SonicWALL P/N 232-002603-00 manual

SonicW ALL Mobile Connect Mobile Connect for Android 3.1 User Guide[...]

Notes, Cautions, and W a rnings © 2014 SonicW ALL LLC. T radem arks: SonicW ALL™, Avent ail™, Soni cWALL Mobile Connect™, and all other SonicW ALL product and service names and slogans are trademarks of SonicW ALL LLC., a wholly owned subsidiary of Dell. 2014 – 07 P/N 232-002603-00 Rev . A NOTE : A NOTE indicates impo rtant information tha[...]

Table of Contents | 3 T able of Content s How Mobile Connect Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Android Product Support . . . . . . . . . . . . . . .[...]

How Mobile Connect Works | 4 Using Mobile Connect for Android SonicW ALL Mobile Connect for Android TM is a n app that enables Android devices to est ablish secure, mobile connections to private networ ks protected by Dell SonicW ALL security appliances. How Mobile Connect Works Modern business practices increasingly require that users be able to a[...]

5 | SonicWALL Mobile Connect for Android User Guide Android Product Support SonicW ALL Mobile Connect require s the Android 4.0 or newer platform and a cellular or Wi-Fi connection. SonicW ALL Mobile Connect has been verified to run on the following Android devices running the official Android 4.0 platform: Note Although Mobile Connect is designed [...]

Installing Mobile Connect | 6 • The user must agree to comply with corpor ate policies regarding access of company data and resources from their personal device. • The company discloses any priva cy ramifications to the user , su ch as that data from their personal device may be sent to the corporation. Required Network Information In order to [...]

7 | SonicWALL Mobile Connect for Android User Guide Amazon Appstore Help - Follow troubleshooting procedures and instructions on how to report the issue using y our Google account: http://www .amazon.com/gp/help/cu stomer/display .html?nodeid=201 1 1 1910 Using Mobile Connect The following sections describe how to use Mobile Connect: • Creating a[...]

Using Mobile Connect | 8 If the attempt fails, a warning message will display , asking if you want to save the connection. V erify that the server address or URL is spelled correctly , and then tap Save . 3. If Mobile Connect successfully cont acts the server , you w ill be prompted to enter your Username and Password (unless the server does not re[...]

9 | SonicWALL Mobile Connect for Android User Guide 4. The Domain field is auto-populated with the default domain from the server . T o select a different domain , tap Domain to display a drop-down menu of the available options and tap Save . Creating a Connection to Dell So nicWALL E-Class SRA Appliances In addition to full IPv4 support, VPN conne[...]

Using Mobile Connect | 10 T o connect to an E-Class SRA server: 1. Launch Mobile Connect. Y ou will be presented with the screen to begin your first connection. T ap Add connection . – Name : Enter a descriptive name for the connection. – Server : Enter the URL or IP address of the server . 2. T ap Next . Mobile Connect will then attempt to con[...]

11 | SonicWALL Mobile Connect for Android User Guide Connecting to the Mobile Connect Server After you save a new connection, the list of all configured connections displays. T o establish a Mobile Connect session, perform the following tasks: 1. T ap the connection in the list that you want to initiate. The Connection St atus page displays. T ap t[...]

Using Mobile Connect | 12 2. The first time you initiate a connecti on, a warning message displays. T ap the I trust this application checkbox, and then tap OK . 3. For E-Class SRA connections only: If Mobile Connect successfully contacts the server , you will be prompted to select which Login Gr oup on the appliance you want to connect to. If you [...]

13 | SonicWALL Mobile Connect for Android User Guide 4. For E-Class SRA connections only: If the Login Gr oup you connect to is not listed, select Other ... to manually type in the group name. 5. For E-Class SRA connections only: Enter your username and password if prompted (depending on whether the Dell SonicW ALL app liance you are connecting to [...]

Using Mobile Connect | 14 6. If this is the first time you have connected to an E-Class SRA ser ver with Personal Device Authorization enabled, you are prompted to r egister your device. A similar prompt appears if the terms and conditions have changed. T o continue, tap Accept to agree t o the terms and conditions. 7. If connecting to an E-Class S[...]

15 | SonicWALL Mobile Connect for Android User Guide When the connection is successfully established, the Statu s changes to Connected and the VPN switch r emains in the ON position. Any bookmarks defined for the portal are displayed below th e S tatus line, and allow you to navigate directly to the bookmark’ s destination. Bo okm a rk s will onl[...]

Using Mobile Connect | 16 8. Press the Home button to return to your device’ s home screen. Y ou can now navigate to other apps to access your Intranet network. The status bar will display a VPN icon to indicate that the session is still connected. If the VPN connection is interrupted, the VP N icon will disappear and you will no longer be able t[...]

17 | SonicWALL Mobile Connect for Android User Guide The following options are cont rolled from the Settings tab: • Connect on Launch - Sets Mobile Connect to automatic ally initiate a connection to the last-used profile when it is launched. • Automatic Reconnect - Sets Mobile Connect to automatically attempt to reconnect if the connection is l[...]

Using Mobile Connect | 18 • Device Information - Displays information about the device, Wi-Fi connection, Cellular connection, and DNS servers. • Email Logs - Creates an email to send the Mobile Connect log to Dell SonicWALL Su pport staf f. T ap Send to send the email. E-Class SRA Settings Connections to Dell SonicW ALL E-Class SRA appliances [...]

19 | SonicWALL Mobile Connect for Android User Guide Add Profile Command The addprofile command requires either the name or server p arameter , and accommodates both. All other parameters are optional. When the URL is opened in Mobile Connect, a ll of the parameters included in the URL are saved in the connection entry as sociated with that name an[...]

Using Mobile Connect | 20 Connect Command The connect command is used to ea sily establish VPN connections. Connection information can be embedded in the URLs and they can be provided to users for easy setup and configuration. In addition, a callback URL can be provided that Mobile Connect will open af ter the connection attempt is completed, makin[...]

21 | SonicWALL Mobile Connect for Android User Guide Connect Comma nd Parameters Disconnect Command The disconnect command is used to disconnect an active connection. In addition, a callback URL can be provided that Mobile Connect will open after the c onnection is disconnected, which makes it possible to return to the calling app. If there is no a[...]

Using Mobile Connect | 22 Disconnect Command Parameters Callback URL While invoking Mobile Connect using a URL, a third party application can include a callback URL that is called by Mobile Connect once it completes the requested action. The callback URL value may also contain special tokens that will be evaluated and dy namically replaced by Mobil[...]

23 | SonicWALL Mobile Connect for Android User Guide Following are examples using the callback URL: Callback URL customapp://host? status=$STATUS $&login_group=$ LOGIN_GROUP& error_code=$ERROR _CODE$ Full URL with URL Encoded Callback URL V alue mobileconnect://connect?sessionid=<teamid>&callbackurl=customapp%3A%2F% 2Fhost%3Fstatu[...]

Using Mobile Connect | 24 Note When connected to an SMB SRA server , SRA 7. 0 or higher is required for Bookmarks support. Note When connected to a Dell Secure Mobile Access appliance with Application Access Control enabled, the Bookmarks list is replaced by a list of truste d apps that can access the corporate network. Selecting a bookmark for an [...]

25 | SonicWALL Mobile Connect for Android User Guide VNC bookmark types attempt to launch with t he associated VNC applicat ion as configured in the Settings tab. Additional details such as screen resolution s hould be provided to the client. However , support for passing such parameters varies based on the application. Portal name : Citrix Port al[...]

Using Mobile Connect | 26 Files Bookmarks Mobile Connect 3.0 introduced secure mobile ac cess to files through Files bo okmarks. Files bookmarks are displayed after the VPN is connect ed in the t able of bookmarks. T apping a Files bookmark allows secure access to files by first checking and enforcing the server-configured file policy , and then se[...]

27 | SonicWALL Mobile Connect for Android User Guide T apping a Files bookmark queries and enfo rces the se rver-configured file policy for that file bookmark. If the file is not already cached on the device, it securely downloads the file from the SRA appliance. Once the file is downloaded, it is opened in the Android default file viewer app for t[...]

Using Mobile Connect | 28 Supported File Types Mobile Connect support s all file types nativel y supported by Android, including the following: Unsupported Files If a file type is not supported, the user will be prompted that the file may not be viewable unless there is another app inst alled that can view the fi le. The user can tap ‘T ry Anyway[...]

29 | SonicWALL Mobile Connect for Android User Guide File Policies On Android, server-configured policies control wheth er a file can be opened in a third-p arty app or securely cached on the device. For example, if a file has the Allow Open In policy disabled, the file cannot be viewed on an Android device. Mobile Connect launches third- party app[...]

Using Mobile Connect | 30 The first time you connect and log in, you mu st agree to the displayed terms and conditions. Y our device is then registered with the server , and will be recognized in later connections. If the policy or list of trusted apps changes, you will be asked to re-accept the terms and conditions.[...]

31 | SonicWALL Mobile Connect for Android User Guide Multiple personal devices can be authorized for a single user , and a singl e personal device may be registered by multiple users. The list of trusted apps is displayed on your device after you agree to the above terms. Y ou can block trusted apps from sending data to the cor porate network by cl[...]

Using Mobile Connect | 32 The device is now fully connected to the E-Class SRA server . T o request that additional app s be added to the trusted apps list, contact the E-Class SRA appliance administrator .[...]

33 | SonicWALL Mobile Connect for Android User Guide If your device has an app instal led that is not the same version as the one approved on the server , or if an approved app is not inst alled on your device, the app name is displayed without a check mark. Instead, a red circle “ no” symbol is displayed next to it. When connected to an E-Clas[...]

Configuring Client Certificates | 34 Configuring Client Certificates Note Client certificate support is only available for connections to Dell SonicW ALL E-Class SRA, Dell Secure Mobile Acce ss, and SMB SRA appliances. Configuring Client Certificates with E-Class SRA Appliances If a client certificate is required during authentication, you are auto[...]

35 | SonicWALL Mobile Connect for Android User Guide Note If no client certificates are installed, an Andr oid No certificates found dialog appears with an option to install a PKCS#12 file located in external storage.[...]

Configuring Client Certificates | 36 Configuring Client Certificates with SMB SRA Appliances On Dell SonicW ALL SMB SRA appliances, client certificate authentication is available as a second factor authentication method in addi tion to st andard user name and password authentication. If a client certificate is required during authentication, you ar[...]

37 | SonicWALL Mobile Connect for Android User Guide Select the client certificate from the list of certificates and tap Allow . By default the client certificate is set to Choose during login for a VPN configuration. If you successfully authenticate with a cli ent certificate, the VPN configuration prof ile is automatically updated to set the clie[...]

Monitoring Mobile Connect | 38 Monitoring Mobile Connect The Monitor tab displays additional det ails about the connection, statistics on traf fic transmitted, DNS information, and routes that have been installed. The compression ratio is shown when connected to an appliance running SRA 7.5 or higher with compression enabled. T raffic over the VPN [...]

39 | SonicWALL Mobile Connect for Android User Guide When a Mobile Connect session is active, the A ndroid System Notifica tions area includes an entry indicating that the VPN is connected. T apping on the SonicW ALL Mobile Connect entry in the Android System Notifications area displays a summary of statistics on the VPN sess ion. The statistics p [...]

Mobile Connect Widget | 40 Mobile Connect Widget When the SonicW ALL Mobile Connect app is install ed, a widget for Android is also created in the widgets t ab. It c an then be dragged from the widgets t ab to the home screen. This widget is used as follows: • The widget shows the connection status (c onnected, disconnected, connecting, etc.) •[...]

41 | SonicWALL Mobile Connect for Android User Guide Troubleshooting Mobile Connect This section describes some troubl eshooting you can try if you are unable to connect to the Dell SonicW ALL server . Failed End Point Control Check End Point Control can prevent the connection when the server is an E-Class SRA appliance or an SMB SRA appliance runn[...]

Troubleshooting Mobile Connect | 42 2014-07-10 13:08:24:201 INFO Thread- 142 - SraEpcManager - Failed allow profile:Literal=EQUIPMENTID,1,123456 7890 When the server is either an E-Class SRA appliance or an SMB SR A appliance running SRA 7.5 (or higher), policies can be created to check different attributes of the Android device, including: • Roo[...]

43 | SonicWALL Mobile Connect for Android User Guide Support Information The following sections provide Dell Soni cWALL T echnical Support and End User License Agreement Information. • Contact Information on p age 43 • End User Licensing Agreement on page 43 Contact Information For timely resolution of technical support questi ons, visit Dell S[...]

Support Information | 44 1. LICENSE(S) AND RESTRICTIONS (a) Licenses. Subject to the terms and conditi ons of this Agreement, SonicW ALL grants to Customer , and Customer accepts from SonicW AL L, a nonexclusive, nontr ansferable (except as otherwise set forth herein) and nonsublicensable license (“License”) to: (i) execute and use the Softwar [...]

45 | SonicWALL Mobile Connect for Android User Guide (e) Restrictions. Customer may not (i) modify , tr anslate, localize, adapt, rent, lease, loan, create or prepare derivative works of, or create a p atent based on the Sof tware or any p art thereof, (ii) make copies except as expressly authorized under this Agreement, (iii) copy the Software ont[...]

Support Information | 46 longer activate the Product. Products that come with an expiring Activati on Key will operate for the contracted term of t he License (or purchased Security Service) , so long as the Activation Key is activated within five (5) year s from SonicW ALL ’s date of issuance. 2. OWNERSHIP SonicW ALL and its licensors ar e the s[...]

47 | SonicWALL Mobile Connect for Android User Guide SonicW ALL ’s Suppor t Services T erms. Customer shall have no rights or remedies under this Limited W arranty unless SonicWALL receives Customer’s detailed written warranty claim within the applicable warranty period. (b) Disclaimer . EXCEPT FOR THE EXPRES S WARRANTIES SET FOR TH ABOVE, TO M[...]

Support Information | 48 violation of any export control la ws relating to any exporting of the Products. By accepting this Agreement and receiving the Products, Customer confirms that it and its employees and agents who may access the Products are not liste d on any governmental export exclusion list s and will not export or re-export the Pr oduct[...]

49 | SonicWALL Mobile Connect for Android User Guide Affiliates conduct business, including countries outside of the European Economic Area. SonicW ALL reserves the right to change the Privac y Policy from time to time as described in the Privacy Policy . e) Notices. All notices provided hereunder shall be in writing, delivered personally , or sent[...]