2. The first time you launch NetExtender, you must first add the SSL VPN portal to your list of trusted sites. If you have not done so, the follow message will display.

3. Click Instructions to add SSL VPN server address into trusted sites for help.

4. In Internet Explorer, go to Tools > Internet Options.

5. Click the Security tab.

6. Click the Trusted Sites icon and click the Sites... button to open the Trusted sites window.

7. Enter the URL or domain name of your SonicWALL SuperMassive in the Add this Web site to the zone field and click Add.

8. Click OK in the Trusted Sites and Internet Options windows.

9. Return to the SSL VPN portal and click the NetExtender button. The portal will automatically install the NetExtender stand-alone application on your computer. The NetExtender installer window opens.

10. If an older version of NetExtender is installed on the computer, the NetExtender launcher will remove the old version and then install the new version.

11. If a warning message that NetExtender has not passed Windows Logo testing is displayed, click Continue Anyway. SonicWALL testing has verified that NetExtender is fully compatible with Windows Vista, XP, 2000, and 2003.

12. When NetExtender completes installing, the NetExtender Status window displays, indicating that NetExtender successfully connected.

Launching NetExtender Directly from Your Computer

After the first access and installation of NetExtender, you can launch NetExtender directly from your computer without first navigating to the SSL VPN portal. To launch NetExtender, complete the following procedure:

1. Navigate to Start > All Programs.

2. Select the SonicWALL SSL VPN NetExtender folder, and then click SonicWALL SSL VPN NetExtender. The NetExtender login window is displayed.

3. The IP address of the last server you connected to is displayed in the SSL VPN Server field. To display a list of recent servers you have connected to, click the arrow.

Enter your username and password.

5. The last domain you connected to is displayed in the Domain field.

6. The pull-down menu at the bottom of the window provides three options for remembering your username and password:

– Save user name & password if server allows

– Save user name only if server allows

– Always ask for user name & password

Tip Having NetExtender save your user name and password can be a security risk and should not be enabled if there is a chance that other people could use your computer to access sensitive information on the network.

Configuring NetExtender Preferences

Complete the following procedure to configure NetExtender preferences:

1. Right click the icon in the system tray and click Preferences... The NetExtender Preferences window is displayed.

2. The Connection Profiles tab displays the SSL VPN connection profiles you have used, including the IP address of the server, the domain, and the username.

To delete a profile, highlight it by clicking on it and then click the Remove buttons. Click the Remove All buttons to delete all connection profiles.

4. The Settings tab allows you to customize the behavior of NetExtender.

To have NetExtender automatically connect when you start your computer, check the Automatically connect with Connection Profile checkbox and select the appropriate connection profile from the pull-down menu.

Note Only connection profiles that allow you to save your username and password can be set to automatically connect.

6. To have NetExtender launch when you log in to your computer, check the Automatically start NetExtender UI. NetExtender will start, but will only be displayed in the system tray. To have the NetExtender log-in window display, check the Display NetExtender UI checkbox.

7. Select Minimize to the tray icon when NetExtender window is closed to have the NetExtender icon display in the system tray. If this option is not checked, you will only be able to access the NetExtender UI through Window’s program menu.

8. Select Display Connect/Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon.

9. Select Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection.

10. Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session.

11. Select Disconnect an active connection to have NetExtender log out of all of your SSL VPN sessions when you exit a NetExtender session

12. Click Apply.

Configuring NetExtender Connection Scripts

SonicWALL SSL VPN provides users with the ability to run batch file scripts when NetExtender connects and disconnects. The scripts can be used to map or disconnect network drives and printers, launch applications, or open files or websites. To configure NetExtender Connection Scripts, perform the following tasks.

1. Right click the icon in the task bar and click Preferences... The NetExtender Preferences window is displayed.

2. Click Connection Scripts.

To enable the domain login script, select the Attempt to execute domain login script checkbox. When enabled, NetExtender will attempt to contact the domain controller and execute the login script.

Note Enabling this feature may cause connection delays while remote client’s printers and drives are mapped. Make sure the domain controller and any machines in the logon script are accessible via NetExtender routes.

4. To enable the script that runs when NetExtender connects, select the Automatically execute the batch file “NxConnect.bat” checkbox.

5. To enable the script that runs when NetExtender disconnects, select the Automatically execute the batch file “NxDisconnect.bat” checkbox.

6. To hide either of the console windows, select the appropriate Hide the console window checkbox. If this checkbox is not selected, the DOS console window will remain open while the script runs.

7. Click Apply.

Configuring Batch File Commands

NetExtender Connection Scripts can support any valid batch file commands. For more information on batch files, see the following Wikipedia entry: http://en.wikipedia.org/wiki/.bat. The following tasks provide an introduction to some commonly used batch file commands.

1. To configure the script that runs when NetExtender connects, click the Edit “NxConnect.bat” button. The NxConnect.bat file is displayed.

2. To configure the script that runs when NetExtender disconnects, click the Edit “NxDisconnect.bat” button. The NxConnect.bat file is displayed.

3. By default, the NxConnect.bat file contains examples of commands that can be configured, but no actual commands. Too add commands, scroll to the bottom of the file.

4. To map a network drive, enter a command in the following format:

net use drive-letter\\server\share password /user:Domain\name

For example to if the drive letter is z, the server name is engineering, the share is docs, the password is 1234, the user’s domain is eng and the username is admin, the command would be the following:

net use z\\engineering\docs 1234 /user:eng\admin

5. To disconnect a network drive, enter a command in the following format:

net use drive-letter: /delete

For example, to disconnect network drive z, enter the following command:

net use z: /delete

6. To map a network printer, enter a command in the following format:

net use LPT1 \\ServerName\PrinterName /user:Domain\name

For example, if the server name is engineering, the printer name is color-print1, the domain name is eng, and the username is admin, the command would be the following:

net use LPT1 \\engineering\color-print1 /user:eng\admin

7. To disconnect a network printer, enter a command in the following format:

net use LPT1 /delete

8. To launch an application enter a command in the following format:

C:\Path-to-Application\Application.exe

9. For example, to launch Microsoft Outlook, enter the following command:

C:\Program Files\Microsoft Office\OFFICE11\outlook.exe

10. To open a website in your default browser, enter a command in the following format:

start http://www.website.com

11. To open a file on your computer, enter a command in the following format:

C:\Path-to-file\myFile.doc

12. When you have finished editing the scripts, save the file and close it.

Configuring Proxy Settings

SonicWALL SSL VPN supports NetExtender sessions using proxy configurations. Currently, only HTTPS proxy is supported. When launching NetExtender from the web portal, if your browser is already configured for proxy access, NetExtender automatically inherits the proxy settings.

To manually configure NetExtender proxy settings, perform the following tasks.

1. Right click the icon in the task bar and click Properties... The NetExtender Preferences window is displayed.

2. Click Proxy.

Select the Enable proxy settings checkbox.

4. NetExtender provides three options for configuring proxy settings:

– Automatically detect settings - To use this setting, the proxy server must support Web Proxy Auto Discovery Protocol (WPAD)), which can push the proxy settings script to the client automatically.

– Use automatic configuration script - If you know the location of the proxy settings script, select this option and enter the URL of the scrip in the Address field.

– Use proxy server - Select this option to enter the Address and Port of the proxy server. Optionally, you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server. If required, enter a User name and Password for the proxy server. If the proxy server requires a username and password, but you do not specify them in the Preferences window, a NetExtender pop-up window will prompt you to enter them when you first connect.

5. Click the Internet Explorer proxy settings button to open Internet Explorer’s proxy settings.

Viewing the NetExtender Log

The NetExtender log displays information on NetExtender session events. The log is a file named NetExtender.dbg. It is stored in the directory: C:\Program Files\SonicWALL\SSL VPN\NetExtender. To view the NetExtender log, right click the NetExtender icon in the system tray, and click View Log.

To view details of a log message, double-click a log entry, or go to View > Log Detail to open the Log Detail pane.

To save the log, either click the Export icon or go to Log > Export.

To filter the log to display entries from a specific duration of time, go to the Filter menu and select the cutoff threshold.

To filter the log by type of entry, go to Filter > Level and select one of the level categories. The available options are Fatal, Error, Warning, and Info, in descending order of severity. The log displays all entries that match or exceed the severity level. For example, when selecting the Error level, the log displays all Error and Fatal entries, but not Warning or Info entries.

To view the Debug Log, either click the Debug Log icon or go to Log > Debug Log.

Note It may take several minutes for the Debug Log to load. During this time, the Log window will not be accessible, although you can open a new Log window while the Debug Log is loading.

To clear the log, click Log > Clear Log.

Disconnecting NetExtender

To disconnect NetExtender, perform the following steps:

1. Right click the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect.

2. Wait several seconds. The NetExtender session disconnects.

You can also disconnect by double clicking on the NetExtender icon to open the NetExtender window and then clicking the Disconnect button.

When NetExtender becomes disconnected, the NetExtender window displays and gives you the option to either Reconnect or Close NetExtender.

Upgrading NetExtender

NetExtender can be configured by the administrator to automatically notify users when an updated version of NetExtender is available. Users are prompted to click OK and NetExtender downloads and installs the update from the SonicWALL SuperMassive.

If auto-update notification is not configured, users should periodically launch NetExtender from the Virtual Office to ensure they have the latest version. Check with your administrator to determine if you need to manually check for updates.

Uninstalling NetExtender

The NetExtender utility is automatically installed on your computer. To remove NetExtender, click Start > All Programs, click SonicWALL SSL VPN NetExtender, and then click Uninstall.

You can also configure NetExtender to automatically uninstall when your session is disconnected. To do so, perform the following steps:

1. Right click the NetExtender icon in the system tray and click Preferences... The NetExtender Preferences window is displayed.

2. Click the Settings tab.

3. Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session.

Verifying NetExtender Operation from the System Tray

To view options in the NetExtender system tray, right click the NetExtender icon in the system tray. The following are some tasks you can perform with the system tray.

Displaying Route Information

To display the routes that NetExtender has installed on your system, click the Route Information option in the system tray menu. The system tray menu displays the default route and the associated subnet mask.

Displaying Connection Information

You can display connection information by mousing over the NetExtender icon in the system tray.

Installing NetExtender on MacOS

SonicWALL SSL VPN supports NetExtender on MacOS. To use NetExtender on your MacOS system, your system must meet the following prerequisites:

• MacOS 10.4 and higher

• Java 1.4 and higher

• Both PowerPC and Intel Macs are supported.

To install NetExtender on your MacOS system, perform the following tasks:

1. Navigate to the IP address of the SonicWALL SuperMassive. Click the link at the bottom of the Login page that says “Click here for sslvpn login.”

2. Click the NetExtender button.

3. The Virtual Office displays the status of NetExtender installation. A pop-up window may appear, prompting you to accept a certificate. Click Trust.

 

4. A second pop-up window may appear, prompting you to accept a certificate. Click Trust.

 

5. When NetExtender is successfully installed and connected, the NetExtender status window displays.

 

Using NetExtender on MacOS

1. To launch NetExtender, go the Applications folder in the Finder and double click NetExtender.app.

 

2. The first time you connect, you must enter the server name or IP address in the SSL VPN Server field.

3. Enter your username and password.

4. The first time you connect, you must enter the domain name.

5. Click Connect.

6. You can instruct NetExtender remember your profile server name in the future. In the Save profile pull-down menu you can select Save name and password (if allowed), Save username only (if allowed), or Do not save profile.

7. When NetExtender is connected, the NetExtender icon is displayed in the status bar at the top right of your display. Click the icon to display NetExtender options.

 

8. To display a summary of your NetExtender session, click Connection Status.

9. To view the routes installed by NetExtender, go to the NetExtender menu and select Routes.

 

10. To view the NetExtender Log, go to Window > Log.

 

11. To generate a diagnostic report with detailed information on NetExtender performance, go to Help > Generate diagnostic report.

 

12. Click Save to save the diagnostic report using the default nxdiag.txt file name in your NetExtender directory.

Installing and Using NetExtender on Linux

SonicWALL SSL VPN supports NetExtender on Linux. To use NetExtender on your Linux system, your system must meet the following prerequisites:

• i386-compatible distribution of Linux

• Linux Fedora Core 3+, Ubuntu 7+ or OpenSUSE Linux 10.3+

• Sun Java 1.4 and higher is required for using the NetExtender GUI.

Note Open source Java Virtual Machines (VMs) are not currently supported. If you do not have Sun Java 1.4, you can use the command-line interface version of NetExtender.

To install NetExtender on your Linux system, perform the following tasks:

1. Navigate to the IP address of the SonicWALL SuperMassive. Click the link at the bottom of the Login page that says “Click here for sslvpn login.”

2. Click the NetExtender button. A pop-up window indicates that you have chosen to open the NetExtender.tgz file. Click OK to save it to your default download directory.

To install NetExtender from the CLI, navigate to the directory where you saved NetExtender.tgz and enter the tar -zxf NetExtender.tgz command.

 

4. Type the cd netExtenderClient command.

5. Type ./install to install NetExtender.

6. Launch the NetExtender.tgz file and follow the instructions in the NetExtender installer. The new netExtender directory contains a NetExtender shortcut that can be dragged to your desktop or toolbar.

The first time you connect, you must enter the server name or IP address in the SSL VPN Server field. NetExtender will remember the server name in the future.

Enter your username and password.

9. The first time you connect, you must enter the domain name. NetExtender will remember the domain name in the future.

Note You must be logged in as root to install NetExtender, although many Linux systems will allow the sudo ./install command to be used if you are not logged in as root.

10. To view the NetExtender routes, go to the NetExtender menu and select Routes.

To view the NetExtender Log, go to NetExtender > Log.

To generate a diagnostic report with detailed information on NetExtender performance, go to Help > Generate diagnostic report.

Click Save to save the diagnostic report using the default nxdiag.txt file name in your NetExtender directory.