Configuring VPNs in SonicOS

For an overview of VPNs in SonicOS, see VPN > Settings.

SonicWall VPN, based on the industry-standard IPsec VPN implementation, provides a easy-to-setup, secure solution for connecting mobile users, telecommuters, remote offices and partners via the Internet. Mobile users, telecommuters, and other remote users with broadband (DSL or cable) or dialup Internet access can securely and easily access your network resources with the SonicWall Global VPN Client and SonicWall GroupVPN on your SonicWall. Remote office networks can securely connect to your network using site-to-site VPN connections that enable network-to- network VPN connections.

NOTE: For more information on the SonicWall Global VPN Client, see the SonicWall Global VPN Client Administrator’s Guide.

SonicWall’s GroupVPN provides automatic VPN policy provisioning for SonicWall Global VPN Clients. The GroupVPN feature on the SonicWall security appliance and the SonicWall Global VPN Client dramatically streamline VPN deployment and management. Using SonicWall’s Client Policy Provisioning technology, you define the VPN policies for Global VPN Client users. This policy information automatically downloads from the SonicWall security appliance (VPN Gateway) to Global VPN Clients, saving remote users the burden of provisioning VPN connections.

You can easily and quickly create a site-to-site VPN policy or a GroupVPN policy using the VPN Policy Wizard. You can also configure GroupVPN or site-to-site VPN tunnels using the Management Interface. You can define up to four GroupVPN policies, one for each zone. You can also create multiple site-to-site VPN. The maximum number of policies you can add depends on your SonicWall model.

NOTE: Remote users must be explicitly granted access to network resources on the Users > Local Users or Users > Local Groups pages. When configuring local users or local groups, the VPN Access tab affects the ability of remote clients using GVC connecting to GroupVPN; it also affects remote users using NetExtender, and SSL VPN Virtual Office bookmarks to access network resources. To allow GVC, NetExtender, or Virtual Office users to access a network resource, the network address objects or groups must be added to the “allow” list on the VPN Access tab.

Topics:

•

VPN Policy Wizard

•

VPN Global Settings

•

VPN Policies

•

Currently Active VPN Tunnels