End Point Control Overview

This section provides an introduction to the End Point Control feature. This section contains the following topics:

•
What is End Point Control?
•
Benefits of End Point Control
•
How Does End Point Control Work?
•
Configuring End Point Control

What is End Point Control?

In traditional VPN solutions, accessing your network from an untrusted site like an employee-owned computer or a kiosk at an airport or hotel increases the risk to your network resources. EPC provides secure access from any Web-enabled system, including devices in untrusted environments.

Benefits of End Point Control

The SRA appliance supports End Point Control (EPC), which provides the following benefits:

•
Verifies that the user’s environment is secure before establishing a connection.
•
Protects sensitive data and
•
Ensures that your network is not compromised when accessed from devices in untrusted environments.
•
Protects the network from threats originating from client devices participating in the SRA.

How Does End Point Control Work?

The SRA appliance provides end point security controls by performing host integrity checking and security protection mechanisms before a tunnel session is begun. Host integrity checks help ensure that the client system is in compliance with your organization’s security policy. SonicWALL end point security controls are tightly integrated with access control to analyze the Windows client system and apply access controls based on the results.

End Point Control is supported on iOS and Android mobile devices using Mobile Connect, allowing device profiles to be created for these mobile devices. This provides security protection from threats against client devices and protection to the SSL VPN from threats originating from client devices participating in the SSL VPN. For more information on Mobile Connect, refer to the Mobile Connect User Guides.

Configuring End Point Control

Perform the following tasks to configure EPC:

1
Image the appliance with 7.5 firmware, as explained in the Dell SonicWALL SRA Getting Started Guide.
2
Configure Device Profiles that allow or deny user authentication based on various global, group, or user attributes. See End Point Control > Device Profiles .
3
Add and configure groups and users to allow or deny End Point Control profiles. See Edit EPC Settings .
4
Configure users to inherit their group profiles. See Edit EPC Settings .
5
Enable End Point Control. See End Point Control > Status .
6
Connect to NetExtender and monitor the End Point Control log. See End Point Control > Log .