicWALL SRA appliance and launches the secure Virtual Assist application Note Each Technician can only assist one customer at a time By default the Virtual Assist window launches with the Virtual Assist toolbar at the top and the rest of the window dedicated to the customer s screen To display the most common panes either click Expand or click View Classic Layout This will display the following panes e Email Invite Logging e Chat e Service Once the Technician has launched the Virtual Assist application the Technician can assist customers by performing the following tasks e Inviting Customers by Email on page 83 e Assisting Customers on page 84 e Using the Virtual Assist Taskbar and Tab Controls on page 85 e
87. al window to the desktop or another appropriate folder Step3 To navigate the remote window double click a visible computer or input the name in the address bar preceded by and followed by a and press Enter The File Shares Applet will then navigate to the requested computer It may take several seconds for the resources to load depending on the network configuration File Shares Java Applet Windows Internet Explorer x https 65 0 61 65 cgi bin soniclauncher JRE OK SonicWALL File Shares HTML Version Help iei My Computer e j 3 5 4 Bookmarks Entire Network Refreshing Network Resources Please Wait Cancel Step4 Once loaded double click a folder or enter the target directory path within the address bar This can take some time as the File Shares Applet must browse through the network after every change Note Only the remote window can use the address bar to navigate through a computer s file hierarchy Using File Shares 131 132 Step5 To set a bookmark to the current directory right click in an empty location in the remote directory and select Add Bookmark Note TO set a bookmark for a specific file or folder select it prior to selecting Add Bookmark from the right click menu exi My Computer 3 Remote Network 5 on Ge Entire Network Up Refresh New Folder Properties Internet Protected Mode
88. arately from the Software Product to be updated upgraded You may use the resulting updated upgraded Product only in accordance with the terms of this Agreement h Activation Keys May Expire Certain Products including Security Services that provide regular ongoing updates for Software e g Security Service consisting of anti virus signature updates may come with an activation key or license key a key that must be entered to activate the Product Activation Key If the Activation Key for a Product is not activated within five 5 years from the date of issuance by SonicWALL such Activation Key s may expire and no longer activate the Product Products that come with an expiring Activation Key will operate for the contracted term of the License or purchased Security Service so long as the Activation Key is activated within five 5 years from SonicWALL s date of issuance 2 OWNERSHIP SONICWALL and its licensors are the sole and exclusive owners of the Software and all underlying intellectual property rights in the Hardware All rights not expressly granted to Customer are reserved by SonicWALL and its licensors 3 TERMINATION OF LICENSE S All licenses to the Software hereunder shall terminate if Customer fails to comply with any of the provisions of this Agreement and does not remedy such breach within thirty 30 days after receiving written notice from SonicWALL Customer agrees upon termination to immediately cease using the
89. ase enter in your Login Credentials for automatic logn after reboot Be sure the hiomaton is correct or the reboot Site pal be gr Terr ser Nate Some Rusgestery changes val be made please aki changes Domain XPVME Cancel Active Screens Allows the Technician to switch to a second monitor if the customer s computer has more than one monitor configured or display all monitors e Request Full Control Technicians can request full control of a customer s desktop allowing them to reboot the system delete files or over write files on the customer s computer without the customer being repeatedly prompted for permission Select Request Full Control under the Commands menu to issue a request that will appear on the customer s desktop Grant Full control permission t You will not receive prompts prior to certain actions such as File transfers if permission is granted OK Cancel Using Additional Secure Virtual Assist Technician Commands The Commands drop down menu in the top left of the Virtual Assist window provides access to several of the options described above along with additional options Commands Get PC Control Request Full Control Active Screen Open Remote System Info Window Open Remote Task Manager Window Send Ctrl Alt Del Open Remote Run Window pen Remote Start Menu Send Alt Tab To Remote Ctrl Key Down Ctrl Key Up Alt Key Down Alt Key Up e Open Remote System Info Window Opens the
90. assword Ok Cancel If an Administrator has configured RSA pin mode authentication to be required to connect through NetExtender users will be asked whether they want to create their own pin or receive one that is system generated amp Enter a new PIN having irom 54 to E digits FIN Type it again ok csnceel Once the pin has been accepted you must wait for the token to change before logging in to NetExtender with the new passcode PIN accepted Please wart for token to change then login with the mew passcode Password va Ck Cancel During authentication the SSL VPN server may be configured by the Administrator to request a client certificate In this case users must select a client certificate to use when connecting A Ihe SSL VPN Server requests cient cartifieate plaase select ane to use when connecting Issued bn Tssued by Sonic WALL Verisign Class 3 Code a iei fe inc Signing 2009 2 CA Liu Administrator eag detail Using NetExtender 45 Uninstalling NetExtender Step 1 Step 2 Step 3 Step 4 The NetExtender utility is automatically installed on your computer To remove NetExtender click Start All Programs click Dell SonicWALL NetExtender and then click Uninstall You can also configure NetExtender to automatically uninstall when your session is disconnected To do so perform the following steps Right click the NetExtender icon py in the system tray a
91. at ia File Shares Tike Shares allows youl to remotely access fles n the loca network ou Can also copy files fron your rele compuler lo liie local nelwu k In the Add Bookmark screen enter a descriptive name in the Bookmark Name field Tips Help What is the File Shares Java Applet The applet is generally the preferred version of File Shares It supports features like drag and drop and copying multiple files at a time If you do not have Java installed you can disable the applet and use the basic browser based interface instead Step 3 Step 4 Step 5 Step 6 Enter the domain name IP address or IPv6 address of a host machine on the LAN in the Name or IP Address field IPv6 addresses should be enclosed in brackets i e the and symbols You may also enter the wildcard variable USERNAME to display the current user name Variables are case sensitive In the Description field optionally enter a friendly description to be displayed in the bookmark table Select the user permissions level from the Allow user to edit delete drop down list You can select Use user policy Allow or Deny Select the service type in the Service drop down list You can select from the following services Terminal Services RDP ActiveX e Terminal Services RDP Java e Virtual Network Computing VNC e Citrix Portal Citrix e Web HTTP e Secure Web HTTPS e External Web Site e Mobile Connect File Shares CI
92. atus Routes and DNS Settings While NetExtender is connected you can view status information routes and DNS settings on your smartphone Step 1 To open the NetExtender user interface pull down the notification bar and tap NetExtender August 15 2010 B Ma 6 48 PM AT amp T Ongoing fh NetExtender Connected 10 0 61 8 6 45 PM oor Battery Information Voltage 4 153 Temp 22 C Li ion Batten 6 46 PM Ay USB debugging connected Select to disable USB debugging USB connected Select to copy files to from your computer Notifications o Now in Pleasanton CA 94566 n Using NetExtender 69 Step2 To view status information tap the Status tab You can tap on the Sent Received or Throughput fields to change the units between bytes and packets pugi B ME 2c j SONICWALL gt m E NetExtender Status Routes DNS Connected 0 Days 00 00 15 Server ssonicwall sonicwall com User seng Client IP 10 128 1 107 Sent 40 bytes Received 64 bytes Throughput 0 bytes Sec curent If you are connected to a Dell SonicWALL SRA appliance running 5 0 or higher and you have an Active Directory account the User field contains your display name such as Sonia Eng If you are connected to an appliance running the 4 0 release or you do not have an Active Directory account the User field displays the login name such as seng Step3 To view NetExtender routes tap the Routes tab The display shows a
93. automatically downloads and launches the application and puts the attendee into the meeting Alternatively attendees can manually download the Secure Virtual Meeting plug in and run it as an application Both cases will provide meeting access Click the Open Polling button to display the Polling window where you can create polls and define the polling questions osion nen ici Multiple choice Sing e Answer Multiple choice Multiple Answers Answer Add Short answer Using Secure Virtual Assist 117 Create new questions by clicking the ew jand Ai buttons There are three question types e Multiple choice single answer e Multiple choice multiple answer e Short answer Use the buttons at the top of the window to The Open Virtual Meeting Poll Files button opens any saved polling questions and possible answers ci The Save Virtual Meeting Poll File button saves the current polling questions and answers The Edit button is used to edit the currently selected polling question or answer e The Clear button erases ALL polling questions and answers LJ The Up and Down buttons change the order of the selected questions or possible answers Click the 9 line button to start polling and send the poll to the selected Participants to answer Polling 118 SRA 7 0 User Guide Polling feedback window Feedback from the poll is returned to the poll initiator when answers are submitted a
94. bby before or during a meeting Control what meeting members may do and appoint an Assistant to help facilitate the meeting Set up a proxy or modify login profiles for meetings Review a log of actions that occurred and view any warning or error message details that may require attention Start a meeting immediately or at the scheduled time Access functions available while a meeting is active Invite meeting members through email before or during a meeting Create a poll for attendees to participate in Share a file with Participants that they can download Chat with everyone or specific individuals in a meeting Share specific windows or all of your desktop with Participants Display a white board where objects text and highlighting can be added and view by Participants Record meeting sessions in a wmv file Start a conversation where Participants can hear you A Participant can join a Virtual Meeting by clicking a link in the email invite or by logging into the Virtual Meeting client if the Administrator has enabled Join Without an Invitation on the AMC Secure Virtual Meeting Settings page To login from an installed Virtual Meeting click the Host button Settings Help i p Hot O x i4 Virtual Meeting 6 0 0 3 x Settings Help Name i Password TEE Welcome to SonicWALL Secure Virtual Meeting Please enter the server name or IP Please enter your usemame and password address to be
95. bled to use the One Time Password feature Contact your SSL VPN Administrator e ls your email address correct If your email address has been entered incorrectly contact your SSL VPN Administrator to correct it e Is there no email with a one time password Wait a few minutes and refresh your email inbox Check your spam filter If there is no email after several minutes try to login again to generate a new one time password e Have you accurately typed the one time password in the correct field Re type or copy and paste the one time password 24 SRA 7 0 User Guide Chapter 4 Using NetExtender This chapter explains how to configure and use Dell SonicWALL NetExtender and includes the following sections e User Prerequisites section on page 25 e User Configuration Tasks section on page 27 e Verifying NetExtender Operation from the System Tray section on page 46 User Prerequisites Prerequisites for Windows Clients Windows clients must meet the following prerequisites in order to use NetExtender e One of the following platforms Windows 7 Services Pack 1 Windows Vista Service Pack 2 32 bit amp 64 bit Windows XP Home or Professional Windows XP Service Pack 3 e One of the following browsers nternet Explorer 8 0 and higher Mozilla Firefox 16 0 and higher Google Chrome 22 0 and higher e To initially install the NetExtender client the user must be logged in to the PC with administrat
96. cable Product page on SonicWALL s website and or in a file provided with the Product Except as SonicWALL may otherwise inform Customer in writing the Third Party License gives Customer at least the license rights granted above and may provide additional license rights as to the Third Party Software but only with respect to the particular Third Party Software to which the Third Party License applies SUCH THIRD PARTY SOFTWARE UNDER A THIRD PARTY LICENSE IS PROVIDED WITHOUT ANY WARRANTY FROM SONICWALL AND ITS SUPPLIERS INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT Notwithstanding the foregoing SonicWALL shall honor its warranty maintenance and support obligations in respect to the SonicWALL Products regardless of whether the warranty maintenance or support issue is caused in whole or in part by the Third Party Software provided by SonicWALL with the Product 170 SRA 7 0 User Guide g Updates Upgrades If Customer purchases or otherwise is eligible to receive a SOFTWARE update or upgrade you must be properly licensed to use the Product identified by SonicWALL as being eligible for the update upgrade in order to install and use the SOFTWARE update upgrade A SOFTWARE update upgrade replaces and or supplements the Software Product that formed the basis for your eligibility for the update upgrade and does not provide you an additional License copy of the Software to use sep
97. cess corporate servers and desktops open files edit and store data as if they were at the office Terminal Services provides the ability to open individual applications and support remote sound and print services In addition users may access Telnet and SSH servers for SSH version 1 SSHv1 and SSH version 2 SSHv2 from the SSL VPN portal Using the NetExtender SSL VPN client The Dell SonicWALL SSL VPN network extension client NetExtender is available through the SSL VPN Virtual Office portal via an ActiveX control or through stand alone applications for Windows Linux MacOS Windows Mobile and Android smartphone platforms To connect using the SSL VPN client log into the portal download the installer application and then launch the NetExtender connector to establish the SSL VPN tunnel The NetExtender Android client has a different installation process described in this guide Once you have set up the SSL VPN tunnel you can access network resources as if you were on the local network Virtual Office Overview 9 The NetExtender standalone applications are automatically installed on a client system the first time you click the NetExtender link in the Virtual Office portal The standalone client can be launched directly from users computers without requiring them to log in to the SSL VPN portal first Using the SonicWALL Mobile Connect app SonicWALL Mobile Connect is an app for iPhone and iPad that like NetExtender uses SSL
98. ch are objects that enable you to connect to a location or application conveniently and quickly Options Provides the option to change user password and use single sign on if enabled by the Administrator Online Help Launches online help for Virtual Office Tips Help Provides a short list of common questions and tips about the Virtual Office Logout Logs you out of the Virtual Office environment The Home page provides customized content and links to network resources The Home Page may contain support contact information VPN instructions company news or technical updates Only a Web browser is required to access intranet Web sites File Shares and FTP sites VNC Telnet and SSHv1 require Java SSHv2 provides stronger encryption than SSHv1 requires SUN JRE 1 4 or above and can only connect to servers that support SSHv2 Terminal Services requires either Java or ActiveX on the client machine As examples of tasks you can perform and environments you can reach through Virtual Office you can connect to e Intranet Web or HTTPS sites If your organization supports Web based email such as Outlook Web Access you can also access Web based email e The entire network by launching the NetExtender client e FTP servers for uploading and downloading files e The corporate network neighborhood for file sharing e Telnet and SSH servers e Desktops and desktop applications using Terminal Services or VNC e Email servers via the NetExtender clie
99. ck the Sessions link Step 3 Step 4 Click Upload to upload the files Managing Bookmarks 155 Using Telnet Bookmarks Step1 Click the Telnet bookmark Telnet bookmarks can use a port designation for servers not running on the default port Step2 Click OK to any warning messages that are displayed A Java based Telnet window launches F https 10 0 93 200 cgi bin telnet HOST 10 0 93 31 Microsoft Internet Explorer Step3 Ifthe device you are Telnetting to is configured for authentication enter your username and password Using SSHv1 Bookmarks SSH bookmarks can use a port designation for servers not running on the default port Step1 Click the SSHv1 bookmark A Java based SSH window is launched Qj https 10 0 93 200 cgi bin ssh HOST 10 0 93 31 Microsoft Internet Explorer provide aj LIC joj x SSH Authorization required Wiser name Password Cancel Login Java Applet Window Connected to 10 0 33 31 ssh Step2 Enter your username and password Step3 A SSH session is launched in the Java applet ws Tip Some versions of the JRE may cause the SSH authentication window to pop up behind the SSH window 156 SRA 7 0 User Guide Using SSHv2 Bookmarks SSH bookmarks can use a port designation for servers not running on the default port Step1 Click the SSHv2 bookmark A Java based SSH window displays Type your user name in the Username field and click Login E https 10 0
100. content will vary based on the configuration of your network Administrator Some bookmarks and services described in the SonicWALL SSL VPN User Guide may not be displayed when you log into the SonicWALL SRA security appliance The Virtual Office consists of the nodes described in the following table Node Description File Shares Provides access to the File Shares utility which gives remote users with a secure Web interface access to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block proto cols Using a Web interface similar in style to Microsoft s familiar Net work Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall NetExtender Provides access to the NetExtender utility a transparent SSL VPN cli ent for Windows MacOS Linux Windows Mobile or Android smart phone users that allows you to run any application securely on the remote network It acts as an IP level mechanism provided by the vir tual interface that negotiates the ActiveX component on Windows with IE using a Point to Point Protocol PPP adapter instance On non Windows platforms except Android Java controls are used to automati cally install NetExtender from the Virtual Office portal After installation NetExtender automatically launches and connects a virtual adapter for SS
101. cted Remove all and Close options on this NetExtender Profiles screen press the options button while on the screen uta NetExtender Profiles p M x a UR EB MT 6 44 PM 10 0 61 8 user LocalDomain ssonicwall sonicwall com s sonic sonica ll com SU ESO TESEN ICW at Cu v oe u T T 9 Remove selected Remove all Close Step 4 Tap Remove selected to remove the profiles that have check marks next to them Step5 Tap Remove all to remove all profiles from the smartphone Step6 Tap Close to close the option display on this screen Step7 To display the Remove this profile Remove selected profiles and Remove all profiles options press and hold the NetExtender Profiles screen AL B FG 6 44 PM ssonicwall sonicwall com Remove this profile Remove selected profiles Remove all profiles Step 8 Tap Remove this profile to remove the profile that you pressed on to bring up this screen Step9 Tap Remove selected to remove the profiles that have check marks next to them Step 10 Tap Remove all to remove all profiles from the smartphone Step 11 Tap Close to close the option display on this screen 72 SRA 7 0 User Guide EXPORT LOG Step 12 To export the log file of NetExtender Android activity select the Export Log option and enter the requested information ABOUT Step 13 To view NetExtender version information select the About option f RII 9 30 PM e NetExtender 5 0 3
102. d For example C Program Files Example app exe optional Command line arguments Type any command line arguments required to access the remote application Start in the following folder Enter the local folder to execute application commands in optional Login as console admin Check this option to enable console and admin commands on session login Enable Wake on LAN Select this option to send WoL packets to the host This option also allows entering one or more Mac Ethernet Addresses separated by spaces for the machines to wake and the desired Wait time for boot up before cancelling the WoL operation To send the WoL packet to the hostname or IP of this bookmark check the Send WOL packet to bookmark host Name or IP address check box this option can be applied in tandem with a Mac address server is TS Farm Check this option if users will connect to a TS Farm or load balanced server You may need to disable interactive login for this option to work properly Redirects ActiveX only Optionally expand Show windows advanced options and select any of the redirect check boxes to redirect those devices or features on the local network for use in this bookmark session Redirects Java only Optionally expand Show windows advanced options and select any of the redirect check boxes as well as any of the additional listed features for use in this bookmark session If the client application will actually be RDP 6
103. d on a remote server continue to run when you log off Offline applications always continue to run when you log off from the Citrix session Managing Bookmarks 163 Global Bookmark Single Sign On Options You can configure single sign on using the Options button on the main Virtual Office page SSO settings will be enabled only if the Administrator has configured user controlled single sign on SSO To configure SSO bookmark options perform the following tasks Step1 Click the Options button at the top right of the Virtual Office The User Options page displays p SonicWALL Virtual Office Jptions Help Ueer sdmim amp seglom Se ARE Welcome to the Sonlc WALL Virtual Office Tips Help 1s Q Sun cWALL s Viilual Office provides easv and secure emale access lu Lie corporale network from anywhere on the Internet How can change my password You may be able to change your nl SICK a prc dctined bookmark or create your own E Secure YY access a corporate network EE EE peasswoirc linauaglh s Rente Desklop TT session zr a webpage Flease contact Launch HetExtender to create a secure network connection to the corporate network for your zdrniztratar for Specie Tul nelwurk access inslriictinns What ia MetExtender NetExtender n dae File Shares q Net xtender creates secure network Disconnected EF Browac shared files on your corporale connection zllows you to access Lick bo connect nato pielwor amp resources
104. dial retained as 0644 rw r r mode of etc ppp peers retained as 8755 rwxr xr x Copying files SUSE Ubuntu compatibility mode off INSTALLATION SUCCESSFUL To launch NetExtender do one of the following 1 Click the NetExtender icon under the Applications menu look under the Internet or Network category or 2 Type netExtenderGui dattagfl4 vm netExtenderClient Jj Step6 Enter your system password Step 7 The installer will ask if you want non root users to be able to run NetExtender Enter either y for yes or n for no Note o allow non root users to run NetExtender the installer will set PPPD to run as root This may be considered a security risk Using NetExtender on Linux To use NetExtender on a Linux computer perform the following tasks Step1 After NetExtender is installed there are two methods to launch it Click the NetExtender icon in the Applications menu under either the Internet or Network category Enter the netExtenderGui command Using NetExtender 53 Step2 The first time you connect you must enter the Dell SonicWALL SSL VPN server name in the SSL VPN Server field NetExtender will remember the server name in the future SonicWALL NetExtender Server i0 5 105 143 Username azmin Password esras re Domain LocalDcmain Copin Bul save name and password qf allowed 2001 SonicWALL Ine Step3 Enter your username and
105. dow enter the Server address and click Request Support The server address can be either an IP address IPv6 address or hostname of the Dell SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols Sonicwall Virtual Assist Settings Help Server 10 103 62 208 Request Support Request Support The list of Available Portals is displayed To connect to a specific portal select it and click OK To have your request be serviceable by all of the portals select All Portals and click OK Portals Please select the portal associated with your Technician for service All Portals VirtualOffice Using Secure Virtual Assist 97 Step7 You may be prompted to enter an Assistance Code Assistance code Enter the assist4nce code to make the request NENNEN Step8 f prompted to read and accept a disclaimer click OK Step9 A pop up window indicates that you are in the Virtual Assist queue The Technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request D Sonicwall Virtual Assist A Technician will be available to help you shortly You may cancel request anytime by clicking the SM button Your current time in queue is 0 59 Add Information Please inform the technician of your ticket ID located below Click Add Infomtion above to provide additional details icket ID TOO103 Name Kevin Change Name Step 10 The Virtual Assist que
106. e largest packet size that a router can forward without needing to fragment the packet Using NetExtender 55 e PPP Sync Mode Specifies synchronous PPP By default this option is disabled and asynchronous PPP is used Settings SonicWALL NetExtender Preferences MTU 1280 _ PPP sync mode Step 10 To view the NetExtender Log go to NetExtender Log 07 29 2011 07 29 2011 07 29 2011 7 29 2011 7 29 2011 7 29 2011 7 29 2011 07 29 2011 07 29 2011 07 29 2011 07 29 2011 7 29 2011 7 29 2011 7 29 2011 7 29 2011 07 29 2011 07 29 2011 07 29 2011 07 29 2011 7 29 2011 07 29 2011 NetExtender Log home datta netExtender log connect cannect general general general general general general general general connect dns general dns dns general general general general general general info info notice notice notice notice notice info info info info notice info info info info info info notice info info 2835 2835 2835 2835 2835 2835 2835 2835 2835 2835 2877 2877 2885 2885 2885 2835 2835 2835 2835 2835 2835 Domain Localbomain Server 10 5 105 145 443 Connecting to 10 5 106 145 443 Connected Logging in Login successful 55L Connection is ready Using new PPP frame encoding mechanism Using PPP async mode chosen by server Connecting tunnel NetExtender interface up Setting up ONS Mo
107. e or federal courts located in the County of Santa Clara State of California United otates of America Each party hereby agrees to submit to the jurisdiction of such courts Notwithstanding the foregoing SonicWALL is entitled to seek immediate injunctive relief in any jurisdiction in the event of any alleged breach of Section 1 and or to otherwise protect its intellectual property b Assignment Except as otherwise set forth herein Customer shall not in whole or part assign or transfer any part of this Agreement or any rights hereunder without the prior written consent of SonicWALL Any attempted transfer or assignment by Customer that is not permitted by this Agreement shall be null and void Any transfer assignment of a License that is permitted hereunder shall require the assignment transfer of all copies of the applicable Software along with a copy of this Agreement the assignee must agree to all terms and conditions of this Agreement as a condition of the assignment transfer and the License s held by the transferor Customer shall terminate upon any such transfer assignment Support Information 173 C Severability If any provision of this Agreement shall be held by a court of competent jurisdiction to be contrary to law such provision will be enforced to the maximum extent permissible and the remaining provisions of this Agreement will remain in full force and effect d Privacy Policy Customer hereby acknowledges and agrees that So
108. e used solely for non productive archival purposes and y make and use copies of the end user documentation for Hardware and or Software provided with the Products Documentation as reasonably necessary to support Customer s authorized users in their use of the Products b License Limitations Order acknowledgments Documentation and or the particular type of the Products Licenses purchased by Customer may specify limits on Customer s use of the ooftware and which limits apply to the License s granted hereunder for such Software Such limits may consist of limiting the term of the License or the number or amount of nodes storage space sessions calls users subscribers clusters devices ports bandwidth throughput or other elements and or require the purchase of separate Licenses to use or obtain particular features functionalities services applications or other items Use of the Software shall be subject to all such limitations c For Customer s Internal Business Each License shall be used by Customer solely to manage its own internal business operations as well as the business operations of its Affiliates Notwithstanding the foregoing if Customer is in the regular business of providing firewall VPN or Security management for a fee to entities that are not its Affiliates MSP Customers Customer may use the Products for its MSP Customers provided that either i Customer and not MSP Customers maintain control and possess
109. eeting Details Available Meetings Meeting Name test Meeting Owner admin Meeting Start Time 2012 03 26 11 30 Meeting End Time 2012 03 26 12 00 Meeting State Waiting Sharing State Share none Meeting Members 0 Meeting Description Please select the meeting you want to join Using Secure Virtual Assist 107 To create a meeting click the Create button to display the meeting creation interface Settings Help Meeting Name Meeting Code Starting Date 11 Ending Date Meeting Description Meeting Save List Required E mail s Meeting Name Create Time Optional E mail s savedmeeting admi 2012 03 26 11 05 Coordinator s E mail Optional Addtional Message Optional Go to the meeting lobby directly Welcome to SonicWALL Secure Virtual Meeting Load Cane To set up a meeting enter a Meeting Name Meeting Code Starting Date and Time and Ending Date and Time The meeting code will be entered by all Participants wishing to join the meeting If you want to invite attendees and the Email fields are not visible click the down arrow button directly below the Ending Date field You can then identify who should receive meeting email invitations Use the buttons across the bottom of the window to perform the following functions Save Saves the meeting for future editing View Displays previously saved meetings Start Now Starts the meeting immediately with the current user system time and
110. en 9 Browser Requirements 0 0 00 ccc eee teens 10 Web Management Interface Overview 0 0 eee 12 OB AC ALC ENEEENTOTTIEO T E EO ETT recta od Ge ler gt Hee ae 15 Logging Out of the Virtual Office 0 0 0 nee 15 Chapter 3 Using Virtual Office Features 0 0 0 0 cc eee 17 ImpOning Gertficales od ox Le CR Res RO ete baited se eed 17 Using Two Factor Authentication llle 17 User PreredbllslfeS seratan amer a aides eke bas desertion 18 User Configuration Tas KS 2 eic ac RR o CR de oe X a e dean 18 Using One Time PaSSwords 0 0 ccc ee eee 22 User PERC QUISIICS 5x beoe tele ccc arn tte as hte sca ade de toate ied eae wea 22 USerConiguralOn TASKS 45 53 29 bc ROS a HIC Sha wade Soh Reva ees 23 Verifying User One Time Password Configuration 000 24 Chapter 4 Using NetExtender 0 0 0 0 ccc ens 25 User PreredbilSlles s zou Sod tcs Pos Abad he Free abb ql aw Sos dps P ea eu 25 Prerequisites for MacOS Clients 0 0 0 ccc cee 25 Prerequisites for Linux Clients 0 0 0 ccc ee eens 26 Using Mobile COMECE s sar anse priemen irean eee eee eens 26 Prerequisites for Apple iOS Clients 0 0 0 0 eee 26 Prerequisites for Android Smartphone Clients 2 005 27 User Configuration TdSKS ss sumi ats Medo e Ode 28 Qc e dor CR B 27 Table of Contents 3 4 SRA 7 0 User Guide Installing NetExtender
111. ent will report an error message if the provided domain is invalid when you attempt to connect Please keep in mind that domain names are case sensitive Step6 The drop down menu at the bottom of the window provides three options for remembering your username and password Save user name amp password if server allows Save user name only if server allows Always ask for user name amp password M Tip Having NetExtender save your user name and password can be a security risk and should not be enabled if there is a chance that other people could use your computer to access sensitive information on the network 34 SRA 7 0 User Guide Configuring NetExtender Properties Step 1 Step 2 Step 3 Step 4 Step 5 Complete the following procedure to configure NetExtender properties Right click the icon n in the system tray and click Properties The NetExtender Properties window is displayed The Connection Profiles tab displays the SSL VPN connection profiles you have used including the IP address of the SSL VPN server the domain and the username NetExtender Properties sia a Connection Profiles Settings Connection Script Proxy Log Advanced 10 0 61 65 LocalDomain Connection Profiles Server Domain 10 0 61 65 LocalDomain Packet Capture sslvpn demo sonicwall com LocalDomain Remove All Cancel Apply To create a
112. ep7 When the Citrix Web Client has installed click OK If the Citrix Web Interface login window does not display restart your Web browser and launch the Citrix bookmark again Citrix Receiver Y Installation completed successfully Step8 Enter your username password and domain in the Citrix Web Interface login window i Web Interface CITRIX for MetaFrame Presentation Server is Welcome User name Please log in L al To log in to MetaFrame Presentation Server enter the credentials Password required and then click Log In If you do not know your log in information please contact your help desk or system administrator Domain v Message Center Advanced Options gt gt gt The Message Center displays any information or error messages that g j may occur Step9 The Citrix Web Interface home page is displayed Click the application you want to use Ai Top se Up e m Internet Microsoft Word Explorer 2003 Step 10 You may be prompted to install additional Citrix software Security Warning x Do you wart to install and run https 10 0 61 150 XTSAC cab signed on an unknown date time and distributed by Sonic WALL Inc Publisher authenticity verified by Thawte Code Signing CA Caution Sonic WALL Inc asserts that this content is safe You should only install view this content if you trust Sonic WALL Inc to make that assertion Always trust content from Sonic WALL Inc
113. epending on available browser and Java plug in a warning may display click OK to continue Windows Internet Explorer 2 Warning You may not be running Ehe optimal browser and Java version For this product Some Features may not be available while running the File Shares Java Applet From this machine Click OK bo continue ox j cae jJ Note To avoid this warning upgrade browser to Internet Explorer 8 0 or newer Firefox 16 0 or newer Chrome 22 0 or newer or Safari 5 0 or newer Also updates to Java 5 0 Update 10 or newer are recommended Step4 Depending on the networks configurations and browser one or more security warnings may display Follow the instructions to accept the certificate for the server This Connection is Untrusted You have asked Firefox ko connect securely to sslIvpn sonicwall cam but we can t confirm that Your connection is secure Normally when vou try to connect securely sites will present trusted identification to prove that you are going to the right place However this site s identity can t be verified What Should I Do IF vou usually connect Ea this site without problems this error could mean that someone is trying ta impersonate the site and you shouldn t continue Get me out of here Technical Details I Understand the Risks 128 SRA 7 0 User Guide The File Shares Applet displays File Shares Java Applet Windows Internet Explorer amp https 6
114. er EI Hamasaki Ayumi BLUE BIN avi Pr GO 2 Entre Networ lt Hamasaki Ayumi BLUE BIRD avi Location atlantis temp2 H amasaki Ayum Size 100237312 bytes Last Modified Fri Jun 16 05 40 50 PDT 2006 Attributes Interret Protected Mode Cff fy amp 100 vv Step3 To open the file double click the file Alternatively create a bookmark to it and launch the file from the bookmark menu To create a bookmark select the Add Bookmark option from the right click menu The name of the file is the default name of the new bookmark but a new name can be entered if so desired Step4 Then select the bookmark either from the portal or from the bookmark tab in the toolbar Note Files launched from within the File Shares Applet must be downloaded to the local machine before they can be opened The File Shares Applet will store the file in a temporary directory while it is being used The File Shares Applet will also try to delete the file after use but may be unable to do so depending on whether or not another program is accessing it Use caution when opening files with sensitive material Using File Shares 135 Using HTML Based File Shares File shares provide remote users with a secure Web interface to Microsoft File Shares using the CIFS Common Internet File System or SMB Server Message Block protocols Using a Web interface similar in style to Microsoft s fam
115. er pop up window will prompt you to enter them when you first connect Optionally you can click the Internet Explorer proxy settings button to open Internet Explorer s proxy settings page Using Secure Virtual Assist 79 e Connection Profiles Displays all of the Virtual Assist connection profiles that have been used on this computer To remove a profile select it and click the Remove button Settings Proxy Settings Connection Profiles Connection Settings FE Connection Profiles Server Renova Ok Cancel Apply e Connection Settings Allows users to customize how they are identified in Virtual Assist and the default settings of Virtual Assist customer sessions iC Settings Proxy Settings Profiles Connection Settings me You may modify connection settings here Lab Select a Field For additional information Display Name Additional Information Connection Settings Color Scheme For View Only E auto View Only E Full Color Active Made Gray Scale Ok Cancel Apply Display Name The name that will be displayed in the user queue By default the users SSL VPN username is displayed Additional Information Optional field to provide additional information Auto View Only Specifies that Virtual Assist sessions will initially launch in View Only mode instead of Trusted mode which is the default Active M
116. eral Settings tab is used to select the location where recordings will be saved select the Voice Transmission method and enable or disable the Participant Mark feature Secure Virtual Meeting 7 0 0 8 LX j Settings Help d Settings Proxy Settings Connection Profiles General Settings Save recordings to C Users pday Documents Secure Virtual Voice Transmission Method Auto Enable the participant mark k To change the default settings e Click the Browse button and select the location where you want to save meeting recordings e Select the protocol to use for transmitting voice conversations from the Voice Transmission Method drop down list e Check the Enable the participant mark check box to enable this feature The Participant Mark feature which is enabled by default allows Participants to double click something on the Host s desktop while it is being shared to call the Host s attention to it The Participant Mark is displayed on the shared desktop in the area where the Participant double clicked Using Secure Virtual Assist 113 Logging Actions and Messages The Log Viewer displays all event log data which includes actions taken during a meeting and any errors that occur The Log helps you keep track of events that occur in a meeting and shows all actions performed by meeting Participants Use the error and warning events in the log to take the appropriate corrective action if necessary
117. erver service Citrix Partal Citrix Resource Window Size Disabled Disable client detection by Citrix server El HTTPS Mode Always use Java in Internet Explorer amp Always use specified Citrix ICA Server Note Citrix Portal Bookmarks have been tested and verified to support the following Citrix Application Virtualization platforms through the Citrix Web Interface e Servers Citrix XenApp 6 0 XenApp 5 0 and XenApp 4 5 e Clients Citrix Receiver Plug in XenApp Plug in version 12 0 3 ar earlier versions and Java client version 10 0 of earlier versions Display Bookmark to Mobile Connect clients RDP ActiveX and Java Bookmarks ActiveX and Java RDP bookmarks offer several features that are not available in other bookmarks M Tip The ActiveX client is only supported on the Internet Explorer browser while the Java client is supported on all platforms and browsers that are compatible with Dell SonicWALL SSL VPN Service Terminal Services RDP Activex Screen Size Full Screen Colors High Color 16 bit Login as consolefadmin session W Enable wake on LAM E Send vWOL packetto hast name ar IP address Server is T8 Farm 7 Force Java ClientUsage RDP Java only Show advanced Windows options 5 Automatically log in amp Use SSL YPN account credentials Use Login Domain for S50 amp Use custom credentials Display Bookmark to Mobile Connect clients S
118. etExtender on LiINuUx 0 0 0 0 eens 53 Installing and Using NetExtender for Windows Mobile 56 Passwords in NetExtender Mobile 20 0 0 0c cee eee 60 Installing NetExtender on Android Smartphones 000000 60 Using NetExtender on Android Smartphones 0 0 00 cee eee 63 Connecting to NetExtender 0 0 rara reta a ee eens 64 Exiting or Disconnecting from NetExtender 22005 68 Checking Status Routes and DNS Settings 00008 69 Configuring Profiles Preferences and Proxy Servers 05 71 Changing Your PassWOFG o5 Tere ombre per d ROSES Se teas 75 Related DOoGCUreris zb sortes e deed cate OPER eens dene edle dE Reds 76 Chapter 5 Using Secure Virtual Assist lllllll liess 77 Using Sec r Virtual ASSiSt 3 411 au ica be het Nr oa ROAD wow EON Re tat dd 77 Installing and Launching Secure Virtual Assist 00005 78 Configuring Secure Virtual Assist SettingS 0 0 0 naana anaana 79 Selecting a Secure Virtual Assist Mode 0 0 c cee eee eee 81 Launching a Secure Virtual Assist Technician Session 81 Performing Secure Virtual Assist Technician Tasks 06 83 Initiating a Secure Virtual Assist Session from the Customer View 89 Initiating Secure Virtual Assist on a Linux Client 06 96 Using Secure Virtua
119. evortes Toos Hep wa Fevortes E ipotecii 9 p oPreertoteall Poe Sice Gallery BY coda Support Services Sonciac Inc D 5 m PR Support Global Support Services Overview E Class Support 24x7 The Technician now has complete control of the customer s keyboard and mouse The customer can see all of the actions that the Technician performs During a Virtual Assist session the customer is not locked out of their computer Both the Technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time The small tool bar in the bottom right of the screen provides options during a Virtual Assist session Trusted Active Toggles to the View Only mode where the Technician can view the customer s computer but cannot control the computer e Chat Initiates a chat window with the Technician e End Virtual Assist Terminates the session Using the Virtual Assist Taskbar and Tab Controls The Technician s view of Virtual Assist includes a Taskbar with a number of options Invite Chat Service Logging Viewer Options Expand About Invite Displays the Email Invite pane e Chat Displays the chat window to communicate with the customer e Service Displays the service queue of customers awaiting service Logging Displays the log window e Viewer Displays or hides the entire Virtual Assist window e Options
120. file and select Setting at any time To remove the file from the download list right click the file and select Remove at any time When a file is published the selected Participants receive a notification in the lower right corner of their screens Download the file by clicking the File Sharing button right clicking the O file and selecting Download and then right clicking the file and selecting Open once the file has been downloaded EY Sharing File File Name Status Progress Can ee ee Downloaded 100 Open Download Starting Voice Conversation The Coordinator can share one way voice communication with meeting Participants Only the Host can be heard When voice communication is started an icon appears on the Meeting Members section of the Lobby window next to each meeting Participant Meeting Members Role State Participant Coordinator Waiting Host Waiting Host Waiting To use voice communication 1 Click the Start Voice Conversation button to open voice communication with Participants in the meeting lobby 2 When a voice conversation starts the So Start Voice Conversation button changes to the Stop Voice Conversation button Click the Stop Voice Conversation button to end voice communication Using Secure Virtual Assist 121 Text Chatting Chat with all attendees in the meeting or have a private chat with one or more selected attendees including View only Participants To
121. ft corner of the application window or by right clicking on the Virtual Assist icon in the taskbar and selecting Settings The Virtual Assist Settings window has three panes e Proxy Settings Allows users to configure a Proxy server to access the SRA appliance There are three options for configuring proxy settings C Settings Proxy Settings Connection Profiles Connection Settings _ Enable Proxy Settings Automatically detect settings Use automatic configuration script User Proxy Server Address 10 1 2 3 Bypass Proxy User Name helper Password sees Internet Explorer proxy settings Ok Cancel Apply Automatically detect settings To use this setting the proxy server must support Web Proxy Auto Discovery Protocol WPAD which can push the proxy settings script to the client automatically Use automatic configuration script If you know the location of the proxy settings script select this option and enter the URL of the scrip in the Address field Use proxy server Select this option to enter the Address and Port of the proxy server Optionally you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server If required enter a User name and Password for the proxy server If the proxy server requires a username and password but you do not specify them in the Properties window a NetExtend
122. ge 71 Changing Your Password on page 75 Using NetExtender 63 Connecting to NetExtender To launch NetExtender on your Android smartphone and connect to the network through the Dell SonicWALL SRA appliance perform the following steps Step 1 On your Android smartphone start NetExtender by tapping the application icon The NetExtender connection options screen displays Enter the information into the Server User Password and Domain fields AMA an f G 12 07 am CM B FE 4 09 em NetExtender Server Server SONICWALL NetExtender Connect ssonicwall sonicwall com User User seng Password Password Domain Domain sonic sonicwall com Save user name amp password i 4 Ti Profiles Preferences E e Export Log About Exit Step2 Tap Connect to accept the default option Save user name amp password or select a Save or Always ask option from the drop down list The available profile options depend on how NetExtender is configured on the Dell SonicWALL appliance ise pps AAD 12 23 AM Profile Options Save user name amp password 9 Save user name only Sy Always ask user name amp password bd Step3 The smartphone displays the Login Initializing engine screen 64 SRA 7 0 User Guide Step 4 Step 5 After a successful connection the entered values are saved as a profile that you can select when starting NetExtender NetExtender saves the information in
123. gin the meeting Only SRA users can be a Coordinator under normal circumstances so SRA credentials are required for Coordinator login However a non SRA user can become the Coordinator if the Participant is chosen as an Assistant and the Coordinator quits the meeting 106 SRA 7 0 User Guide The meeting application can alternatively be accessed directly from the Virtual Office on an SRA 4600 SRA 4200 and Virtual Appliance Virtual Meeting Host a web meeting with colleques A Domains drop down list is displayed if the user belongs to multiple domains and a Portals drop down list is shown if Virtual Meeting is enabled on multiple portals Otherwise the domain and portal is automatically selected i Secure Virtual Meeti Settings Help Available Domains LocalDomain Please enter the domain or choose one from the combo box Note that the domain is case sensitive Secure Virtual Meetin Settings Help Available Portals i TestPortal Lo ewe Please choose the portal where you want to login Select the desired portal to be used for the meeting Only Participants who are in the selected portal will be able to join the meeting Setting up a Meeting Once logged into the system the option to create a meeting is available If a meeting is already created you may view the details of the meeting by right clicking the desired meeting and selecting Properties Li Secure Virtual Meet M
124. grees that the Products may work in conjunction with third party products and Customer agrees to be responsible for ensuring that it is properly licensed to use such third party products Any Software provided in object code form is licensed hereunder only in object code form Except to the extent allowed by applicable law if located in the European Union and then only with prior written notice to SonicWALL Customer shall not disassemble or reverse engineer the Software in whole or in part or authorize others to do so Customer agrees not to use the Software to perform comparisons or other benchmarking activities either alone or in connection with any other software or service without SonicWALL s written permission or publish any such performance information or comparisons f Third Party Software There may be certain third party owned software provided along with or incorporated within the Products Third Party Software Except as set forth below such Third Party Software shall be considered Software governed by the terms and conditions of this Agreement However some Products may contain other Third Party Software that is provided with a separate license agreement in which case such Third Party Software will be governed exclusively by such separate license agreement Third Party License and not this Agreement Any such Third Party Software that is governed by a Third Party License and not this Agreement will be identified on the appli
125. groups and users LocalDomain this is automated since the Administrator must manually define the groups and users on the device Similarly when working with external groups not LocalDomain the correlation is automated since creating an external domain creates a corresponding local group However when working with external users a local user entity must exist so that any user created personal bookmarks can be stored within the SRA appliance s configuration files The need to store bookmarks on the SRA appliance itself is because LDAP RADIUS and NT authentication external domains do not provide a direct facility to store such information as bookmarks Rather than requiring Administrators to manually create local users for external domain users wishing to use personal bookmarks Dell SonicWALL SSL VPN automatically creates a corresponding local user entity when an external domain user logs in to the Virtual Office The following sections describe basic bookmark tasks e Adding Bookmarks section on page 140 e Editing Bookmarks section on page 147 e Removing Bookmarks section on page 148 e Using Bookmarks section on page 148 Managing Bookmarks 139 Adding Bookmarks Bookmarks provide a convenient way for you to access Web FTP or other services on the remote network that you will connect to frequently To define bookmarks perform the following 140 Step 1 In the Virtual Office window at the top of the bookmar
126. haring on page 120 Clicking the Start Voice Conversation button shares voice communication with Participants in the meeting lobby Only the Host can be heard Voice Conversation details are described in Starting Voice Conversation on page 121 When a voice conversation is started the Start Voice Conversation button changes to the Stop Voice Conversation button Clicking the Stop Voice Conversation button ends voice communication Voice Conversation details are described in Starting Voice Conversation on page 121 Clicking the Invite button sends an email invitation to Participants Only the Coordinator and Assistant can invite Participants Invite details are described in Creating Email Invites on page 116 Clicking the Start Sharing button shares the Host desktop with all Participants in the meeting Sharing is only available during a meeting When a desktop is being shared the Start Sharing button changes to the Stop Sharing button Clicking the Stop Sharing button stops sharing the Host System desktop Only the Host can stop sharing Clicking the Request Control button requests that the Host give you control of the keyboard and mouse Only Participants who aren t the Host can request control Clicking the Reschedule Meeting button reschedules the meeting start and end times Only the Coordinator and Assistant can reschedule a meeting Clicking the Request Host button informs the Host that you want to become the Host and share
127. he lobby you can manage the meeting set roles and many other functions described in Performing Lobby Functions on page 110 depending on your role Using Secure Virtual Assist 109 Performing Lobby Functions The following functions can be performed from the lobby by clicking buttons at the top E 110 SRA 7 0 User Guide E a Tr TN H fs e CN 4e Bra 2 gt Clicking the Start Meeting button starts the meeting Only the Coordinator and Assistant can start a meeting When a meeting is started the Start Meeting button changes to the Stop Meeting button Clicking the Stop Meeting button ends the meeting Only the Coordinator and Assistant can end the meeting Clicking the Polling button opens the polling window where you can load edit and start a poll for Participants currently in the meeting Only the Coordinator and Assistant can initiate polling Polling details are described in Polling on page 117 Clicking the White Board button displays a white board to all meeting Participants where the Coordinator can add objects text and highlighting White board is available only during a meeting White board details are described in Using a White Board on page 119 Clicking the File Share button opens the file share window where you can select files for Participants to download and monitor Participants downloads Only the Coordinator and Assistant can initiate file sharing Details are described in File S
128. he settings click Custom level Custom To use the recommended settings click Default level T Enable Protected Mode requires restarting Internet Explorer Virtual Access pm Setup this system for Reset all zones to default level Va cone MO Custom level Default level Web Files Hide Edit Contr OK Cancel App Create a new bookmark gt n lan btaa Pie oe M il h l ee he eines 30 SRA 7 0 User Guide Step4 Enter the URL or domain name of your SSL VPN server in the Add this Web site to the zone field and click Add Step5 Click Ok in the Trusted Sites and Internet Options windows Installing NetExtender from Internet Explorer To install and launch NetExtender for the first time using the Internet Explorer browser perform the following Step1 Log into the SSL VPN Virtual Office portal Step2 Click the NetExtender button NetExtender P Disconnected Click to connect Step3 A User Account Control window may appear asking Do you want to allow this program to make changes to this computer Click Yes Step4 The first time you launch NetExtender you must first add the SSL VPN portal to your list of trusted sites If you have not done so the follow message will display NetExtender has detected that Internet Explorer is running in Protected Mode In arder ta launch MetExtender you need to add the SSL VPM web address into the browser
129. higher you can use the command line interface version of NetExtender Using Mobile Connect SonicWALL Mobile Connect serves the same function as NetExtender on Apple iOS devices and Android devices as listed below Prerequisites for Apple iOS Clients SonicWALL Mobile Connect is supported on Apple iPhone iPad and iPod Touch devices running Apple iOS e iPhone 4S running Apple iOS 5 or higher e iPhone 4 running Apple iOS 4 2 or higher e iPhone 3GS running Apple iOS 4 2 or higher e iPhone 3G running Apple iOS 4 2 or higher e iPad 3 running Apple iOS 4 2 or higher e iPad 2 running Apple iOS 4 2 or higher e iPad running Apple iOS 4 2 or higher e iPod Touch 2nd Generation or later running Apple iOS 4 2 or higher Mobile Connect acts as a NetExtender client when connecting to the Dell SonicWALL SRA For Mobile Connect access to succeed the portal must be set to allow NetExtender connections and the user account and group must be authorized to use NetExtender SonicWALL Mobile Connect is an app for iPhone and iPad that like NetExtender uses SSL VPN to enable secure mobile connections to private networks protected by Dell SonicWALL security appliances For information about installing and using SonicWALL Mobile Connect see the SonicWALL Mobile Connect User Guide at Mobile Connect is compatible with SRA and is a free download from iOS and Android 4 0 app stores 26 SRA 7 0 User Guide Prerequ
130. ic password to access other resources Users who need to access servers that require a domain prefix To configure per bookmark SSO perform the following tasks Before enabling SSO on an individual bookmark you must first enable SSO globally as described in the Global Bookmark Single Sign On Options section on page 164 On the Virtual Office page click the Create a new bookmark button Select one of the service types that supports per bookmark SSO Terminal Services RDP Active X Terminal Services RDP Java Web HTTP Secure Web HTTPS File Shares CIFS or File Transfer Protocol FTP To disable SSO for the bookmark clear the Automatically log in check box To use SSO for the bookmark select the Automatically log in check box and then select one of the following radio buttons Use SSL VPN account credentials allow login to the bookmark using the local user credentials configured on the SRA appliance Use custom credentials allow login to the bookmark using the credentials you enter here when selected this option displays Username Password and Domain fields Enter the custom credentials into the Username Password and Domain fields that are displayed You can enter the custom credentials as text or use dynamic variables such as those shown below Text Usage Variable Example Usage Login Name USERNAME US USERNAME Domain Name USERDOMAIN USERDOMAIN USERNAME Group Name USERGROUP
131. ificates vou do not trust which could allow programs that T This Web site is adding one or more certificates to this computer Allowing an untrusted Web site to update your vou do nat trust to run an this computer and qain access En your data Do vau want this program bo add the certificates now Click Yes iF you trust this Web site Otherwise click Ma Click Yes The certificate will be imported Note Certificates can only be imported through this method if you are using Internet Explorer Certificates for other browsers such as Chrome or Firefox must be imported manually Using Two Factor Authentication The following sections describe how to log in to the SSL VPN Virtual Office portal using two factor authentication e User Prerequisites on page 18 User Configuration Tasks on page 18 Using Virtual Office Features 17 User Prerequisites Before you can log in using two factor authentication you must meet the following prerequisites e Your Administrator has created your user account e You have an account with a two factor authentication server that conforms to the RFC standard User Configuration Tasks The following sections describe how users log in to the Dell SonicWALL SRA appliance using the two types of two factor authentication e RSA Two Factor User Authentication Process on page 18 e VASCO Two Factor User Authentication Process on page 20 e Other RADIUS Server Two Factor Authenticati
132. iliar Network Neighborhood or My Network Places File Shares allow users with appropriate permissions to browse network shares rename delete retrieve and upload files and to create bookmarks for later recall Note The server can be specified either by name or by IP address for example moosedc or Step 1 Step 2 Step 3 Step 4 W10 50 165 2 For names to work it is necessary that DNS and or WINS be properly configured by the Administrator on the SRA appliance to be able to resolve host names To create a file share perform the following steps Click the File Shares button Virtual Office displays a dialog box that provides a hot link to a login prompt 2 https 10 0 67 67 SonicWALL Virtual Office Mozilla Firefox Ea Firefox prevented this site From opening a popup window Click here For options Back Forward E Reload Up Logout A d d r e S S Name ommen m svlOfs04 sv us sonicwall com Login to Server e Entire Network i Login 9 Online Help Note Pop up window blockers may prevent File Shares from functioning properly Configure your browser to allow pop up windows on the SSL VPN portal site To specify a new share path as an example moosedc in the Address field You need to precede the share name with two back slashes For example Wile directory01 example com To connect to a pre existing file share click the Login to Server link next to the file share name Click the go prompt
133. ion of the Products or ii if MSP Customers have possession and or control of Products in whole or in part this Agreement must be provided to MSP Customers and they must agree that their use of the Products is subject to the terms and conditions of this Agreement Customer agrees to indemnify and hold SonicWALL harmless from and against any claims by MSP Customers against SonicWALL relating to the Products and or Customer s services for MSP Customers Affiliate means any legal entity controlling controlled by or under common control with a party to this Agreement but only for so long as such control relationship exists Support Information 169 d Evaluation License If the Software is provided by SonicWALL or a Reseller at no charge for evaluation purposes then Section 1 a above shall not apply to such Software and instead Customer is granted a nonproduction License to use such Software and the associated documentation solely for Customer s own internal evaluation purposes for an evaluation period of up to thirty 30 days from the date of delivery of the Software plus any extensions granted by SonicWALL in writing the Evaluation Period There is no fee for Customer s use of the ooftware for nonproduction evaluation purposes during the Evaluation Period however Customer is responsible for any applicable shipping charges or taxes which may be incurred and any fees which may be associated with usage beyond the scope permitted herein N
134. ionally enter your login credentials for the server in the User and Password fields Entering your credentials here causes NetExtender to save them so that you can automatically connect to the proxy server during subsequent logins without being prompted for credentials NetExtender Android supports basic authentication using a username and password for proxy servers Microsoft NTLM authentication is not currently supported Step 20 When finished configuring the proxy server settings tap OK 74 SRA 7 0 User Guide Changing Your Password To change your password when prompted by NetExtender perform the following steps Step1 After connecting a password expiration notice may be displayed on your Android smartphone Tap Yes to change your password or No to delay until a later time NetExtender will remind you each time you connect f ia B Fil 3 4 20 PM Your password will expire in 14 days Do you want to change it now Step2 If you select Yes the Change password screen is displayed Type your password into the Current Password field then type a new password into the New password field and again into the Type it again field Tap OK ORD B WIE 5 02pm Change password Using NetExtender 75 Step3 If your password expires before you change it the Change password screen is displayed when you connect with the message Login failed you must change your password fa B Rl 43 4 56em Change password
135. isites for Android Smartphone Clients The NetExtender Android client is supported on rooted smartphones running the following versions of the Android operating system e 1 6 or higher The NetExtender Android client is compatible with any Dell SonicWALL SSL VPN firmware version that supports the NetExtender Linux client specifically e SSL VPN 4 0 and higher As new features are added users must install the updated client to access all the features supported by the new firmware Likewise if a new client is used with older firmware some client features may not be functional For best results the latest firmware should always be used with the latest client Note Only rooted devices are supported for NetExtender Android in Dell SonicWALL SRA The rooting requirement is due to limitations and restrictions of the Android platform A layer 3 VPN client like NetExtender requires root permission for certain necessary OS level operations Warning Rooting your phone may void your warranty Consult your contract or User Guide or call your service provider for more information Alternatively the SonicWALL Mobile Connect client can be used for smartphones running Android version 4 0 or higher User Configuration Tasks Dell SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network dr
136. ist customer session to request help on your Windows computer perform the following steps Step1 There are several methods for accessing Virtual Assist e Navigate to the Virtual Assist home page using the URL provided by your Administrator or support Technician e f you received an email invitation click the link in the email or paste the URL into your Web browser Using Secure Virtual Assist 89 90 e The login page of your Virtual Office may include a direct link to Virtual Assist as shown below SonicWALL Virtual Office Welcome to the Dell Virtual Office The Dell SonicWALL Virtual Office provides easy and secure remote access to your corporate network from anywhere on the Internet Domain LocalDomain Looking for technical assistance Request help with Virtual Assist e Login to the Virtual Office and click the Request Assistance button ZN Request E Assistance Get assistance from a live technician e f Secure Virtual Assist has already been installed select the Secure Virtual Assist shortcut from the Programs list under Window s start button Step2 Thefirst time you launch Secure Virtual Assist you will be prompted to install the Secure Virtual Assist plugin and client Step3 Click the Allow button A plugin installation window displays Click Install Now The Secure Virtual Assist plugin and client installs You may be prompted to restart your bro
137. ive privileges e Downloading and running scripted ActiveX files must be enabled on Internet Explorer f the SSL VPN gateway uses a self signed SSL certificate for HTTPS authentication it is necessary to install the certificate before establishing a NetExtender connection If you are unsure if the certificate is self signed or generated by a trusted root Certificate Authority Dell SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button on the Virtual Office home page Note Import Certificate is available from the Virtual Office portal only when using Internet Explorer on Windows 2000 or Windows XP Prerequisites for MacOS Clients MacOS clients meet the following prerequisites in order to use NetExtender e MacOS 10 5 and higher e Java 1 5 and higher e Both PowerPC and Intel Macs are supported Using NetExtender 25 Prerequisites for Linux Clients Linux 32 bit or 64 bit clients are supported for NetExtender when running one of the following distributions 32 bit or 64 bit e Linux Fedora Core 15 or higher Ubuntu 11 10 or higher or OpenSUSE 10 3 or higher e Java 1 5 and higher is required for using the NetExtender GUI The NetExtender client has been known to work on other distributions as well but these are not officially supported Note Open source Java Virtual Machines VMs are not currently supported If you do not have Java 1 5 or
138. ives upload and download files and access resources in the same way as if they were on the local network The following sections describe how to use NetExtender on the various supported platforms Windows Platform Installation e Installing NetExtender Using the Mozilla Firefox Browser section on page 28 e Installing NetExtender Using the Internet Explorer Browser section on page 30 Windows Platform Usage Launching NetExtender Directly from Your Computer section on page 33 e Configuring NetExtender Properties section on page 35 e Configuring NetExtender Connection Scripts section on page 37 e Configuring Proxy Settings section on page 39 Configuring NetExtender Log Properties section on page 40 e Disconnecting NetExtender section on page 44 e Upgrading NetExtender section on page 44 e Authentication Methods section on page 45 e Verifying NetExtender Operation from the System Tray section on page 46 Using NetExtender 27 e Using the NetExtender Command Line Interface section on page 47 MacOS Platform Installing NetExtender on MacOS section on page 48 Using NetExtender on MacOS section on page 50 Linux Platform e Installing NetExtender on Linux section on page 51 Using NetExtender on Linux section on page 53 Windows Mobile Platform e Installing and Using NetExtender for Windows Mobile section on page 56 Android Smartphone Platform e Installing NetExtender on Android S
139. k button Display precise number in status Displays the exact numbers of sent and receive data Automatically establish the underlying connection Uses the Windows Mobile Connection Manager to establish the device s connection to the mobile network The Connection Manage is designed to determine the optimum network type such as 3g or wi fi If this option is disabled the user manages the connection manually Connection Manager compatibility mode This mode is enabled by default to make NetExtender Mobile work with applications calling the Microsoft Connection Manager API In limited cases server applications may not work properly through NetExtender Mobile so users can use this selection to disable the compatibility mode Note If a user disables the Connection Manager compatibility mode a confirmation message will prompt the user that this may cause some applications using the Connection Manager API to not work properly Enable Framing amp Caching optimizations This setting increases the performance of NetExtender Mobile when it is under a heavy load such as when downloading big files over NetExtender Enable NetExtender log Records log entries for NetExtender events Overwrite the previous log when NetExtender starts Maintains a single NetExtender log file that is overwritten with each new NetExtender session Disabling this option will create a separate log file for each NetExtender session
140. k the End Virtual Assist button in the bottom right corner of the screen 9 When the session ends the customer resumes sole control of the computer Installing and Launching Secure Virtual Assist Step 1 Step 2 Step 3 Step 4 Step 5 To install and launch a Virtual Assist session perform the following steps Log in to the Dell SonicWALL SRA security appliance Virtual Office If you are already logged in to the Dell SonicWALL SSL VPN customer interface click the Virtual Office button Click the Virtual Assist button Virtual Assist Assist someone by taking control of their computer The first time you launch Virtual Assist you will be prompted to install the Secure Virtual Assist plugin and client Click the Allow button A plugin installation window displays Click Install Now The Secure Virtual Assist plugin and client installs You may be prompted to restart your browser You can now launch Virtual Assist either from the Virtual Office window or from a shortcut that is added to your Programs list under Window s start button Virtual Assist Login 5 5 0 8 Settings Help e Server virtual sonicwall com Y Username tech Technician Password eeeeeee Enter your password Change Mode 78 SRA 7 0 User Guide Configuring Secure Virtual Assist Settings The Secure Virtual Assist Settings window can be accessed either by clicking the Settings button in the top le
141. ks table click Show Edit Controls and then click Create a new bookmark Step 2 SRA 7 0 User Guide San cWwAI 1 Virti al Offine Welcome to the SonleWALL Virtual Office SUC WALL S Virtual Office provides easv and secure emule access Lo Lie corporale network Trom snywhzre on the Intemszt SICK a prc dctined bookmark or create your own E Secure vy access a corporate network ERIM E Launch HetExtender to create a secure network connection to the corporate network for ful melwu k access HetExtender Disconrnzc tcd i j Lick to connec 9 ie w Ad Bookmarks Deskten L Ncw Beckmark Citrix Ail Bookmark Bookmark Mame Mame or IF Address Description Tabs Service C Use File Shares Java Applet Automatically log in Use SSL VPM account credentials Use custom credentials File Shares qu r Brawac shared files on your corporaic natwo k Hidz zcit Controla Urasta a naw bookmars Ooo E A A A 8 Fie Shares CF we Jptlens Help Jeersdmim amp aeg amp ror Statue AHE Tips Help How can change my password You may be able to change your peassworc liiniauaglh s Rente Desklop Session 2r a webpaze Please contact Your zaministrator for Specific insriictians n What ia MetExtender Wet xtender creates a secure network connection slows you to access pelbwo K resuurces servers anc weosies as f you were on the local nctwork Wh
142. l lease inform the technician of your ticket ID located below lick Information above to provide additional details Your Ticket ID TOOO01 Request Mame User Step 10 The Virtual Assist queue window provides two options e Click the information to provide the Technician with information about your issue r Add Information Xs Issue Description i computer done broke Technician Comments You can change the issue description below no longer than 127 characters Now there is smoke coming out of my keyboard Cancel e Click the icon next to the Change Name line in the queue window to specify your name By default the computer name is used unless the customer responded to an email invite which displays the customer s email address Change Customer Name Current Request Name Gee New Request Name Janel 9X eme 92 SRA 7 0 User Guide Step 11 When the Technician initiates the session the Virtual Assist toolbar appears in the bottom right of your screen The Technician now has control of your computer Virtual Assist A Status Trusted C Open Chat Dialog D Exit Virtual Assist Press ChrlAlET to change to Active Status No prompts will occur while in Trusted Status Step 12 For information on using Virtual Assist once the session is active see Using Secure Virtual Assist section on page 99 Initiating Secure Virtual Assist on a MacO
143. l Assist llli 99 Using Secure Virtual Assist in Unattended Mode 100 Enabling a System for Secure Virtual Access 00 0000 eee ae 101 Using the Request Assistance Feature anaana 104 Using Secure Virtual Meeting 0 0 0c cet 104 User THO GS cou iid uus RR dedos Ruta ex md us eatis s eatin ee dois od aes aed 104 COOMinatOMROle 254320243435 bd Dien ibtd esate sed dees des 106 Particpant TROIS esos orale ounce data d ated gon da SAA eee ase See eat a leh ose 122 Chapter 6 Using File Shares 0 0 0 0 ccc nes 125 Using the File Shares Applet 0 0 0 ccc cee ene eee 125 User PreredulsSlEess 3 sce fede Donec vate Coen de tea Seded digo deals 125 Configuration OVervieW 1 eee eee eee nee 126 Contiguration Examples xx a gave 9e ERR ees gale EA es 131 Using HTML Based File Shares 0 0 eee eens 136 Chapter 7 Managing Bookmarks 0 000 cece eee eens 139 Adding BOOKMAKS Xd te et st ae awh ta idearum R eer ene 140 OX BOOKMARKS 3 232 an Su sanna ih pubs aS hg and Pe oe ed 141 RDP ActiveX and Java Bookmarks 00 0 eee eee 143 NV CD DOOKIMANKS ed doter haere it paraded cas debet oh dot edi eee paced 146 FU BOOKMAKS iia isd oe nan deo et Sel tac Sa aie See SMe aes 147 SoHv2 Bookmarks s coeurs be Rr m ee ew eee 147 End BOOKMARKS danke don vere d drop petas ueste ub fana unde ae dta 147 Removing Bookmarks
144. le le My Computer 3 Remote Network o 0 KO 9 si e 6 amp o o c amp N tenimans Entre Networ lt Confirm Folder Delete Are you sure you want to delete Folder New Folder 4 Interret Protected Mode Cff Step6 Once the file or folder has been deleted the File Shares Applet will automatically refresh removing the item from the current directory To copy it from the local machine back to the remote machine click and drag like in Step 2 or use the Copy icon from the local machine s tool bar Note The Copy icon in the toolbar automatically moves the selected file to whatever directory is currently open To move an item to a different folder either drag and drop it into the desired destination or open the desired destination prior to clicking Copy Launching a File Directly from the File Shares Applet Files can be launched from within the File Shares Applet This section provides an example where a remote file is queried for its properties bookmarked and opened 134 SRA 7 0 User Guide Step 1 Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal Step2 Right click the file and select Properties 11 3 test directory lj test falder El FFX song asx pe Hamasaki A E hidden txt la index html lE Mew Text Di ng T u cL a Back Up Refresh Rename Delete New Fold
145. le Shares CIFS option Check the Use File Shares Java Applet box to enable the File Shares Applet for this bookmark Leaving this box unchecked means the portal will launch the original HTML browser when the bookmark is selected Optionally select Automatically log in to log in to this file share using either your SSL VPN credentials or by specifying custom credentials Click Add Bookmark serve as useful shortcuts to quickly access different network locations Bookmarks can also be set up from the File Shares Browser either by clicking the Bookmark button or using the bookmark option from the right click menu Using File Shares 127 Using the Java File Shares Applet While loading the browser interface warning messages might display These messages will look different for different browsers For the purpose of these examples Internet Explorer 6 0 was used Step1 If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain drop down menu Click Login Step2 Launch File Shares Applet by clicking the File Shares button or clicking on a link with the File Shares Applet enabled The File Shares Applet will launch in a new window separate from the Virtual Office portal Step 3 D
146. le window will remain open while the script runs To enable the script that runs when NetExtender disconnects select the Automatically execute the batch file NxDisconnect bat check box Click Apply Using NetExtender 37 Configuring Batch File Commands Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 NetExtender Connection Scripts can support any valid batch file commands For more information on batch files see the following Wikipedia entry http en wikipedia org wiki bat The following tasks provide an introduction to some commonly used batch file commands To configure the script that runs when NetExtender connects click the Edit NxConnect bat button The NxConnect bat file is displayed To configure the script that runs when NetExtender disconnects click the Edit NxDisconnect bat button The NxConnect bat file is displayed By default the NxConnect bat file contains examples of commands that can be configured but no actual commands Too add commands scroll to the bottom of the file To map a network drive enter a command in the following format net use drive letter server share password user Domain name For example to if the drive letter is z the server name is engineering the share is docs the password is 1234 the user s domain is eng and the username is admin the command would be the following net use z engineering docs 1234 u
147. lient for Secure Virtual Access mode Save and run the file File Download Security Warning iJ Do you want to run or save this file Name g sonicwall com 443 admin VirtualOffice 10 exe Type Application 1 12MB From ssivpn eng sonicwall com Rn j Seve While files from the Intemet can be useful this file type can potentially harm your computer If you do not trust the source do not run or save this software What s the risk Note Running the file directly from this dialog box may not work on some systems Save the file to the system and then run the application Step3 Fill in the necessary information in the provided fields to set up the system in Secure Virtual Access mode and click OK e Server This should be the name or IP address of the appliance the Technician normally accesses the Virtual Office from outside the management interface Do not include https Using Secure Virtual Assist 101 e Computer Name This is an identifier for the system to help differentiate between other systems that may be waiting for support in the queue This name will appear as a bookmark name in the user portal of the owner e Owner Name This name must be a valid SRA appliance user name e Key This is a key the Technician must enter prior to accessing the system through the support queue Virtual Assist Login 7 0 0 8 EI Settings Help 2 Server z 4 Computer Name Virtual Owner Name Acce
148. ll subnets currently available from the smartphone CBS Bn sic NetExtender Eg Status Routes DNS Destination Netmask 10 0 0 0 255 255 0 0 10 1 1 0 252 255 255 0 10 103 0 0 755 255 0 0 10 128 1 0 755 255 255 0 10 180 200 0 755 255 255 0 10 195 1 0 755 255 255 0 10 195 11 0 755 255 255 0 10 198 0 0 255 255 0 0 10 2 0 0 755 255 0 0 10 200 0 0 255 254 0 0 10 202 0 0 255 255 0 0 10 203 0 0 255 255 0 0 10 208 0 0 255 240 0 0 70 SRA 7 0 User Guide Step4 To view the configured DNS servers tap the DNS tab n nO A FII B 4 50 PM NetExtender Status Routes DNS DNS Servers 10 50 128 52 10 50 128 53 NetExtender Android supports DNS only WINS or DNS suffix are not supported Configuring Profiles Preferences and Proxy Servers Step 1 Step 2 To configure NetExtender profiles and preferences including proxy servers on your Android smartphone perform the following steps To display NetExtender options start NetExtender and then press the options or menu button on the smartphone The options are displayed at the bottom of the screen Tt e T Profiles Preferences TER i E Oo 0O Export Log About Exit PROFILES To display the NetExtender Profiles screen start NetExtender and then press the options or menu button on the smartphone and tap Profiles usera LocalDomain ssonicwall sonicwall com JW DET Tr sosonic sonicwall com Using NetExtender 71 Step3 To display the Remove sele
149. llipse tool draws an ellipse on the white board The ellipse color default black fill color default transparent and edge weight 1 100pt default 5pt are configurable with the Customization tools TI rex tool adds text on the white board The text s color font font size and style default Arial 20pt are configurable with the Customization tools G Eraser tool erases anything on the white board The eraser width default 20pt is configurable with the Customization tools Clear All Contents tool erases all contents on the white board 10 Customization Tools Width Background Fill Color Point Size Foreground Pen Calor Font Bold Italic Underline File Sharing o The Host can share files with Participants during a meeting Click the File Sharing button to display the File Sharing window where you can select a file to share with Participants and monitor downloads Sharing File mm File Sharing Files Sharing Files in SharedFile dac Sharing File Settings ALL Custom 120 SRA 7 0 User Guide To share a file select File Select File from the menu on the Sharing File window and select the file By default the file will be shared with all meeting Participants To share the file with specific meeting Participants select Customize Next click Publish to notify Participants that a file is available for download To change the list of Participants who can download the file right click the
150. martphones section on page 60 e Using NetExtender on Android Smartphones section on page 63 Installing NetExtender Using the Mozilla Firefox Browser Step 1 To use NetExtender for the first time using the Firefox browser perform the following To launch NetExtender first log in to the SSL VPN portal Step2 Click the NetExtender button NetExtender Disconnected B l Click to connect Step3 The first time you launch NetExtender it will automatically add an add on to Firefox Software Installation I Install add ons only from authors whom you trust Malicious software can damage your computer or violate your privacy You have asked to install the following item NetExtender Launcher SonicWALL Inc https sra sonicwall com npNELaupch xpi Install Cancel 28 SRA 7 0 User Guide Step4 Click the Install button The portal will automatically install the NetExtender stand alone application on your computer If an older version of NetExtender is installed on the computer the NetExtender launcher removes the old version and installs the new version Step5 Once the NetExtender application is installed a message appears instructing you to restart Firefox Click the Restart Now button MetExtender Launcher will be installed after you restart Firefox Restart Now al Step 6 When Firefox restarts the NetExtender Status window displays indicating that NetExtender successfully connected Cl
151. me as the one you are trying to copy over the Applet will prompt you to rename the file being copied If the name is kept the same the copied file will overwrite the existing one Using File Shares 129 Step 7 Double click a file to launch it with the proper application If activating a file on the remote machine the File Shares Applet will first download the file to a temporary folder on your machine and then open it The File Shares Applet will not always be able to delete the temporary file after use Use caution when opening files with sensitive material File opened in temporary directory be sure to save any modifications in an accessible location File saved under C DOCUME halL OCALS 11TemplisStalen vehicle why File Shares Applet Browser Overview Each window local and remote contains a set of buttons for commonly used operations in the toolbar Hovering the mouse cursor over these icons displays convenient tool tips to the user Dragging the toolbar by the dotted line on the left side of it undocks the toolbar into its own window To re dock the toolbar close the window These are the same functions as those in the right click menu Here is a list of the buttons on the task bar and their respective function e Back Traverses back in the history Sets the current view of the window to the previous location in history This icon is dimmed if there is no previous history location e Forward Traverses forward in hi
152. meeting the Participant can view the shared desktop and chat with another attendee privately or type a message in the Chat window that is visible to all attendees A Participant becomes the Assistant if selected by the Coordinator or by an Assistant who has the required privilege e View only Participant User with limited meeting capabilities The Coordinator may designate any Participant as a View only Participant A View only Participant cannot be assigned any privileges nor become an Assistant or Host Roles are switched before or during a meeting A Coordinator or Assistant with necessary privileges can change the roles of any Participant during the meeting A Participant wishing to become the Host must request permission from the Coordinator Using Secure Virtual Assist 105 Coordinator Role Logging In The Virtual Meeting Coordinator performs the following tasks Coordinator Tasks Log In Set Up a Meeting Perform Lobby Functions Control Roles Revise Meeting Settings Log Actions and Mes sages Start a Meeting Use the Control Menu During a Meeting Create Email Invites Poll Participants Share Files Text Chat Share Desktop Use a White Board Record meetings Start Voice Conversations Log in from a Virtual Meeting client using SRA credentials Set up a meeting by scheduling a time and creating a meeting code that allows meeting members to join the meeting Access various meeting functions in the lo
153. nd then delete the folder Hename Renames the selected folders and files Select items by checking the check box next to their name under the Select column Bookmark Creates a new bookmark to the current File Share location Logout Step 7 You can now navigate the folders and files in the File Share as you would through Windows Logout of the File Share service Explorer or other file management systems Step 8 To add a new folder in the current File Share location type the name of the folder in the Add New Folder field and click Submit Step9 To add a file in the current File Share location click the Browse button Navigate to the location of the file on your computer in the Choose file window that opens select the file and click OK and then click Submit in the File Share window 138 SRA 7 0 User Guide Chapter 7 Managing Bookmarks Bookmarks are objects that enable you to connect to a location or application conveniently and quickly The Virtual Office Bookmark system allows bookmarks to be created at the group and user levels The Administrator can create both group and user bookmarks which will apply to applicable users while individual users can create only personal user level bookmarks Since bookmarks are stored within the security appliance s local configuration files it is necessary for group and user bookmarks to be correlated to defined group and user entities When working with local
154. nd click Properties The NetExtender Properties window is displayed Click the Settings tab oelect Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session Click Apply Verifying NetExtender Operation from the System Tray To view options in the NetExtender system tray right click the NetExtender icon in the system tray The following are some tasks you can perform with the system tray Displaying Route Information To display the routes that NetExtender has installed on your system click the Route Information option in the system tray menu The system tray menu displays the default route and the associated subnet mask 1 61 0 0 255 255 0 0 124 1 0 255 255 255 0 Show SonicWALL MetExtender 12 16 200 50 255 255 255 255 192 168 144 0 255 255 255 0 Pernod 192 168 181 0 255 255 255 0 Connection Status 192 168 200 0 255 255 255 0 Route Information View log Properties About Exit Displaying Connection Information You can display connection information by mousing over the NetExtender icon in the system tray Connected Server sslvpn eng sonicwall com IP 1 128 1 111 Sent 121 74 KB Recerved 80 21 KB 4 amp 51PM 7 18 2011 d Fo 4A D id alll if 46 SRA 7 0 User Guide Using the NetExtender Command Line Interface Note The NetExtender command line interface is only available on Windows platforms To launch the NetExtender CLI
155. nd when the End Polling button is clicked The collected feedback is displayed as shown below Click the green bar to display detailed information for each answer Using a White Board The Host can share a white board with Participants Text objects and highlighting which can be customized are added to the white board using the toolbar at the top of the white board EE White Board r RS 7 aome 6 e SEIN su The white board contains the following tools Select tool is a pointer used to point to objects on the white board The user cannot add anything on the white board until another tool is selected amp Pen tool is used to draw a freehand shape The pen s color default black and line width 1 100pt default 8pt are configurable with the Customization tools Z Highlighter tool is another kind of pen used to draw a transparent freehand shape The highlighter width 1 100pt default 16pt and transparency saturation 1 100 default 50 is configurable with the Customization tools The transparency saturation is adjusted by 4 Line tool draws a straight line The line color default black and weight 1 100pt default 10pt are configurable with the Customization tools Using Secure Virtual Assist 119 Rectangle tool draws a rectangle The rectangle edge color default black fill color default transparent and edge weight 1 100pt default 5pt are configurable with the Customization tools E
156. ngs may impact NetExtender performance and or functionality It is recommended to only make changes here if advised to do so by Dell SonicWALL support Users may enable or disable Framing and Caching optimizations using the check box under NetExtender Protocol Settings This option is only effective when connecting to a SSL VPN server running on 3 5 or later firmware Using NetExtender 41 Configuring NetExtender Packet Capture Properties Within the NetExtender Properties dialog box click the Packet Capture heading in the menu on the left panel The available options allow you to enable and disable packet capture and data compression on NetExtender MetExtender Properties i i tbat Poo Connection Profiles rz cket Capture Settings Connection Scripts Proxy Log Clear the capture when MetE stender exits Advanced Packet Capture Enable HetE tender packet capture Requires administrator privilege Enable data compression Attempt to disable data compression during packet cature Requires capture to be started before NetE stender is connected Note Changes to the data compression will take effect the next time MetE tender is connected Cancel J Apply Note You must have Administrator privileges to change packet capture settings Step1 To enable packet capture check the Enable NetExtender packet capture check box Step2 If packet capture is enabled clear all captured packet data when NetExtender exi
157. nicWALL s performance of this Agreement may require SonicWALL to process or store personal data of Customer its employees and Affiliates and to transmit such data within SonicWALL or to SonicWALL Affiliates partners and or agents Such processing storage and transmission may be used for the purpose of enabling SonicWALL to perform its obligations under this Agreement and as described in SonicWALL s Privacy Policy www SonicWALL com us Privacy Policy html Privacy Policy and may take place in any of the countries in which SonicWALL and its Affiliates conduct business including countries outside of the European Economic Area SonicWALL reserves the right to change the Privacy Policy from time to time as described in the Privacy Policy e Notices All notices provided hereunder shall be in writing delivered personally or sent by internationally recognized express courier service e g Federal Express addressed to the legal department of the respective party or to such other address as may be specified in writing by either of the parties to the other in accordance with this Section f Disclosure of Customer Status SonicWALL may include Customer in its listing of customers and upon written consent by Customer announce Customer s selection of SonicWALL in its marketing communications g Waiver Performance of any obligation required by a party hereunder may be waived only by a written waiver signed by an authorized representative of the
158. nician mode see the Launching a Secure Virtual Assist Technician oession section on page 81 e Virtual Access Select this mode to make your computer remotely accessible at all times from the SSL VPN appliance For information on Secure Virtual Access mode see the Enabling a System for Secure Virtual Access section on page 101 Step3 Click Change Mode again to login with the selected mode Launching a Secure Virtual Assist Technician Session To launch a Virtual Assist Technician session to remotely assist customers perform the following steps Step1 Launch Virtual Assist and select the Technician Mode Virtual Assist Login 5 5 0 8 settings Help Server virtual sonicwall com Username tech Technician Password Enter your password Change Made Using Secure Virtual Assist 81 82 Step 2 Step 3 Step 4 In the Server drop down menu select the IP address or domain name of the Dell SonicWALL SRA appliance Enter the Username and Password for the Technician account on the appliance Click Login The Select Domain window displays Virtual Assist Login 5 5 0 8 settings Help P 1p Domain acalbamain Cancel Select Domain name far authentication change Mode Step5 Select the Domain that the username is configured for and click OK Step6 The Secure Virtual Assist standalone application launches E ie waits x BDOE WL sso ast Dh Sewin b335g Vins Colina Fue md
159. nitoring processes nx 2835 pppd 2864 Monitoring nameserver 10 195 1 60 Monitoring nameserver 10 195 1 50 Client IP Address 10 5 255 11 You now have access to the following remote network 10 3 5 0 27533 233 234 0 NetExtender connected successfully Saving profiles preferences Done saving profiles preferences n Ht i On n Step 11 To generate a diagnostic report with detailed information on NetExtender performance go to Help Generate diagnostic report Step 12 Click Save to save the diagnostic report using the default nxdiag txt file name in your NetExtender directory Installing and Using NetExtender for Windows Mobile Dell SonicWALL SSL VPN now supports NetExtender for the Windows Mobile platform NetExtender for Windows Mobile provides the following features e One time passwords e Two factor authentication e HTTP proxy e Connection profiles 56 SRA 7 0 User Guide Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 NetExtender supports the following Windows Mobile platforms e Windows Mobile 5 PocketPC version e Windows Mobile 6 Professional Classic version Note Windows Mobile 5 Smart Phone version and Windows Mobile 6 Standard version are not currently supported To use NetExtender on your Windows Mobile device perform the following tasks Navigate to the URL or IP address for your SSL VPN
160. nt The Administrator determines what resources are available to users from the SonicWALL SSL VPN Virtual Office The Administrator can create user group and global policies that disable access to certain machines or applications on the corporate network The Administrator may also define bookmarks or preconfigured links to Web sites or computers on the intranet Additional bookmarks may be defined by the end user 14 SRA 7 0 User Guide SonicWALL NetExtender is a software application that enables remote users to securely connect to the remote network With NetExtender remote users can virtually join the remote network Users can mount network drives upload and download files and access resources in the same way as if they were on the local network Certificates If the SRA appliance uses a self signed SSL certificate for HTTPS authentication then it is recommended to install the certificate before establishing a NetExtender connection If you are unsure whether the certificate is self signed or generated by a trusted root Certificate Authority SonicWALL recommends that you import the certificate The easiest way to import the certificate is to click the Import Certificate button at the bottom of the Virtual Office home page If the certificate is not issued by an authorized organization a message is displayed warning users of the risk A user can then view detailed information and choose to continue or end the connection Logging
161. o Web Access 7 0 e Novell Groupwise Web Access 7 0 Other applications may work but there may be problems accessing pages that are malformed have advanced HTML features use an unsupported authentication method for example Windows Integrated Authentication and URLs that are embedded in Macromedia Flash Java or ActiveX If a web application does not work with a HTTP or HTTPS Bookmark contact your Administrator Using File Share Bookmarks For information on using File Share bookmarks see the Using HI ML Based File Shares section on page 136 158 SRA 7 0 User Guide Using Citrix Bookmarks Citrix is a remote access application sharing service similar to RDP It enables users to remotely access files and applications on a central computer over a secure connection There are two types of Citrix bookmarks e ActiveX Citrix Bookmark on page 159 Java Citrix Bookmark on page 162 ActiveX Citrix Bookmark When using the Internet Explorer web browser Citrix bookmarks launch the ActiveX Citrix client The following steps describe how to launch and use the ActiveX Citrix client eS Step 1 Click the Citrix bookmark The first time you use a Citrix bookmark it will install the Citrix Web Client on your computer if you do not already have it Step 2 Click Install to install the client Open File Security Warning Do you want to run this file E Mame CitrixReceiver exe Publisher Citrix Systems Inc T
162. ode Specifies that Virtual Assist sessions will initially launch in Active mode instead of Trusted mode which is the default 80 SRA 7 0 User Guide Selecting a Secure Virtual Assist Mode When you first launch Secure Virtual Assist by default it will be in customer mode To change the mode perform the following steps Step1 Click Change Mode to select one of four possible modes Virtual Assist Login 5 5 0 8 settings Help E 5 Customer Unattended l Support d Technician Virtual Access Unattended mode allows you to request support and receive service while away from your system You should contact your support technician to provide the technician with the unattended mode password and when service should occur Step 2 Select one of the following four Virtual Assist modes e Customer Select this mode to request support For information on customer mode see the Initiating a Secure Virtual Assist Session from the Customer View section on page 89 e Unattended Select this mode to receive support help while you are away from your computer You will be prompted to enter a password which the Technician can then enter and assume control of your system without further confirmation from you For information on unattended mode see the Using Secure Virtual Assist in Unattended Mode section on page 100 e Technician Select this mode to service customers by remotely controlling their systems For information on Tech
163. omputer d C Allow all applets from 10 5 106 137 with this signature d The digital signature from SonicWALL Inc has been verified n E om xiii Show Details Deny Allow Step5 When NetExtender is successfully installed and connected the NetExtender status window displays en SonicWALL NetExtender Status Roures DNS Status Cannected Server 105 CR6 157 Client IP 10 5 255 15 Sent 23 Bytes Received 330 Bytes Duration Of Cfr 26 2 0 2011 SonicWALL Inc Using NetExtender 49 Using NetExtender on MacOS Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 To launch NetExtender go the Applications folder in the Finder and double click NetExtender app SonicWALL NetExtender Carer 70 5 136 737 Lsarname usar PATET mam cd Domain Local Dom aim N h Connect Save name and password if allowed 2011 SonicWALL Inc The first time you connect you must enter the Dell SonicWALL SSL VPN server name in the SSL VPN Server field Enter your username and password The first time you connect you must enter the domain name The domain name is case sensitive Click Connect You can instruct NetExtender remember your profile server name in the future In the Save profile drop down menu you can select Save name and password if allowed Save username only if allowed or Do not save profile When NetEx
164. on Process on page 21 RSA Two Factor User Authentication Process The following sections describe user tasks when using RSA two factor authentication to log in to the Dell SonicWALL SSL VPN Virtual Office e Logging into the SSL VPN Virtual Office Using RSA Two Factor Authentication on page 18 e Creating a New PIN on page 19 e Waiting for the Next Token Mode on page 20 Logging into the SSL VPN Virtual Office Using RSA Two Factor Authentication To log in to the Dell SonicWALL SSL VPN Virtual Office using RSA two factor authentication perform the following steps 18 SRA 7 0 User Guide Step1 Enter the IP address of the SRA appliance in your computers browser The authentication window is displayed SonicWALL Virtual Office Welcome to the Dell Virtual Office The Dell SonicWALL Virtual Office provides easy and secure remote access to your corporate network from anywhere on the Internet Domain LocalDomain xd Step2 Enter your username in the Username field Step3 The first time you log in to the Virtual office your entry in the password field depends on whether your system requires a PIN f you already have a PIN enter the passcode in the Password field The passcode is the user PIN and the SecurlD token code For example if the user s PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 f a PIN is required but you do not yet have a PIN enter the SecurlD token code in
165. on on page 12 Virtual Office Overview Dell SonicWALL SSL VPN Virtual Office provides secure remote access to network resources such as applications files intranet Web sites and email through Web access interface such as Microsoft Outlook Web Access OWA The underlying protocol used for these sessions is SSL With SSL VPN mobile workers telecommuters partners and customers can access information and applications on your intranet or extranet What information should be accessible to the user is determined by access policies configured by the Dell SonicWALL SSL VPN Administrator Accessing Virtual Office Resources Remote network resources can be accessed in the following ways Using a standard Web browser To access network resources you must log into the SSL VPN portal Once authenticated you may access intranet HTTP and HTTPS sites offloaded portals Web based applications and Web based email In addition you may upload and download files using FTP or Windows Network File Sharing All access is performed through a standard Web browser and does not require any client applications to be downloaded to remote users machines Using Java thin client access to corporate desktops and applications The Dell SONICWALL SRA security appliance includes several Java or ActiveX thin client programs that can be launched from within the Dell SonicWALL SRA security appliance Terminal Services and VNC Java clients allow remote users to ac
166. ookmark disappears from the list Using Bookmarks The following sections describe how to use the various types of bookmarks e Using Remote Desktop Bookmarks section on page 148 Using VNC Bookmarks section on page 151 e Using FTP Bookmarks section on page 153 e Using Telnet Bookmarks section on page 156 e Using SSHv1 Bookmarks section on page 156 e Using SSHv2 Bookmarks section on page 157 e Using Web Bookmarks section on page 158 e Using File Share Bookmarks section on page 158 e Using Citrix Bookmarks section on page 159 e Global Bookmark Single Sign On Options section on page 164 e Per Bookmark Single Sign On Options section on page 164 Using Remote Desktop Bookmarks Hemote Desktop Protocol RDP bookmarks enable you to establish remote connections with a specified desktop Dell SonicWALL SSL VPN supports the RDP5 standard with both Java and ActiveX clients RDP5 ActiveX can only be used through Internet Explorer while RDP5 Java can be run on any platform and browser supported by the Dell SonicWALL SSL VPN The basic functionality of the two clients is the same however the Java client is a native RDP client and supports the following features that the ActiveX client does not e Redirect Printers e Redirect Ports e Redirect Drives e Redirect SmartCards Redirect clipboard e Redirect plug and play devices Display connection bar e Auto reconnection e Desktop background 148 SRA 7 0
167. other party which waiver shall be effective only with respect to the specific obligation described therein Any waiver or failure to enforce any provision of this Agreement on one occasion will not be deemed a waiver of any other provision or of such provision on any other occasion h Force Majeure Each party will be excused from performance for any period during which and to the extent that it is prevented from performing any obligation or service as a result of causes beyond its reasonable control and without its fault or negligence including without limitation acts of God strikes lockouts riots acts of war epidemics communication line failures and power failures i Audit Customer shall maintain accurate records to verify compliance with this Agreement Upon request by SonicWALL Customer shall furnish a copy of such records to SonicWALL and certify its compliance with this Agreement j Headings Headings in this Agreement are for convenience only and do not affect the meaning or interpretation of this Agreement This Agreement will not be construed either in favor of or against one party or the other but rather in accordance with its fair meaning When the term including is used in this Agreement it will be construed in each case to mean including but not limited to k Entire Agreement This Agreement is intended by the parties as a final expression of their agreement with respect to the subject matter hereof and may not
168. otwithstanding anything otherwise set forth in this Agreement Customer understands and agrees that evaluation Software is provided AS IS and that SonicWALL does not provide a warranty or maintenance services for evaluation Licenses e Restrictions Customer may not i modify translate localize adapt rent lease loan create or prepare derivative works of or create a patent based on the Software or any part thereof ii make copies except as expressly authorized under this Agreement iii copy the Software onto any public or distributed network iv modify or resell the Software use the Software in connection with the operation of any nuclear facilities or use for purposes which are competitive to SonicWALL or v except as expressly authorized in Section 2 c above operate the Software for use in any time sharing outsourcing service bureau or application service provider type environment Unless and except to the extent authorized in the applicable Documentation Software provided with and or as the Product in part or whole is licensed for use only in accordance with the Documentation as part of the Product Software components making up a Product may not be separated from nor used on a separate or standalone basis from the Product Each permitted copy of the Software and Documentation made by Customer hereunder must contain all titles trademarks copyrights and restricted rights notices as in the original Customer understands and a
169. page 128 e File Shares Applet Browser Overview section on page 130 Setting up Bookmarks 126 Step 1 Bookmarks can be set up for folders and for files A file bookmark will not launch the Applet but instead will download and launch the file directly Bookmarks must be enabled by the Administrator To set up bookmarks from the Virtual Office Portal perform the following steps Open a Web browser and log into the SSL VPN Virtual Office interface by typing the URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain drop down Click Login Step2 Click the Show Edit Controls link in the middle of the portal page Step3 Click the New Bookmark tab in the portal page 3 E Semic WAL Virti al Offine Jptlane Help leen dmn amp ssgror Statue cte Welcome to the Sonlc WALL Virtual Office Tips Help al q Sun cALI s Virtual alice provides easv amc secure EmA access lu lie corporale network from anywhere on the Internet How can change my password You may be able to change your nl VICK a prc dctincd bookmark or create your own 2 secure access a corporate network nar AS peisswoic ltiiauagt s Remulle Desklup Session or a webpage Flease contact Launch HetExtender to create a secure network connection to the corporate network for Your zdministrator for 3pccific Tull network access instr
170. password Step 4 The first time you connect you must enter the domain name The domain name is case sensitive NetExtender will remember the domain name in the future Step5 To view the NetExtender routes select the Routes tab in the main NetExtender window SonicWALL NetExtender status Routes DNS 235 453 2392 0 2001 SonicWALL Ine 54 SRA 7 0 User Guide Step6 To view the NetExtender DNS server information select the DNS tab in the main NetExtender window SonicWALL NetExtender Status Routes DNS DBS Servers 10 195 160 10 135 1 50 DMS Suffia 2011 Sonic WALL Ine SonicWALL NetExtender Preferences Settings Advanced When I m using NetExtender Automatically reconnect when the connection is terminated When exit NetExtender _ uninstall NetExtender automatically DNS servers m Try remote DNS first then try local C Only use remote DNS servers C3 Only use local DNS servers Step8 The following NetExtender settings can be configured e Automatically reconnect when the connection is terminated e Uninstall NetExtender automatically when exiting the application e DNS server options Try remote DNS servers first then try local DNS servers Only use remote DNS servers Only use local DNS servers Step 9 The Advanced tab of the NetExtender Preferences window provides two additional options e MTU Sets the Maximum Transmission Unit MTU size which is th
171. registration of the Hardware Product or if sooner seven days after initial delivery of the Hardware Product to Customer and the applicable warranty period for Support Information 171 ooftware is ninety days from the date of registration of the Software Product or if sooner seven days after initial delivery download of the Software Product to by Customer SonicWALL does not warrant that use of the Product s will be uninterrupted or error free nor that SonicWALL will correct all errors The Limited Warranty shall not apply to any non conformance i that SonicWALL cannot recreate after exercising commercially reasonable efforts to attempt to do SO ii caused by misuse of the Product or by using the Product in a manner that is inconsistent with this Agreement or the Documentation iii arising from the modification of the Products by anyone other than SonicWALL or iv caused by any problem or error in third party software or hardware not provided by SonicWALL with the Product regardless of whether or not the SONICWALL Product is designed to operate with such third party software or hardware SonicWALL s sole obligation and Customer s sole and exclusive remedy under any express or implied warranties hereunder shall be for SonicWALL to use commercially reasonable efforts to provide error corrections and or if applicable repair or replace parts in accordance with SonicWALL s Support Services Terms Customer shall have no rights or remedies under
172. rom the remote machine and moved back from the local machine unto the remote machine all from the File Shares Applet Launch the File Shares Applet by clicking on a bookmark in the Virtual Office portal Double click the C drive double click the Documents and Settings folder then double click a specific folder for example the one that holds the Desktop folder The current directory shows the Desktop folder Select a file or folder from the remote machine and drag its icon onto the Desktop folder in the local machine This will copy the item from the remote machine directly onto the desktop Once the transfer is complete double click the Desktop folder The folder copied from the remote machine will display in that folder Note The item still exists on the remote machine To initiate a move not a copy you must use the Move command from the right click menu To delete the original file or folder select it by clicking on it once and press the Delete button on the tool bar Alternatively the item can be deleted by using the right click menu The File Shares Applet displays a delete confirmation window Click the Delete button in the pop up to delete the item Using File Shares 133 Warning The File Shares Applet will completely delete the file or folder from the remote machine In the case of a folder nested items will also be deleted These items will not be sent to the recycle bin on either machine and are not recoverab
173. s 162 SRA 7 0 User Guide Step 6 Step 7 Step 8 Step 9 Step 10 oelect Display Settings to change the language and to specify if Citrix hints should be displayed Display Settings General Configure appearance settings that are applied across the Language whole Web site English Applications screen Use these settings to personalize your Applications screen I Hints Full Graphics only Save Cancel Select Session Settings to customize the default window size for Citrix sessions Session Settings Display Use these settings to personalize the appearance of your Window size sessions Custom size px Percentage of screen In the Window Size drop down menu select one of the following options No preference Uses the default setting configured by your Administrator Full screen Resources are maximized to fill your screen Seamless Resources that support resizing appear in resizable windows Custom dimensions Enables you to specify the width and height of the resource window in pixels Percentage of screen Enables you to specify the percentage of your screen the resources will occupy select Account Settings to configure the behavior of your sessions when you log out Select the Log off all sessions check box to shut down all of your active resources when you log off from the Citrix session If you disable this check box any active resources that are hoste
174. s Kick out participant Reschedule Meeting SAIL Inverse None Cancel Using Secure Virtual Assist 111 Revising Meeting Settings Proxy Settings For setups that require a proxy click the Settings tab in the Virtual Meeting window and check the Enable Proxy Settings check box 13 Secure Virtual Meeting 7 0 0 8 Settings Help Se Settings Proxy Settings Connection Profiles General Settings Enable Proxy Settings Automatically detect settings Use automatic configuration script Internet Explorer proxy settings c cw Av Enter the proper information to utilize the proxy or click the Internet Explorer proxy settings button to automatically import the proxy settings used by Internet Explorer Connection Profiles For users accessing different appliances profiles are shown on the Connection Profiles window Information about the server currently in use is automatically populated for convenience Secure Virtual Meeting 7 0 0 8 Settings Help I Settings Proxy Settings Connection Profiles General Settings g Server 10 0 61 1 443 10 0 61 6 443 4 To remove all connection profiles click the Remove All button To remove a specific connection profile select the connection profile and click the Remove button 112 SRA 7 0 User Guide General Settings The Gen
175. s for SMS Capable Phones One Time Passwords can be configured to be sent via email directly to SMS capable phones Contact your cell phone service provider for further information about enabling SMS Below is a list of SMS email formats for selected major carriers where 4085551212 represents a 10 digit telephone number and area code Note hese SMS email formats are for reference only These email formats are subject to change and may vary You may need additional service or information from your provider before using SMS Contact the SMS provider directly to verify these formats and for further information on SMS services options and capabilities e Verizon 4085551212 vtext com e Sprint 4085551212 messaging sprintocs com AT amp T 4085551212 mobile att net e Cingular 4085551212 mobile mycingular com T Mobile 4085551212 tmomail net e Nextel 4085551212 messaging nextel com e Virgin Mobile 4085551212 vmobl com e Qwest 4085551212 qwestmp com For a more complete list see the Dell SonicWALL SSL VPN Administrator s Guide Using Virtual Office Features 23 Verifying User One Time Password Configuration If you are successfully logged in to Virtual Office you have correctly used the One Time Password feature If you cannot login using the One Time Password feature verify the following e Are you able to login to the Virtual Office without being prompted to check your email for a one time password You have not been ena
176. s trusted sites list Sater ert Inti itia tacos crear Lote i o w y O Instructions to add the SSL VPN web address into the maaan browser s trusted sites list gt gt j ih p Mes fF Sarin z ES EE EI Once the SSL VPN web address is added as a trusted site you will need to login to the SSL VPN portal again i Step5 For details on how to add the Virtual Office as a trusted site see the Internet Explorer Prerequisites section on page 30 Step6 Return to the SRA portal and click the NetExtender button The portal automatically installs the NetExtender stand alone application on the computer and the NetExtender installer opens NetExtender eu SonicWALL NetExtender Connecting Initializing engine Using NetExtender 31 If an older version of NetExtender is installed on the computer the NetExtender launcher will remove the old version and then install the new version Step7 When NetExtender completes installing the NetExtender Status window displays indicating that NetExtender successfully connected SonicWALL NetExtender Sac Server 10 5 106 138 User admin Connected 0 Days 00 00 03 Client IP 10 5 254 10 Sent 10 92 KB Received 5 45 KB Throughput 1 19 KB Sec x Disconnect 2012 Dell The information provided in the NetExtender Status window is described in the table on Installing NetExtender Using the Mozilla Firefox Browser on page 28
177. saved NetExtender profile The IP address or hostname of the SSL VPN Server u user name The username for the account d domain name The domain to connect to Disconnects timeout Optional Timeout duration after which the session is disconnected Using NetExtender 47 Table 1 NetExtender CLI Commands Command Option Description NECLI displayprofile Displays all NetExtender profiles S Server Optional Displays only the profiles that are saved for the specified server u user name Optional Displays only the profiles that are saved for the specified user name d domain name Optional Displays only the profiles that are saved for the specified domain name NECLI queryproxy NECLI reconnect Checks the connect to the proxy server Attempts to reconnect to the server NECLI showstatus Displays the status of the current NetExtender ses sion NECLI setproxy t 0 1 2 3 Configures proxy settings for NetExtender There are three options for setting proxy settings 0 Disable proxy 1 Automatically detects proxy settings The proxy server must support Web Proxy Auto Discovery Protocol WPAD 2 Uses a proxy configuration script 3 Manually configure the proxy server S proxy address The address of the proxy script or proxy server O port The port number u user name The user name for the proxy server p pass
178. sed JPEG image quality 6 This cannot be modified Cursor shape updates Enable Cursor shape updates is a protocol extension used to handle remote cursor movements locally on the client side saving bandwidth and eliminating delays in mouse pointer movement Note that current implementation of cursor shape updates does not allow a client to track mouse cursor position at the server side This means that clients would not see mouse cursor movements if the mouse was moved either locally on the server or by another remote VNC client Set this parameter to Disable if you always want to see real cursor position on the remote side Setting this option to Ignore is similar to Enable but the remote cursor will not be visible at all This can be a reasonable setting if you don t care about cursor shape and don t want to see two mouse cursors one above another Use CopyRect Yes CopyRect saves bandwidth and drawing time when parts of the remote screen are moving around Most likely you don t want to change this setting Restricted colors No If set to No then 24 bit color format is used to represent pixel data If set to Yes then only 8 bits are used to represent each pixel 8 bit color format can save bandwidth but colors may look very inaccurate Mouse buttons 2 and Normal If set to Reversed the right mouse button button 2 will act 3 as if it was the middle mouse button button 3 and vice versa View only No If set
179. ser eng admin To disconnect a network drive enter a command in the following format net use drive letter delete For example to disconnect network drive z enter the following command net use z delete To map a network printer enter a command in the following format net use LPT1 ServerName PrinterName user Domain name For example if the server name is engineering the printer name is color print1 the domain name is eng and the username is admin the command would be the following net use LPT1 engineering color printl user eng admin To disconnect a network printer enter a command in the following format net use LPT1 delete To launch an application enter a command in the following format C Path to Application Application exe For example to launch Microsoft Outlook enter the following command Cr Program Files Microsoft Office OFFICH11 out look exe To open a Web site in your default browser enter a command in the following format start http www website com To open a file on your computer enter a command in the following format C Path to file myFile doc When you have finished editing the scripts save the file and close it 38 SRA 7 0 User Guide Configuring Proxy Settings Dell SonicWALL SSL VPN supports NetExtender sessions using proxy configurations Currently only HTTPS proxy is supported When launching NetExtender from the Web portal if your browser is already configured for proxy access NetEx
180. shortcut on your desktop that will launch NetExtender with the specified profile highlight the profile and click Create Shortcut To delete a profile highlight it by clicking on it and then click the Remove buttons Click the Remove All buttons to delete all connection profiles The Settings tab allows you to customize the behavior of NetExtender NetExtender Properties Settings When start up my computer _ Automatically connect with profile Log Advanced When log in to my computer Packet Capture V Automatically start NetExtender Ul Display NetExtender Ul hen l m using NetExtender UI Minimized to the tray icon when NetExtender window is closed Minimized to the tray icon when NetExtender connected iv Display Connect Disconnect Tips from the System Tray v Automatically reconnect when the connection is terminated _ Display precise number in connection status Enable Ul animations When exit NetExtender UI Uninstall NetExtender automatically V Disconnect an active connection Using NetExtender 35 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 Step 14 To have NetExtender launch when you log in to your computer check the Automatically start NetExtender UI NetExtender will start but will only be displayed in the system tray To have the NetExtender log in window display check the Display NetExtender UI check box
181. ss ee Key i Enterthe a Key to access this machine when connecting with the Virtual Assist Client The Key is displayed in plaintext Change Mode Step4 When prompted enter the name of the Portal the Technician would normally login to Step5 After installation the VASAC client should be left running in the desktop tray This system s identifier name should now appear in the Technician s support queue displayed on the Secure Virtual Assist Status page within the management interface Upon double clicking the system listing the Technician will be prompted to provide the password established during system setup to gain Secure Virtual Access to the system Using Wake on Lan When operating in Secure Virtual Access mode a customer can allow a Technician to wake a client running Virtual Assist on the LAN if both are in the same subnet The client can be woken when powered off in the Sleep state or in the Hibernate state This feature can be enabled globally per portal or from the client Note To enable Wake Client this feature must also be enabled on the portal and in the BIOS of the client machine 102 SRA 7 0 User Guide To enable Wake on Lan Step1 Configure Wake on Lan in the client PC BIOS by selecting the Wake on LAN option Step2 X Configure Wake on Lan in the client PC Device Manager
182. story This icon is dimmed if there are no forward locations in history e Up Traverses up the directory tree to the parent directory of the current view This icon is dimmed if the current view is of the root directory or if the parent directory cannot be resolved e Refresh Refreshes the current view by either polling the local file system or remote network via the SSL VPN The refresh icon will be dimmed in the remote window if its contents are currently being refreshed e New Folder Creates a new folder within the respective file system Clicking this icon displays the New Folder dialog box allowing the user to assign a name to the new folder This icon is dimmed when the location of the window is such that a new folder cannot be created for example Root of a Windows filesystem domain list machine list e Copy Copies the selected file s folder s to the location of the remote window Clicking this icon displays the Copy dialog box that will show the status information of the copy procedure If the file being copied already exists a new dialog will display asking the user whether or not the existing file should be replaced The copy icon is dimmed when there are no selected files folders to copy for example if no drive or domain is selected It is also dimmed if the remote location cannot accept files copied to it for example Domain List Machine List Copying a folder also copies everything within the folder Delete Dele
183. strator to use the One Time Password feature will need to perform the following configuration tasks The Administrator must enable a correct email address that is accessible by the user Users cannot enable the One Time Password feature and they must be able to access the SSL VPN Virtual Office portal 22 SRA 7 0 User Guide User Configuration Tasks Step 1 Step 2 Step 3 Step 4 Step 5 To use the One Time Password feature perform the following steps If you are not logged into the SSL VPN Virtual Office user interface open a Web browser and type the Virtual Office interface URL in the Location or Address bar and press Enter Type in your user name in the User Name field and your password in the Password field then select the appropriate domain from the Domain drop down menu Click Login The prompt A temporary password has been sent to user email com will appear displaying your pre configured email account A temporary password has been sent to your sonicwall com address Please enter it below Password Login to your email account to retrieve the one time password Type or paste the one time password into the Password field where prompted and click Login You will be logged in to the Virtual Office Note One time passwords are immediately deleted after a successful login and cannot be used again Unused one time passwords will expire according to each user s timeout policy Configuring One Time Password
184. t to your default download directory SonicWALL Virtual Office Welcome to the SonicWALL Virtual Office SonicWALL s Virtual Office provides easy and secure remote acce network from anywhere on the Internet Click a pre defined bookmark or create your own to securely acces resource Launch NetExtender to create a secure network connection to the full network access NetExtender Disconnected Axis File Share PAL cick to connect E Browse share network _ All Bookmarks Desktop Pl New Bookmark Citrix Create a new bookmark op Options Help User admin Session Status Active Opening NetExtender Linux 5 5 706 x86 tgz x You have chosen to open NetExtender Linux 5 5 706 x86 tq2 which is a Tar archive from Pttps 10 5 106 145 What should Firefox do with this file Open with Archive Marager default Save File L Do this automatically tor tiles like this from now on Cancel access files in the local network You can also copy files from Your remote Citrix HTTP i X computer to the local network n Note You must be logged in as root to install NetExtender although many Linux systems will allow the sudo install command to be used if you are not logged in as root Step3 To install NetExtender from the CLI navigate to the directory where you saved the tgz file and enter the tar zxf NetExtender tgz command k mk netExtenderClient Shell
185. tart menu on the remote computer navigate to Run Type cmd to open the command interpreter and click OK Type ipconfig The IP address of your computer is displayed Configuring Remote Desktop Access on the Remote Computer Step 1 Step 2 Step 3 Step 4 Complete the following steps to allow remote desktop access to the computer that is the target of the RDP bookmark Right click the My Computer icon on the desktop and select Properties Click the Remote tab Under Remote Desktop select the check box for Allow users to connect remotely to this computer Click OK Web Bookmarks For HTTP S bookmarks you can select Use SSL VPN account credentials to log in or configure custom credentials for use with Single Sign On To disable the use of SSO clear the Automatically log in check box Select the Forms based Authentication check box to use this method and then fill in the following fields that are exposed e Configure the User Form Field to be the same as the name or id attribute of the HTML element representing User Name in the Login form for example input type text name userid gt e Configure the Password Form Field to be the same as the name or id attribute of the HTML element representing Password in the Login form for example lt input type password name PASSWORD id PASSWORD maxlength 128 gt For External Web Site bookmarks select HTTPS Mode to encrypt Web communication with SSL
186. ted to read and accept a disclaimer click OK Step8 A pop up window indicates that you are in the Virtual Assist queue The Technician will be alerted that you are ready Click Cancel to cancel the Virtual Assist request PF nn Waiting A technician will be available to help you shortly You may cancel your request anytime by clicking the Cancel button Your current time in queue is 0 24 Add Information Cancel Please inform the technician of your ticket ID located below Click Add Information above to provide additional details Your Ticket ID TOO020 Request Name derek y 2 Step9 The Virtual Assist queue window provides two options Click Add information to provide the Technician with information about your issue Click the icon next to the Request Name line in the queue window to specify your name By default the computer name is used Step 10 When the Technician initiates the session the Virtual Assist toolbar appears in the bottom right of your screen The Technician now has control of your computer AO Nirwal Assist Status Trusted c Open Chat Dialog End Support Press Ctrl Alt T to change to Active Status No Prompts will occur when in Trusted Status Step 11 For information on using Virtual Assist once the session is active see Using Secure Virtual Assist section on page 99 Using Secure Virtual Assist 95 Initiating Secure Virtual Assist on a Linux Client Note Dell SonicW
187. tender automatically inherits the proxy settings To manually configure NetExtender proxy settings perform the following tasks Step1 Right click the icon m in the task bar and click Preferences The NetExtender Preferences window is displayed Step2 Click Proxy NetExtender Properties Connection Profile Proxy Settings Connection Script Proxy Automaticlly detect settings Enable proxy settings Log Use automatic configuration script Advanced Packet Capture Use proxy server Internet Explorer proxy settings Step 3 Select the Enable proxy settings check box Step 4 NetExtender provides three options for configuring proxy settings Automatically detect settings To use this setting the proxy server must support Web Proxy Auto Discovery Protocol WPAD which can push the proxy settings script to the client automatically Use automatic configuration script If you know the location of the proxy settings script select this option and enter the URL of the scrip in the Address field Use proxy server Select this option to enter the Address and Port of the proxy server Optionally you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server If required enter a User name and Password for the proxy server If the proxy server requires a username and password but you do not specify
188. tender is connected the NetExtender icon is displayed in the status bar at the top right of your display Click the icon to display NetExtender options T Cel Thu 11 03 AM Show NetExtender Window Connection Status Routes gt Disconnect a Quit E rrr 7 To display a summary of your NetExtender session click Connection Status To view the routes that NetExtender has installed select the Routes tab in the main NetExtender window AOO Routes Available Routes 10 0 0 0 255 255 0 0 10 50 0 0 255 255 0 0 10 200 0 0 255 254 0 0 10 202 0 0 255 255 0 0 10 208 0 0 255 252 0 0 10 2 0 0 255 255 0 0 10 1 1 0 255 255 255 0 bist o E rrt tr 50 SRA 7 0 User Guide Step 10 To view the NetExtender Log go to Window Log eoe NetExtender Log col WVII COONECTCTLOO Ls TCTE CMLOHATEU Loading saved profiles Loaded profile sslvpn eng sonicwall com Done Connecting to SSL VPN Server sslvpn com 443 Connected Logging in Login successful Using SSL Encryption Cipher DHE RSA AES256 SHA You now have access to the following 10 remote networks 10 0 0 0 255 255 0 0 10 50 0 0 255 255 0 0 10 200 0 0 255 254 0 0 10 202 0 0 255 255 0 0 10 208 0 0 255 252 0 0 10 2 0 0 255 255 0 0 10 1 1 0 255 255 255 0 192 168 4 0 255 255 255 0 192 168 181 0 255 255 255 0 10 203 0 0 255 255 0 0 NetExtender IP Address 10 128 1 105 NetExtender connected successfully Type Ctrl c to disconnect
189. tep 1 Enter the desired Bookmark Name Step 2 Enter the Name or IP Address of the resource you are trying to reach You can also use an IPv6 address Step3 In the Description field type a brief description of the bookmark Step4 Inthe Tabs field create a comma separate list of tabs showing where the bookmark should be displayed Step5 Select Terminal Services RDP ActiveX or Terminal Services RDP Java from the Services list Standard tabs Desktop Web Files Terminal Mobile do not need to be included Managing Bookmarks 143 144 Step6 Continue to configure the RDP ActiveX or Java Bookmark as follows Add Bookmark Bookmark Name Activex DLLs Name or IP Address Description Tabs Service Screen Size Colors Application and Path Command line arguments Start in the following folder Login as consale admin session v Enable wake on LAM MAC Ethernet Address Wait time for baot up seconds Send WOL packetto host na Serveris TS Farm fame o e Terminal Services RDP Activex 9 1024x758 High Color 16 bit v Cd Cd Po Pd me or IP address 9 Show advanced Windows options Redirect printers F Redirect ports Redirect clipboard J Display connection bar I lt Desktop background L Menuiwindow animation O 3 draggingiresizing Remote audio RDP6 Options 7 Dual monitors F Font smoothing F
190. teps Step1 To access the Exit option press the options or menu button while on the NetExtender screen The options are displayed at the bottom of the screen k T p 6 al Profiles Preferences Export Log About Exit Step 2 To cause NetExtender to exit completely including the services component select the Exit option and tap OK You can restart NetExtender by clicking its icon on your smartphone DISCONNECT To disconnect NetExtender perform the following steps Step 1 Pull down the notification bar and click NetExtender to open the NetExtender user interface August 15 2010 B HI G3 6 48 PM A NetExtender Connected 10 0 61 8 amp 45 PM iu Battery Information Voltage 4 153 Temp 22 C Li ion Batten 6 46 PM 4 USB debugging connected Select to disable USB debugging USB connected Select to copy files to from your computer 222 IP cec N catio How in Pisano CA od 565 68 SRA 7 0 User Guide Step2 In the NetExtender user interface tap the Disconnect button and tap OK to confirm fave B E43 4495 wal NetExtender Status Routes DNS Connected 0 Days 00 00 15 Server ssonicwall sonicwall com User Seng Client IP 10 128 1 107 Sent 40 bytes Received 64 bytes Throughput 0 bytes Sec curen NetExtender notifies you while disconnecting Be Ag Ea P 12 10AM SONICWALL gt NetExtender Disconnecting Releasing data channel Checking St
191. tes the selected file s folder s Deleting a folder will delete everything within the folder Note Files deleted this way are fully removed from the original machine they were on These files are not sent to the recycling bin and are in no way recoverable 130 SRA 7 0 User Guide Configuration Examples The following configuration examples provide a demonstration of the usefulness and flexibility of the File Shares Applet e Configuring Bookmarks from Within the File Shares Applet page 131 e Using Bookmarks from Within the File Shares Applet page 133 e Moving Files and Folders page 133 e Launching a File Directly from the File Shares Applet page 134 Configuring Bookmarks from Within the File Shares Applet Navigating a remote computer s directory hierarchy structure takes a long time To reduce this process as much as possible the Dell SonicWALL SSL VPN File Shares Applet allows the user to create bookmarks on the fly from within the File Shares Applet itself This allows the user to skip the hierarchy structure of the remote computer the next time she needs to access a particular file or folder Step1 Launch the File Shares Applet by clicking on the File Shares button in the Virtual Office portal The File Shares Applet displays Step2 The File Shares Applet s default location for the local window is the base directory while the remote window shows the entire network Double click the appropriate folders to navigate the loc
192. the customer Using Secure Virtual Assist 85 86 SRA 7 0 User Guide Record Records the Virtual Assist session in a wmv file that can be shared with other customers The file is automatically named with the user name and the date and time the recording was started for example Sue EST 2013 2 12 09h47m43s wmv The file location can be set on the Connection Settings window System Info Provides detailed information to the Technician about the customer s computer X Customer System Information Basic Information Computer Mame User Name Operating System Mame Windows xP Professional Service Pack 3 build Hardware Information Processor Physical Memory Network Information Adapter Description AMD PENET Family PCI EEF Adapter Address O0 50 56 BA 1C FB Type Ethernet IP Address 10 103 227 10 IP Mask 255 255 254 Gateway 10 103 226 1 DHCP Enabled Mo Have Wins Ma SHwWL 81EADD2z2103 Administrator Intel PENTIUM x86 257894784 bytes used 71 Reboot Customer Reboot the customer s computer Unless you have Requested full control the customer will be warned about and given the opportunity to deny the reboot You can select either a basic reboot or to reboot into Safe Mode with Networking Reboot Customer v 24 A M Reboot Lj Reboot to Safe Mode Note When rebooting you will be prompted to enter the login credentials for the computer Reboot Authentication E xj Ple
193. thentication Process The following sections describe user tasks when using RSA two factor authentication e Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication on page 21 e Creating a New PIN on page 19 20 SRA 7 0 User Guide Logging into the SSL VPN Virtual Office Using VASCO Two Factor Authentication To log in to the Dell SonicWALL SSL VPN Virtual Office using VASCO two factor authentication perform the following steps Step1 Enter the IP address of the SRA appliance in your computer s browser The authentication window is displayed Step2 Enter your username in the Username field Step3 Enter the passcode in the Password field Your entry in the password field depends on whether your system requires a PIN f you already have a PIN enter the passcode in the Password field The passcode is the user PIN and the VASCO Digipass token code For example if the user s PIN is 8675 and the token code is 30966673 then the passcode is 867530966673 f a PIN is required but you do not yet have a PIN enter the VASCO Digipass code in the Password field You will be prompted to create a PIN lf the RSA server does not require a PIN simply enter the VASCO Digipass code Note Consult with your network Administrator to determine if your configuration requires a PIN Step4 Select the appropriate Domain If manually entering the Domain it is case sensitive Step 5 Click Login Other RAD
194. ting e Host The Host is a Participant who shares their desktop with all Participants in the meeting When a meeting begins the Host s desktop is shown to all Participants The Host can be changed by the Coordinator during the meeting by selecting any available Participant If a Host is not explicitly set when the meeting starts the Coordinator becomes the Host Only one Participant is designated as the Host at any one time View Tool Commands Windows Chat I GaP Patricia DayFull Color Active Mode Efi Full Screen ra Auto Scaling cz Zoom iU a True Size aS Refresh RJ File Transfer Chat E System Info M Reboot Customer cll Active Screens 77 Record Request Full Control Only the Host can control the Host System unless the Host grants permission when a Participant requests control The Host may also give control to any Participant by selecting the Participant from the Meeting Members list Only one Participant can control the Host oystem at any one time When a Participant takes control of the Host System he loses control as soon as the Host moves his mouse pointer on the screen The meeting control permission state is visible to all Participants while in the lobby e Participant User with credentials to join the meeting A Participant must enter a meeting code before they can join a meeting The code required to join the meeting is determined by the Coordinator prior to the meeting After joining a
195. tion window amp Virtual Network Connection l ioj x Disconnect Options Clipboard J Send Gtri Alt Inel Refresh VNC Authentication Password Ok Java Applet Window Step3 To configure VNC options click the Options button The Options window is displayed lolx Encoding Tight v Compression level fe JPEG image quality 6 Cursor shape updates Enable Use CopyRect Restricted colors ves z Mouse buttons 2 and 3 Mormal View only Share desktop Close Java Applet Window Lr Managing Bookmarks 151 The following table describes the options that can be configured for VNC Table 1 VNC Options Option Default Description of Options Encoding Tight Hextile is a good choice for fast networks while Tight is better suited for low bandwidth connections From the other side the Tight decoder in TightVNC Java viewer is more efficient than Hextile decoder so this default setting can also be acceptable for fast networks Compression Level Default Use specified compression level for Tight and Zlib encodings Level 1 uses minimum of CPU time on the server but achieves weak compression ratios Level 9 offers best compression but may be slow in terms of CPU time consumption on the server side Use high levels with very slow network connections and low levels when working over higher speed networks The Default value means that the server s default compression level should be u
196. tml gt Web based resources are available to help you resolve most technical issues or contact Dell SonicWALL Technical Support Technical Support Contact Information Contact Support Page http www sonicwall com us support contact html Contact SonicWALL Page http www sonicwall com us company 286 html GNU General Public License GPL Source Code Dell SonicWALL will provide a machine readable copy of the GPL open source on a CD To obtain a complete machine readable copy send your written request along with a certified check or money order in the amount of US 25 00 payable to Dell SonicWALL Inc to General Public License Source Code Request Dell SonicWALL Inc Attn Jennifer Anderson 2001 Logic Drive San Jose CA 95124 3452 Limited Hardware Warranty All Dell SonicWALL appliances come with a 1 year Limited Hardware Warranty which provides delivery of critical replacement parts for defective parts under warranty In addition for 90 days from the warranty start date Dell SonicWALL SRA 4600 1600 appliances are entitled to a Limited Software Warranty which provides bug fixes updates and any maintenance releases that occur during the coverage term Visit the Warranty Information page for details on your product s warranty http www sonicwall com us support Services html tab warranty Dell SonicWALL Inc warrants that commencing from the delivery date to Customer but in any case commencing not more than ninety 90
197. to Yes then all keyboard and mouse events in the desktop window will be silently ignored and will not be passed to the remote side Share desktop Yes If set to Yes then the desktop can be shared between clients If this option is set to No then an existing user session will end when a new user accesses the desktop 152 SRA 7 0 User Guide Using FTP Bookmarks FTP bookmarks can use a port designation if the service is not running on the default port Step1 Click the FTP bookmark The FTP Session dialog box displays 2 https 10 0 67 67 FTP SonicWALL Virtual Office Mozilla Firefox b Sessions FTP Session b Add New Session anonymousi 10 0 67 64 Download Files Upload Files Online Help Logout Add New FTP Session Server Name Address 1 0 0 67 64 Username janonymous Passwuord Peer Leave blank to use your SSL YPN Portal User name and Password peeeeSS Step2 Enter your username and password If you want to use your Virtual Office username and password simply leave the fields blank Step3 Click Submit An FTP session displays O b Sessions Add New Session lans mousian 0 0 67 64 b Download Files h Upload Files b Online Help h Logout ND FTP Session Files and Folders Current directory Go to directory O O Submit Filename Size Date o C 1 3 Release 0 Aug 7 14 55
198. to display the Enter Network Password dialog box 136 SRA 7 0 User Guide Step5 Type a valid username in the User Name field and a valid password in the Password field and click Login 3 hitps 10 0 67 67 Enter Network Password E qe Please type your user name and password Cancel 10 0 67 67 4 Step6 Virtual Office displays the home File Share screen that you have specified displaying folders on the network to which you can navigate https 10 0 67 89 SonicWALL Virtual Office Microsoft Internet Explorer provided by SonicWALL INC Back Forward 43 Reload Up Delete Rename Bookmark Logout ee files ee tl 0 0 67 64ishare fileSharesTest Go Name Select r E 8a z Add New Folder space r1 test test E Upload a File Submit El M f Bm 3 7 Using File Shares 137 The following table describes the controls at the top of the File Share window Table 1 File Share Controls Button Description Back Navigate to the previous File Share location Forward Navigates forward to the previous File Share location after you have pressed the Back button Heload Reloads the current folder to display any changes Up Navigates Delete Deletes the selected folder or folders Note that only empty folders can be deleted If there are files in the folder an error message is displayed Delete all files out of the folder a
199. ts by checking the Clear the capture when NetExtender exits check box To disable packet capture uncheck this check box Step3 If packet capture is enabled clear all captured packet data when NetExtender exits by checking the Clear the capture when NetExtender exits check box To retain packet data uncheck this check box Step4 To enable data compression of captured packets check the Enable data compression check box To disable data compression the next time NetExtender is connected uncheck this box If packet capture is enabled when NetExtender connects and you want to disable data compression immediately instead of waiting until the next time NetExtender is connected check the Attempt to disable data compression during packet capture check box Step5 Click Apply to save your changes 42 SRA 7 0 User Guide Viewing the NetExtender Log The NetExtender log displays information on NetExtender session events The log is a file named NetExtender dbg It is stored in the directory C Program Files SonicWALL SSL VPN NetExtender To view the NetExtender log right click the NetExtender icon in the system tray and click View Log click the Log icon on the main status page Es NetExtender Log Viewer NetExtender Log Log View Filter S 3 se Time 01 05 2012 15 51 05 01 05 2012 15 51 07 01 05 2012 15 51 07 01 05 2012 15 51 07 01 05 2012 15 51 07 01 05 2012 15 51 10 01 05 2012 17 28 27 01 25 2012 17 41 10 1 26 2012 1 97
200. tual Assist eS Java not required pro independent independent Java 1 6 0 1 04 Java 1 6 0 104 To configure SonicOS SSL VPN firmware an Administrator must use a Web browser with JavaScript cookies and SSL enabled Virtual Assist is fully supported on Windows platforms Virtual Assist is certified to work on Windows 7 Windows Vista and Windows XP Limited functionality is supported on Mac OS where customers can request for assistance via web requests Virtual Office Overview 11 Web Management Interface Overview Step 1 Step 2 Step 3 From your workstation at your remote location launch an approved Web browser and browse to your SRA appliance at the URL provided to you by your network Administrator Open a Web browser and enter https 192 168 200 1 the default LAN management IP address in the Location or Address field A security warning may appear Click the Yes button to continue Security Alert E3 d Information you exchange with this site cannot be viewed or changed by others However there is a problem with the site s security certificate The security certificate was sesued by a company you have not chosen to trust View the ceite cate to determine whether you want to trustthe certifying authority The security certificate date is valid The security certificate has a valid name matching the name of the page you are trying to view Do you wantto proceed The SonicWALL SSL VPN
201. uctions What is NetExtender m NetExtender T ene File Shares Lu Heil xtender creates 3 secure network 5 Discornzcicd Lay Browac abared files on your cerporadc connection zllaws you to access ter VENDERE riebwo k respurces servers an wecstes uas f you were on the local network AJ Bookmarks Desktop Hido cit Centrola eid E i oein a ie Shares allows you to remotely Now Bookmark Urasta a naw bookmar 5 access fles in the local network You i rivi Can also copy files fro your Penile SRA 7 0 User Guide Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 The Add Bookmark screen displays Enter a friendly name for the bookmark in the Bookmark Name field Add Bookmark Tips Help Q Sra NR PO What is the File Shares Java ee e A The applet is generally the preferred uu features like drag and drop and Tabet D JR copying muttipie fies at a time If you C do not have Java installed you can File Shares CIFS v disable the applet and use the basic int j E Use File Shares Java Applet browser based interface instead Automatically log in Use SSL VPN account credentials Q Use custom credentials OK Cancel Enter the IP address and file directory path to the File Share in the Name or IP Address field Note When using the Java applet the Name or IP Address field must be to a file directory and end with a or character In the Service pull down menu select the Fi
202. ue window provides two options e Click Add information to provide the Technician with information about your issue Add Information Support information Maximum 127 characters Input some information here e Click the icon next to the Request Name line in the queue window to specify your name By default the computer name is used Change Customer Name Current Request Name cwang New Request Name PO 98 SRA 7 0 User Guide Step 11 When the Technician initiates the session the Virtual Assist toolbar appears in the bottom right of your screen The Technician now has control of your computer Sonicwall Virtual k fa Status Trusted 7 o Exit Virtual Assist Press Ctrl Alt U to change to Active Status Mo prompts will occur while in Trusted Status Step 12 For information on using Virtual Assist once the session is active see Using Secure Virtual Assist section on page 99 Using Secure Virtual Assist During a Virtual Assist session you are not completely locked out of your computer Both the Technician and customer can control the computer although this may cause confusion and consternation if they both attempt to drive at the same time You can resume control when the Technician is not actively typing or moving the mouse And you can end the session at any time by clicking the End Virtual Assist button in the bottom right corner Chatting with the Technician
203. vidual machines on the remote network This section contains the following subsections e User Prerequisites section on page 125 e Configuration Overview section on page 126 e Configuration Examples section on page 131 User Prerequisites The Dell SonicWALL SSL VPN File Shares Applet is a Java application that supports Java 1 3 1 and newer and the JRE Version 5 0 Update 10 or newer is recommended To download the latest Java and JRE versions visit http www java com Supported Web browsers for SRA and Java File Shares are listed in Browser Requirements on page 10 For optimal performance use the most recent supported version shown in this list The Administrator must enable the File Shares Applet for users to use it There must be a computer with open access for the Dell SonicWALL SSL VPN File Shares Applet to log into The remote computer must have shared folders for files to be copied or moved Sharing policy must be set from within the remote computer s own operating system Using File Shares 125 Configuration Overview The SSL VPN File Shares Applet is easy and intuitive to use User should be aware of its functions and limitations Setting up bookmarks and the browser interface are covered in this section along with an overview of the browser and sample use cases This section contains the following subsections e Setting up Bookmarks section on page 126 e Using the Java File Shares Applet section on
204. ware as subject to FAR Sections 12 211 12 212 27 405 3 and DFARS Section 227 7202 The rights to use the Products and the underlying commercial technical date and computer software is limited to those rights customarily provided to the public purchasers as set forth in this Agreement The Software and accompanying Documentation are deemed to be commercial computer software and commercial computer software documentation respectively pursuant to DFAR Section 227 7202 and FAR Section 12 212 as applicable Any use modification reproduction release performance display or disclosure of the Software and accompanying Documentation by the United States Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of this Agreement a Governing Law and Venue This Agreement shall be governed by and construed in accordance with the laws of the State of California without giving effect to any conflict of laws principles that would require the application of laws of a different state The parties agree that neither the United Nations Convention on Contracts for the International Sale of Goods nor the Uniform Computer Information Transaction Act UCITA shall apply to this Agreement regardless of the states in which the parties do business or are incorporated Any action seeking enforcement of this Agreement or any provision hereof shall be brought exclusively in the stat
205. word The password name for the proxy server b bypass proxy Bypasses the previously configured proxy settings Save Saves the proxy settings NECLI viewlog Installing NetExtender on MacOS Displays the NetExtender log Dell SonicWALL SSL VPN supports NetExtender on MacOS To use NetExtender on your MacOS system your system must meet the following prerequisites e Mac OS 10 6 and higher e Java 1 5 and higher e Both PowerPC and Intel Macs are supported To install NetExtender on your MacOS system perform the following tasks Step1 Login to the Dell SonicWALL Virtual Office Step2 Click the NetExtender button 48 SRA 7 0 User Guide Step3 The Virtual Office displays the status of NetExtender installation A pop up window may appear prompting you to accept a certificate Click Trust eoo SonicWALL Virtual Office NetExtender for Mac OS X In the future you can launch NetExtender from your Applications folder without returning to this web page Close this window OQO 10 5 106 137 m Do you want to accept this certificate from the web site T 10 5 106 137 for the purpose of exchanging encrypted information Publisher authenticity can not be verified A M mcr Show Certificate Don t Trust Trust Step4 A second pop up window may appear prompting you to accept a certificate Click Trust fU wm v0 An applet from 10 5 106 137 is requesting access to your c
206. wser Lk x Install add ons only from authors whom you trust Malicious software can damage your computer or violate your privacy You have asked to install the Following item Jd VALauncher SonicWALL Inc https virtualassisk eng sonicwall com V ALauncher xpi SRA 7 0 User Guide Step 4 Step 5 Step 6 Step 7 Step 8 You can launch Virtual Assist either from the Virtual Office window or from a shortcut that is added to your Programs list under Window s start button If the Server address is not auto propagated in the login window enter the Server address The server address can be either an IP address IPv6 address or hostname of the Dell SonicWALL SRA appliance IPv6 addresses must be enclosed in brackets the and symbols Virtual Assist Login 5 5 0 8 Settings Help E Server assist va sonicwall com v Request Support Request Support Appoint Technician Enter the name or IP address of your support server Change Mode Click Request Support to request assistance or Appoint Technician to request assistance from a specific Technician If you receive the following security alert click Unblock to allow Virtual Assist traffic through the Windows firewall Windows Security Alert T To help protect your computer Windows Firewall has blocked some features of this program Do you want to keep blocking this program Mame SW Tunnel Publisher Unknown Keep Blacking i Unblock i
207. xplorer provide A https 10 0 61 41 Terminal Services RDP5 Loading Microsofta X s Tools Help i x af j Search SP Favorites 4 3 SonicWALL Virtual Office Microsof File Edit View Favorites J Googe 8 SsL vPND A Tools Help Q la L Links SSL SafeMod M M TIS s LE cam 2 DevToolBar View DOM ss Sonic Welcome SonicWALL irtu private network r Please wait while the T Desktop Java Client loads DER Address Click a pre config corporate resourgf Launch NetExtenll Ld Virtua PE LU Eagle Add Bookm amp SonicWALL Virtual Office pamja 8 Internet For information on configuring options for RDP bookmarks see RDP ActiveX and Java Bookmarks on page 143 150 SRA 7 0 User Guide Using VNC Bookmarks Step1 Click the VNC bookmark The following window is displayed while the VNC client is loading Note VNC can have a port designation if the service is running on a different port E Virtual Network Computing NC Microsoft Internet Explorer provid ed by So Please wait while the Virtual Network Computing Client loads Click the Close window button to close this window after you are finished with your irtual Network Computing session Close Window Step2 When the VNC client has loaded you will be prompted to enter your password in the VNC Authentica
208. xtender session disconnects You can also disconnect by double clicking on the NetExtender icon to open the NetExtender window and then clicking the Disconnect button When NetExtender becomes disconnected the NetExtender window displays and gives you the option to either Reconnect or Close NetExtender Upgrading NetExtender NetExtender automatically notifies users when an updated version of NetExtender is available Users are prompted to click OK and NetExtender downloads and installs the update from the Dell SonicWALL SRA security appliance When using releases prior to 2 5 users should periodically launch NetExtender from the Dell SonicWALL Virtual Office to ensure they have the latest version Prior to release 2 5 the standalone NetExtender does not check for updates when it is launched directly from a user s computer Changing Passwords Before connecting to the new version of NetExtender users may be required to reset their password by suppling their old password along with providing and re verifying a new one 44 SRA 7 0 User Guide Authentication Methods NetExtender supports various two factor authentication methods including one time password RSA and Vasco If an Administrator has configured one time passwords to be required to connect through NetExtender you will be asked to provide this information before connecting Atemporary password has been sent to your sonicwall com address Please enter it below P
209. y SonicWALL or its agents Reseller shall mean those entities to which SonicWALL or SonicWALL s authorized distributors distribute the Products for resale to end users Except as otherwise agreed upon by the parties this Agreement will also cover any updates and upgrades to the Products provided to Customer by SONICWALL directly or through a Reseller except as may be otherwise indicated such updates and upgrades shall be deemed Products 1 LICENSE S AND RESTRICTIONS a Licenses Subject to the terms and conditions of this Agreement SonicWALL grants to Customer and Customer accepts from SonicWALL a nonexclusive nontransferable except as otherwise set forth herein and nonsublicensable license License to i execute and use the Software on the Hardware with which the Software is provided pre installed in accordance with the applicable Documentation and ii for Software provided in standalone form without Hardware install execute and use the Software on the Hardware or hardware device s on which it is intended to be used in accordance with the applicable Documentation and the License purchased If Customer purchased multiple copies of standalone Software Customer s License to such standalone ooftware includes the right to install use and execute up to the number of copies of ooftware Licenses purchased In addition the License includes the right to x make a reasonable number of additional copies of the Software to b
210. your desktop Only Participants who are not currently the Host can request to become the Host Clicking the Quit button exits the meeting and return to the meeting selection window Anyone in the meeting can quit the meeting Controlling Roles The Coordinator and Assistant can change a meeting member s role by right clicking the meeting member s name and selecting a role from the drop down menu Pass KeyBoard and Mouse Control Set as Host Set as Assist Set as view only Kick Qut The following options may appear depending on permissions and the meeting member s current role Option User Description Pass Keyboard and Host Allow the selected Participant to control the Host s PC Mouse Control Set as Host Coordinator Set the selected Participant to be the Host Assistants with Set Host permission Set as Assistant Coordinator Set the selected Participant to be the Assistant An Assistant has privileges similar to the Coordinator depending on the settings selected by the Coordinator as shown below Set as view only Coordinator Set the selected Participant to view only mode so the Assistant Participant can only view the Host desktop cannot request control Kick out Coordinator Remove the selected Participant from the meeting Assistant amp Assistant Permission Setting Assistant Permissions Start End Meeting Set Host Open Polling Set Unset View Only E Invite Participant
211. ype Application From C Documents and SettingsipakumarlDeskkop Always ask before opening this file While files from the Internet can be useful this file type can potentially harm your computer Only run software from publishers you trust what s the risk Step3 The Citrix Web Client begins to install If prompted click the banner to grant ActiveX control to the Citrix Web Client Citrix Installation Windows Internet Explorer p fees h tpis H0 5 106 140 cgi binjcitrix installerzurl 10 5 252 16952F Citrix vez FAccessPlatfarr 7 This website wants En run the Following add on Citrix Systems Inc From Citrix Systems Inc IF vnu trust the website and the add on and want to allow it to run click here Please wait while the Citrix Web Client is installed After installation you will be automatically redirected to the Citrix portal The Citrix Access Web Client is currently being downloaded from the following location cxfhttp 10 5 252 43 CitrixRecetver exe You can download the updated full clisnt package from the main Citrix site here Internet Managing Bookmarks 159 160 Step4 Click Yes to the Security Warning message that is displayed Security Waning Warning x Do you want to install and run Citrix Web Client Fant on 2 20 2004 10 22 PM and distributed by Citrix Systems Inc authenticity verfied by VeriSign Class 3 Code Publisher Signing 2001 CA Caution Citrix
Download Pdf Manuals
Related Search
Related Contents
福祉用具貸与・販売(PDF:7102KB) Signature Service Manual [ 033869 ] Humalog ® KwikPen ® à 200 unités/mL Bintec-elmeg RS123w Votre HTC Flyer WA4090 (PRO LIGHT) LED-MB350 USER MANUAL - 05.01.2014 Samsung RSE8KPPS1/XEP Manual de Usuario Copyright © All rights reserved.
Failed to retrieve file