Using NetExtender

NetExtender is an SSL VPN client for Windows, Mac, or Linux users that is downloaded transparently and that allows you to run any application securely on you company’s network. Using Point-to-Point Protocol (PPP), NetExtender allows remote clients seamless, secure access to resources on your local network. With NetExtender, remote users can virtually join the remote network. Users can mount network drives, upload and download files, and access resources in the same way as if they were on the local network.

Users can access NetExtender in two ways:

Topics:

Configuration Tasks for Windows Users

Topics:
 
Prerequisites for Windows Clients

For supported browser releases, see the latest Dell™ SonicWALL™ SonicOS 6.2.1 Release Notes.

Installing NetExtender Using the Mozilla Firefox Browser
To use NetExtender for the first time using the Mozilla Firefox browser:
1
2
3
Click the NetExtender button.

The first time you launch NetExtender, it installs the NetExtender stand-alone application automatically on your computer.

4

The Allowed Sites - Software Installation dialog displays, with the address of the Virtual Office server in the address field.

5
Click Allow to allow Virtual Office to install NetExtender.

6
Click Close.
7
Return to the Virtual Office dialog.
8
Click NetExtender again. The Software Installation dialog displays.
9
After a five second countdown, the Install Now button becomes active. Click it.

NetExtender is installed as a Firefox extension.

When NetExtender completes installing, the NetExtender Status dialog displays, indicating that NetExtender successfully connected.

Closing the dialog (clicking the X button in the upper right corner of the dialog) does not close the NetExtender session, but minimizes it to the system tray for continued operation.

Additionally, a balloon icon in the system tray appears, indicating NetExtender has successfully installed.

The NetExtender icon displays in the task bar.

10
Review Table 89 to understand the fields in the NetExtender Status dialog.
 

Table 89. NetExtender status dialog

This field

Indicates

Status

What operating state the NetExtender client is in: Connected or Disconnected.

Server

The name of the server to which the NetExtender client is connected.

Client IP

The IP address assigned to the NetExtender client.

Sent

The amount of traffic the NetExtender client has transmitted since initial connection.

Received

The amount of traffic the NetExtender client has received since initial connection.

Duration

The amount of time the NetExtender has been connected, expressed as days, hours, minutes, and seconds.

Adding a Site to Internet Explorer’s Trusted Sites

SonicWALL SSL VPN NetExtender is fully compatible with Microsoft Windows Vista Service Pack 2 (32-bit and 64‑bit) and supports the same functionality as other Windows operating systems.

To add a site to Internet Explorer’s trusted sites list:
1
In Internet Explorer, go to Tools > Internet Options. The Internet Options dialog displays.
2
Click on the Security tab.

3
Click on the Trusted Sites icon.

4
Click on the Sites button. The Trusted sites dialog displays.

5
Enter the URL or domain name of your firewall in the Add this Web site to the zone field.
IMPORTANT: If the Require server verification (https:) for all sites in this zone checkbox is selected, the URL must use the https:// prefix. If the URL does not, this message displays:

6
Click Close.
7
Installing NetExtender from Internet Explorer
To install and launch NetExtender for the first time using the Internet Explorer browser:
1
2
3
Click the NetExtender button.

4

5
Click Instructions to add SSL VPN server address into trusted sites for help.

6
7
8
Click on the NetExtender button. The portal installs the NetExtender stand-alone application automatically on your computer. The NetExtender installer dialog opens.

9
10
If a warning message that NetExtender has not passed Windows Logo testing is displayed, click Continue Anyway. SonicWALL testing has verified that NetExtender is fully compatible with Windows Vista Service Pack 2 and later.

11
When NetExtender completes installing, the NetExtender Status dialog displays, indicating that NetExtender successfully connected.

Launching NetExtender Directly from Your Computer

After the first access and installation of NetExtender, you can launch NetExtender directly from your computer without first navigating to the SSL VPN portal.

To launch NetExtender:
1
Navigate to Start > All Programs.
2
Select SSL VPN NetExtender folder.
3
Click on SonicWALL SSL VPN NetExtender. The NetExtender login dialog displays.
4
The IP address of the last server to which you connected is displayed in the SSL VPN Server field. To display a list of recent servers you have connected to, click on the down arrow button.

5
6
7
Configuring NetExtender Preferences
To configure NetExtender preferences:
1
Right click on the NetExtender icon in the system tray.
2
Click on Preferences… The NetExtender Preferences dialog displays.

The Connection Profiles tab displays the SSL VPN connection profiles you have used, including the IP address of the server, the domain, and the username.

3
To delete a profile, highlight it by clicking on it, and then clicking the Remove button. Click the Remove All buttons to delete all connection profiles.
4

5
a
Check the Automatically connect with Connection Profile checkbox.
b
6
To have NetExtender launch when you log in to your computer, check the Automatically start NetExtender UI. NetExtender starts, but only displays in the system tray.
7
8
To have the NetExtender icon display in the system tray, select Minimize to the tray icon when NetExtender dialog is closed. If this option is not checked, you will only be able to access the NetExtender UI through Window’s program menu.
9
10
To have NetExtender attempt to reconnect when it loses connection, select Automatically reconnect when the connection is terminated.
11
12
13
Click Apply.
Configuring NetExtender Connection Scripts

SonicWALL SSL VPN provides users with the ability to run batch file scripts when NetExtender connects and disconnects. The scripts can be used to map or disconnect network drives and printers, launch applications, or open files or websites.

To configure NetExtender Connection Scripts:
1
Right click on the NetExtender icon in the task bar.
2
Click on Preferences… The NetExtender Preferences dialog displays.
3
Click on Connection Scripts.

4
To enable the domain login script, select the Attempt to execute domain login script checkbox. When enabled, NetExtender attempts to contact the domain controller and execute the login script.
5
To enable the script that runs when NetExtender connects, select the Automatically execute the batch file “NxConnect.bat” checkbox.
6
To enable the script that runs when NetExtender disconnects, select the Automatically execute the batch file “NxDisconnect.bat” checkbox.
7
To hide either of the console windows, select the appropriate Hide the console window checkbox. If this checkbox is not selected, the DOS console window remains open while the script runs.
8
Click Apply.
Configuring Batch File Commands

NetExtender Connection Scripts can support any valid batch file commands. For more information on batch files, see the following Wikipedia entry: http://en.wikipedia.org/wiki/.bat.

To configure the script that runs when NetExtender connects or disconnects, click the Edit “NxConnect.bat” button. The NxConnect.bat file displays. By default, the NxConnect.bat file contains examples of commands that can be configured, but no actual commands. Too add commands, scroll to the bottom of the file. Table 90 lists some commonly used batch file commands.

 

Table 90. Common batch file commands

For this task

Enter a command in this format

Map a network drive

net use drive-letter\\server\share password /user:Domain\name

For example, to if the drive letter is z, the server name is engineering, the share is docs, the password is 1234, the user’s domain is eng and the username is admin, the command would be:

Disconnect a network drive

net use drive-letter: /delete

For example, to disconnect network drive z, enter this command:

Map a network printer

net use LPT1 \\ServerName\PrinterName /user:Domain\name

For example, if the server name is engineering, the printer name is color-print1, the domain name is eng, and the username is admin, the command would be:

Disconnect a network printer

Launch an application

C:\Path-to-Application\Application.exe

For example, to launch Microsoft Outlook, enter the following command:

Open a website in your default browser

start http://www.website.com

Open a file on your computer

C:\Path-to-file\myFile.doc

When you have finished editing the scripts, save the file and close it.

Configuring Proxy Settings

SonicWALL SSL VPN supports NetExtender sessions using proxy configurations. Currently, only HTTPS proxy is supported. When launching NetExtender from the web portal, if your browser is already configured for proxy access, NetExtender automatically inherits the proxy settings.

To manually configure NetExtender proxy settings:
1
Right click on the NetExtender icon in the task bar.
2
Click Preferences… The NetExtender Preferences dialog displays.
3
Click Proxy.

4
Select the Enable proxy settings checkbox.
5
Automatically detect settings - To use this setting, the proxy server must support Web Proxy Auto Discovery Protocol (WPAD)), which can push the proxy settings script to the client automatically.
Use automatic configuration script - If you know the location of the proxy settings script, select this option and enter the URL of the scrip in the Address field.
Use proxy server - Select this option to enter the Address and Port of the proxy server. Optionally, you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server. If required, enter a User name and Password for the proxy server. If the proxy server requires a username and password, but you do not specify them in the Preferences dialog, a NetExtender pop-up dialog prompts you to enter them when you first connect.

6
Click the Internet Explorer proxy settings button to open Internet Explorer’s proxy settings.
Viewing the NetExtender Log

The NetExtender log displays information on NetExtender session events. The log is a file named NetExtender.dbg stored in the directory: C:\Program Files\SonicWALL\SSL VPN\NetExtender.

Topics:
Viewing the NetExtender Log
To view the NetExtender log:
1
Right click on the NetExtender icon in the system tray.
2
Click View Log.

Viewing Log Message Details

To view details of a log message, either:

Go to View > Log Detail to open the Log Detail pane.
Saving the Log

To save the log, either:

Click the Export icon.
Go to Log > Export.
Filtering the Log

To display entries from a specific time
1
Go to the Filter menu.
2
To display entries by type of entry:
1
Go to Filter > Level.
2

The log displays all entries that match or exceed the severity level. For example, when selecting the Error level, the log displays all Error and Fatal entries, but not Warning or Info entries.

Viewing the Debug Log

To view the Debug Log, either:

Click the Debug Log icon.
Go to Log > Debug Log.
Clearing the Log

To clear the log, click on Log > Clear Log.

Disconnecting NetExtender

To disconnect NetExtender, either:

Right click on the NetExtender icon in the system tray to display the NetExtender icon menu and then click Disconnect.

Wait several seconds. The NetExtender session disconnects.

Double click the NetExtender icon to open the NetExtender dialog, and then click the Disconnect button.

When NetExtender becomes disconnected, the NetExtender dialog displays and gives you the option to either Reconnect or Close NetExtender.

Upgrading NetExtender

You can configure NetExtender to notify users automatically when an updated version of NetExtender is available. Users are prompted to click OK, and NetExtender downloads and installs the update from the firewall.

If auto-update notification is not configured, users should periodically launch NetExtender from the Virtual Office to ensure they have the latest version. Check with your administrator to determine if you need to manually check for updates.

Uninstalling NetExtender

The NetExtender utility is installed automatically on your computer. You can uninstall in these ways:

To remove NetExtender:
1
Click Start > All Programs.
2
Click SonicWALL SSL VPN NetExtender.
3
Click Uninstall.
To configure NetExtender to uninstall automatically when your session is disconnected:
1
Right click the NetExtender icon in the system tray.
2
Click Preferences… The NetExtender Preferences dialog displays.
3
Click the Settings tab.
4
Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session.
Verifying NetExtender Operation from the System Tray

To view options in the NetExtender system tray, right click on the NetExtender icon in the system tray.

Topics:
Displaying Route Information

To display the routes that NetExtender has installed on your system, click the Route Information option in the system tray menu. The system tray menu displays the default route and the associated subnet mask.

Displaying Connection Information

You can display connection information by mousing over the NetExtender icon in the system tray.

Configuration Tasks for MacOS Users

Topics:
Prerequisites for MacOS Clients
 
Installing NetExtender on MacOS
To install NetExtender on your MacOS system:
1
2
Click the link at the bottom of the Login page that says Click here for sslvpn login. The Virtual Office dialog displays.
3
Click the NetExtender button. The Virtual Office displays the status of NetExtender installation. A pop-up dialog may appear, prompting you to accept a certificate.

4
Click Trust. A second pop-up dialog may appear, prompting you to accept a certificate.

5
Click Trust. When NetExtender is successfully installed and connected, the SSL-VPN NetExtender Status dialog displays.

Using NetExtender on MacOS
To use NetExtender:
1
To launch NetExtender, go the Applications folder in the Finder.
2
Double click on NetExtender.app.

3
4
5
6
Click Connect.
7
Save username only (if allowed)
8
When NetExtender is connected, the NetExtender icon displays in the status bar at the top right of your display. To display NetExtender options, click the icon.

9

10

11
Click Save to save the diagnostic report using the default nxdiag.txt file name in your NetExtender directory.

Configuration Tasks for Linux Users

Topics:
Prerequisites for Linux Clients

SonicWALL SSL VPN supports NetExtender on 32-bit or 64-bit Linux clients. To use NetExtender on your Linux system, your system must meet the following prerequisites:

Installing NetExtender on Linux

You can install NetExtender from the user interface or from the CLI.

NOTE: You must be logged in as root to install NetExtender, although many Linux systems allow the sudo ./install command to be used if you are not logged in as root.
Topics:
Installing from the User Interface
To install NetExtender from the user interface:
1
2
3
Click the NetExtender button. A pop-up dialog indicates that you have chosen to open the NetExtender.tgz file.
4
Click OK to save it to your default download directory.

Installing NetExtender from the CLI
To install NetExtender from the CLI:
1
2
Enter the tar -zxf NetExtender.tgz command.

3
Type the cd netExtenderClient command.
4
Type ./install to install NetExtender.
5
Launch the NetExtender.tgz file,
6

7
The first time you connect, you must enter the server name or IP address in the SSL VPN Server field. NetExtender remembers the server name in the future.

8
9
The first time you connect, you must enter the domain name. NetExtender remembers the domain name in the future.
Using NetExtender
Topics 
Viewing NetExtender Routes

To view the NetExtender routes, go to the NetExtender menu and select Routes.

Viewing the NetExtender Log

To view the NetExtender Log, go to NetExtender > Log.

Generating a Diagnostic Report
To generate a diagnostic report with detailed information on NetExtender performance:
1
Go to Help > Generate diagnostic report.

2
Click Save to save the diagnostic report using the default nxdiag.txt file name in your NetExtender directory.