Using SSL VPN Bookmarks

The following sections describe how to use the various types of bookmarks:

•	Using Remote Desktop Bookmarks

•	Using VNC Bookmarks

•	Using Telnet Bookmarks

•	Using SSHv1 Bookmarks

•	Using SSHv2 Bookmarks

Using Remote Desktop Bookmarks

Remote Desktop Protocol (RDP) bookmarks enable you to establish remote connections with a specified desktop. SonicWALL SSL VPN supports the RDP5 standard with both Java and ActiveX clients. RDP5 ActiveX can only be used through Internet Explorer, while RDP5 Java can be run on any platform and browser supported by SSL VPN. The basic functionality of the two clients is the same; however, the Java client is a native RDP client and supports the following features that the ActiveX client does not:

•	Redirect clipboard

•	Redirect plug and play devices

•	Display connection bar

•	Auto reconnection

•	Desktop background

•	Window drag

•	Menu/window animation

•

Themes

•	Bitmap caching

If the Java client application is RDP 6, it also supports:

•	Dual monitors

•	Font smoothing

•	Desktop composition

NOTE: RDP bookmarks can use a port designation if the service is not running on the default port.

TIP: To terminate your remote desktop session, be sure to log off from the Terminal Server session. If you wish to suspend the Terminal Server session (so that it can be resumed later) you may simply close the remote desktop window.

1	Click on the RDP bookmark. Continue through any warning screens that display by clicking Yes or OK.

2	Enter your username and password at the login screen and select the proper domain name from the drop-down menu.

3	A window is displayed indicating that the Remote Desktop Client is loading. The remote desktop then loads in its own windows. You can now access all of the applications and files on the remote computer.

Using VNC Bookmarks

1	Click the VNC bookmark. The following window is displayed while the VNC client is loading.

NOTE: VNC can have a port designation if the service is running on a different port.

2	When the VNC client has loaded, you will be prompted to enter your password in the VNC Authentication window.

3	To configure VNC options, click the Options button. The Options window is displayed.

The following table describes the options that can be configured for VNC.

 

Table 81. VNC options

Option	Default	Description of Options
Encoding	Tight	Hextile is a good choice for fast networks, while Tight is better suited for low-bandwidth connections. From the other side, the Tight decoder in TightVNC Java viewer is more efficient than Hextile decoder so this default setting can also be acceptable for fast networks.
Compression Level	Default	Use specified compression level for Tight and Zlib encodings. Level 1 uses minimum of CPU time on the server but achieves weak compression ratios. Level 9 offers best compression but may be slow in terms of CPU time consumption on the server side. Use high levels with very slow network connections, and low levels when working over higher-speed networks. The Default value means that the server's default compression level should be used.
JPEG image quality	6	This cannot be modified.
Cursor shape updates	Enable	Cursor shape updates is a protocol extension used to handle remote cursor movements locally on the client side, saving bandwidth and eliminating delays in mouse pointer movement. Note that current implementation of cursor shape updates does not allow a client to track mouse cursor position at the server side. This means that clients would not see mouse cursor movements if the mouse was moved either locally on the server, or by another remote VNC client. Set this parameter to Disable if you always want to see real cursor position on the remote side. Setting this option to Ignore is similar to Enable but the remote cursor will not be visible at all. This can be a reasonable setting if you don't care about cursor shape and don't want to see two mouse cursors, one above another.
Use CopyRect	Yes	CopyRect saves bandwidth and drawing time when parts of the remote screen are moving around. Most likely, you don't want to change this setting.
Restricted colors	No	If set to No, then 24-bit color format is used to represent pixel data. If set to Yes, then only 8 bits are used to represent each pixel. 8-bit color format can save bandwidth, but colors may look very inaccurate.
Mouse buttons 2 and 3	Normal	If set to Reversed, the right mouse button (button 2) will act as if it was the middle mouse button (button 3), and vice versa.
View only	No	If set to Yes, then all keyboard and mouse events in the desktop window will be silently ignored and will not be passed to the remote side.
Share desktop	Yes	If set to Yes, then the desktop can be shared between clients. If this option is set to No then an existing user session will end when a new user accesses the desktop.

Using Telnet Bookmarks

1	Click on the Telnet bookmark.

NOTE: Telnet bookmarks can use a port designation for servers not running on the default port.

2	Click OK to any warning messages that are displayed. A Java-based Telnet window launches.

3	If the device you are Telnetting to is configured for authentication, enter your username and password.

Using SSHv1 Bookmarks

NOTE: SSH bookmarks can use a port designation for servers not running on the default port.

1	Click on the SSHv1 bookmark. A Java-based SSH window is launched.

2	Enter your username and password.

3	A SSH session is launched in the Java applet.

TIP: Some versions of the JRE may cause the SSH authentication window to pop up behind the SSH window.

Using SSHv2 Bookmarks

NOTE: SSH bookmarks can use a port designation for servers not running on the default port.

1	Click on the SSHv2 bookmark. A Java-based SSH window displays. Type your user name in the Username field and click Login.

2	A hostkey popup displays. Click Yes to accept and proceed with the login process.

3	Enter your password and click OK.

4	The SSH terminal launches in a new screen.

Configuring Device Profile Settings for IPv6

For complete information on the SonicOS implementation of IPv6, see IPv6 .

SonicOS supports NetExtender connections for users with IPv6 addresses. On the SSL VPN > Client Settings page, first configure the traditional IPv6 IP address pool, and then configure an IPv6 IP Pool. Clients will be assigned two internal addresses: one IPv4 and one IPv6.

NOTE: IPv6 DNS/Wins Server are not supported

On the SSL VPN > Client Routes page, user can select a client routes from the drop-down list of all address objects including all the pre-defined IPv6 address objects.

NOTE: IPv6 FQDN is supported.