SonicWALL none manual About this Guide, Global VPN Client Enterprise/Global Security Client

Page 8

Global VPN Client Enterprise/Global Security Client

SonicWALL Global Security Client combines gateway enforcement, central management, configuration flexibility and software deployment to deliver comprehensive desktop security to mobile workers and corporate networks. Global Security Client protection includes the SonicWALL Distributed Security Client and the SonicWALL Global VPN Client Enterprise combined with centrally managed security policies via the SonicWALL Internet Security Appliance and SonicWALL’s industry-leading Distributed Enforcement Architecture (DEA). Global VPN Client Enterprise provides the same functionality as the Global VPN Client with the added feature of license sharing.

On the remote client desktop, the SonicWALL Global VPN Client Enterprise, Distributed Security Client and DEA Client provide client security and secure IPSec VPN access to the corporate network. The SonicWALL Distributed Security Client enforces firewall protection at the desktop from centrally managed security policies. The DEA Client monitors the desktop against the security policy, making a real-time decision to allow or deny network access through a SonicWALL Gateway.

About this Guide

The SonicWALL Global VPN Client Administrator’s Guide provides complete documentation on installing, configuring, and managing the SonicWALL Global VPN Client 4.0. This guide also provides instructions for SonicWALL Global VPN Client 4.0 Enterprise, which is included as part of the SonicWALL Global Security Client.

The SonicWALL Global VPN Client as part of the SonicWALL Global Security Client operates on Windows 2000 (SP3), Windows XP Home (SP1), and Windows XP Professional (SP1) operating systems for clients. The Global VPN Client as part of the SonicWALL Global Security Client is supported by the following SonicWALL security appliances and firmware versions:

SonicWALL TZ 170 running SonicOS Standard or Enhanced 2.1 or higher

SonicWALL PRO Series (PRO 2040/3060/4060/5060) running SonicOS Standard or Enhanced 2.1 or higher.

SonicWALL Internet Security Appliances running firmware version 6.6 or higher.

Using the Right Administrator’s Guides

The SonicWALL Global VPN Client, SonicWALL Global Security Client, and SonicWALL Pocket Global VPN Client each have their own Administrator Guides.

SonicWALL Global Security Client and Global VPN Client

Because the SonicWALL Global VPN Client is integrated into the SonicWALL Global Security Client, you need to use the SonicWALL Global Security Client Administrator’s Guide and SonicWALL Global VPN Client Administrator’s Guide for complete instructions on installing, configuring, using and managing the Global VPN Client and Global Security Client.

For configuring your SonicWALL security appliance to support the SonicWALL Global Security Clients, use the SonicWALL Global Security Client Administrator’s Guide.

For configuring your SonicWALL security appliance to support Global VPN Clients using SonicWALL’s GroupVPN, see the Administrator’s Guide for the firmware or SonicOS version running on your SonicWALL security appliance.

About this Guide Page 7

Image 8
Contents Global VPN Client Administrators Guide Table of Contents Configuring SonicWALL Security Appliances for Managing VPN Connection PoliciesAppendix a Creating and Deploying the Default.rcf File for Appendix B SonicWALL Global VPN Client Installation UsingInstallShield Silent Response File Command Line Interface Appendix D Installing the Global VPN Client with a Appendix E- Log Viewer MessagesSonicWALL Global VPN Client Features SonicWALL Global VPN ClientNew Features in SonicWALL Global VPN Client Using the Right Administrator’s Guides About this GuideGlobal VPN Client Enterprise/Global Security Client SonicWALL Global Security Client and Global VPN ClientConventions Used in this Guide Icons Used in this GuideCopyright Notice SonicWALL Pocket Global VPN ClientInstalling the SonicWALL Global VPN Client Limited WarrantyUsing the Setup Wizard Installing the SonicWALL Global VPN Client Adding VPN Connection Policies Understanding VPN Connection PoliciesCreating a VPN Connection Policy Using the New Connection WizardUnderstanding Digital Certificates Select Remote Access or Office Gateway and then click Next Importing a VPN Configuration File Configuring a Dial-Up VPN Connection Launching the SonicWALL Global VPN Client Making VPN ConnectionsAccessing Redundant VPN Gateways Enabling a VPN Connection Connecting changes to ProvisioningEstablishing Multiple Connections Selecting a Certificate Username and Password AuthenticationEntering a Pre-Shared Key Connection Warning Disabling a VPN ConnectionChecking the Status of a VPN Connection Creating a VPN Policy Shortcut Open SonicWALL Global VPN Client Opens the program window Specifying Global VPN Client Launch OptionsManaging the Global VPN Client System Tray Icon Managing VPN Connection Policy Properties GeneralUser Authentication Peers Peer Information Dialog BoxManaging VPN Connection Policy Properties Virtual IP Configuration StatusConnection ActivityManaging VPN Connection Policies Arranging Connection PoliciesRenaming a Connection Policy Deleting a Connection PolicyTroubleshooting the SonicWALL Global VPN Client Managing CertificatesType The type of message Information, Error, or Warning Understanding the Global VPN Client LogConfiguring the Log Configuring Auto-LoggingGenerating a Help Report Accessing Technical Support Uninstalling the SonicWALL Global VPN Client Windows 98 SEViewing Help Topics Double-clickAdd/Remove ProgramsSonicWALL Global VPN Client Licenses Group VPN Connections Supported by Each SonicWALL ModelSelect Global VPN Client from the Applicable Services menu Activating Your SonicWALL Global VPN ClientsDownloading Global VPN Client Software and Documentation Global VPN Client License Support by SonicWALL ModelSoftware License Agreement for Sonicwall Globalvpn Client Exports License Miscellaneous SonicWALL Global VPN Client Support How the Global VPN Client uses the default.rcf FileDeploying the default.rcf File Replace the Existing SonicWALL Global VPN Client.rcf File Creating the default.rcf File Default.rcf File Tag DescriptionsSWClientPolicy version =9.0 FlagsPage Sample default.rcf File SWClientPolicySWClientPolicy version=9.0 Connections Flags PeerPeer Connection Peer Connection Connections /SWClientPolicy Troubleshooting the deafult.rcf File Creating the Silent InstallationPlaying Back the Silent Installation Using Setup.log to Check for ErrorsSetup.exe -s Setup.exe -s -f1path\ResponseFileCommand Line Options Command Line ExamplesAppendix E- Log Viewer Messages Log Viewer MessagesDiffie-Hellman group generator length has not been set Failed to build dead peer detection packet Failed to construct quick mode hash payload Failed to find Oakley group specified in the SA payload Failed to set the Ipsec ESP attributes into the phase 2 SA Is not a valid XAuth status Info Peer certificate missing key value Received invalid message ID notify Sending phase 2 delete for SA lifetime for phase 2 is seconds Received an unencrypted packet when crypto active SonicWALL Global VPN Client 4.0 Administrator’s Guide SonicWALL, Inc Rev C, 10/07