SonicWall® Mobile Connect 5.0 for Chrome OS User Guide Contents 1
Part 1. Introduction
About Mobile Connect ...... 4 How Mobile Connect Works ...... 4 What’s New in Mobile Connect 5.0 ...... 4 Supported Platforms ...... 5 Chrome OS Product Support ...... 5 SonicWall Appliance Support ...... 5 Required Network Information ...... 5
Part 2. Installing and Using
Installing Mobile Connect ...... 8
Using Mobile Connect ...... 9 Creating a Connection ...... 9 Creating Firewall or SMA 100 Series/SRA Connections ...... 9 Creating SMA 1000 Series / E‐Class SRA Connections ...... 12 Connecting to the Mobile Connect Server ...... 14 Configuring Mobile Connect Settings ...... 16 URL Control Syntax and Parameters ...... 17
Part 3. Monitoring and Troubleshooting
Monitoring Mobile Connect ...... 22
Troubleshooting Mobile Connect ...... 23
SonicWall Support ...... 24 About This Document ...... 25
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 2 Contents Part 1
Introduction
• About Mobile Connect • How Mobile Connect Works • What’s New in Mobile Connect 5.0 • Supported Platforms
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 3 Introduction 1
About Mobile Connect
SonicWall® Mobile Connect 5.0 for Chrome OS is an app for Chrome OS devices running Chrome 45 or newer that enables secure, mobile connections to private networks protected by SonicWall security appliances.
Topics: • How Mobile Connect Works on page 4 • What’s New in Mobile Connect 5.0 on page 4 • Supported Platforms on page 5
How Mobile Connect Works
Modern business practices increasingly require that users be able to access any network resource (files, internal websites, and so on), anytime, anywhere. At the same time, ensuring the security of these resources is a constant struggle. While most users are aware that they must protect PCs from network security risks, this security awareness does not always extend to Chrome OS devices like the Google Pixelbook. And yet, Chromebooks are increasingly being used in enterprises and academic institutions. Furthermore, remote Chromebook users can often use insecure, untrusted, public Wi‐Fi hot spots to connect to the Internet. It is therefore a challenge to provide secure, mobile access while still guarding against the inherent security risks faced by mobile users. The SonicWall Mobile Connect 5.0 for Chrome OS app provides secure, mobile access to sensitive network resources. Mobile Connect establishes a Secure Socket Layer Virtual Private Network (SSL VPN) connection to private networks that are protected by SonicWall security appliances. All traffic to and from the private network is securely transmitted over the SSL VPN tunnel. After installing SonicWall Mobile Connect from the Chrome Web Store, to get started with Mobile Connect: 1Ensure that the SonicWall SMA or firewall appliance being used by Mobile Connect is connected to the network. 2Configure Network Information (server name, username, password, and so on). 3Mobile Connect establishes a SSL VPN tunnel to the SonicWall security appliance. 4You can now access resources on the private network. All traffic to and from the private network is securely transmitted over the SSL VPN tunnel.
What’s New in Mobile Connect 5.0
This section describes the enhancements included in the Mobile Connect 5.0 release. •SAML IdP authentication for SMA 1000 – Mobile Connect supports connecting to SMA 1000 Series servers configured with SAML 2.0 IdP. Additional fixes and improvements are also included in this release.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 4 About Mobile Connect Supported Platforms
The following sections describe supported platforms and network requirements for SonicWall Mobile Connect: • Chrome OS Product Support on page 5 • SonicWall Appliance Support on page 5 • Required Network Information on page 5
Chrome OS Product Support
SonicWall Mobile Connect is supported on all Chromebook models running Chrome OS 45, available as a free upgrade. See the following web site for information on how to upgrade your Chromebook to the latest version: https://support.google.com/chromebook/answer/177889?hl=en
SonicWall Appliance Support
SonicWall Mobile Connect is a free app, but requires a concurrent user license on one of the following SonicWall solutions in order to function properly: • SonicWall firewall appliances including the TZ, NSA, E‐Class NSA, and SuperMassive™ 9000 Series running SonicOS 5.8.1.0 or higher • SonicWall Secure Mobile Access 100 Series / SRA appliances running 8.0 or higher • SonicWall Secure Mobile Access 1000 Series / E‐Class SRA appliances running 11.4 or higher
Required Network Information
To use Mobile Connect, you need the following information from your network administrator or IT Support: •Server name or address ‐ This is either the IP address or URL of the SSL VPN server to which you are connecting. • Username and password ‐ Typically, you are required to enter your username and password, although some connections might not require this. •Domain name ‐ The domain name of the SSL VPN server. Mobile Connect might be able to automatically determine this when it first contacts the server, or there could be multiple domains that can be selected.
DNS Domain Settings on Appliances Before Mobile Connect users are able to access the private network, the network administrator must configure the DNS Domain on the SonicWall appliance. When the Mobile Connect user accesses a URL on the private network, the configured DNS domain is used to resolve the hostname lookup. For public domains that do not match the configured DNS domain, the DNS server for the Wi‐Fi or cellular network is used.
NOTE: The Mobile Connect user does not need to perform any configuration tasks related to DNS. The following information is for SonicWall network administrators.
The DNS Domain configuration process varies, depending on the type of SonicWall appliance being used: •SonicWall firewall appliances ‐ On the SSL VPN > Client Settings page, enter the DNS domain name in the DNS Domain field.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 5 About Mobile Connect •SonicWall SMA 100 Series / SRA appliances ‐ The DNS domain can be configured either globally, at the group level, or at the individual user level: • Global level: On the Network > DNS page, enter the DNS domain name in the DNS Domain field. • Group level: On the Users > Local Groups page, click the edit icon for the group. Click on the NX Settings tab and enter the DNS domain the DNS Domain field. • User level: On the Users > Local Users page, click the edit icon for the user. Click on the NX Settings tab and enter the DNS domain the DNS Domain field. •SonicWall SMA 1000 Series / E‐Class SRA appliances ‐ The DNS domain can be configured either globally or for specific IP address pools: • Global level: From the main navigation menu in the Appliance Management Console (AMC), click Network Settings. In the Name resolution area, click Edit. The Configure Name Resolution page appears. Enter the DNS domain name in the Search domains field. • IP address pool level: From the main navigation menu in the AMC, click Services. Under Access services, in the Network tunnel service area, click Configure. The Configure Network Tunnel Service page appears. Click the name of the IP address pool you want to edit. The Configure IP Address Pool page appears. To the right of the Advanced heading, click the arrow icon. Select Customize default settings and enter the DNS domain name in the Search domains field.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 6 About Mobile Connect Part 2
Installing and Using
• Installing Mobile Connect • Using Mobile Connect
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 7 Installing and Using 2
Installing Mobile Connect
SonicWall Mobile Connect is installed through the Chrome Web Store. 1On your Chromebook, click the Web Store icon.
2In the Search field, type in SonicWall Mobile Connect, and press Enter. 3In the search results, select SonicWall Mobile Connect. 4 Select Free and then Add. The app installs on your Chromebook. When installation is complete, the Mobile Connect icon appears in your list of apps.
NOTE: If you encounter an error when attempting to download SonicWall Mobile Connect, see the Chrome Web Store Help web site, where you can find information and troubleshooting procedures for using apps and report the issue to Google if necessary: https://support.google.com/chrome_webstore
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 8 Installing Mobile Connect 3
Using Mobile Connect
The following sections describe how to use SonicWall Mobile Connect: • Creating a Connection on page 9 • Connecting to the Mobile Connect Server on page 14 • Configuring Mobile Connect Settings on page 16
Creating a Connection
The process of creating a Mobile Connect connection is slightly different depending on which type of SonicWall appliance you are connecting to. • Creating Firewall or SMA 100 Series/SRA Connections on page 9 • Creating SMA 1000 Series / E‐Class SRA Connections on page 12
Creating Firewall or SMA 100 Series/SRA Connections
1The first time you launch Mobile Connect, you must add a VPN connection before you can connect. Select Add connection from the Connection popup menu.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 9 Using Mobile Connect 2You are then presented with the screen to begin your first connection to the SonicWall appliance: •Name—Enter a descriptive name for the connection. •Server—Enter the URL or IP address of the server.
3 Click Next. Mobile Connect then attempts to contact the SonicWall appliance. If the attempt fails, a warning message is displayed asking if you want to save the connection. Verify that the server address or URL is spelled correctly, and then click Save.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 10 Using Mobile Connect 4If Mobile Connect successfully contacts the server, you are prompted to optionally enter your Username and Password. Enter your user name and password, and then scroll down to the Domain field.
5The Domain field is auto‐populated with the default domain from the server. To select a different domain, click Domain to display a drop‐down menu of the available options, then select the correct domain.
6 Click Save to create the new connection.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 11 Using Mobile Connect Creating SMA 1000 Series / E‐Class SRA Connections
1The first time you launch Mobile Connect, you must add a VPN connection before you can connect. Select Add connection from the Connection pop‐up menu.
2You are then presented with the screen to begin your first connection to the SonicWall SMA appliance: •Name—Enter a descriptive name for the connection. •Server—Enter the URL or IP address of the server.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 12 Using Mobile Connect 3 Click Next. Mobile Connect then attempts to contact the SonicWall SMA appliance. If the attempt fails, a warning message is displayed asking if you want to save the connection. Verify that the server address or URL is spelled correctly, and then click Save.
4If Mobile Connect successfully contacts the server, the connection is automatically saved.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 13 Using Mobile Connect Connecting to the Mobile Connect Server
After you save the first new connection, it is automatically selected under the Connection tab.
To establish a Mobile Connect session: 1Navigate to the Chrome status area, click the VPN disconnected row and then select the VPN connection listed under the SonicWall Mobile Connect section to connect.
NOTE: Attempting to enable the VPN within the Mobile Connect app will display an alert with instructions to enable the VPN using the Chrome status area or Settings screen. This requirement is a limitation of Chrome OS and Google is tracking it as Issue 477520.
2Enter your user name and password if prompted (depending on whether the appliance you are connecting to allows for saving user names and passwords), and click Login.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 14 Using Mobile Connect 3When the connection is successfully established, the Status row changes to Connected.
4After connecting, you can access your Intranet network using the Chrome browser and other apps. The Wi‐Fi icon in the status area on the lower right changes to indicate that the VPN is connected.
If the VPN connection is interrupted, the Wi‐Fi icon in the status area changes to indicate that the VPN is no longer connected and you are no longer able to access the Intranet network. This can happen if your device's connection transitions from one Wi‐Fi network to another Wi‐Fi network or to another network type. If the VPN disconnects, reestablish the connection from the status area. Optionally, you can configure Automatic Reconnect on the Settings tab to have Mobile Connect automatically attempt to reestablish interrupted connections.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 15 Using Mobile Connect Configuring Mobile Connect Settings
SonicWall Mobile Connect provides settings for reconnecting, URL control, logging, and troubleshooting. The Settings tab also provides Support information that includes a User Guide and Email logs feature.
The following options are controlled from the Settings tab: •Automatic Reconnect ‐ Sets Mobile Connect to automatically attempt to reconnect if the connection is lost. The SSL VPN connection can be disrupted when your device's connection transitions to a different network type (for example, from wireless to cellular). This setting lets applications rely on a sustained VPN connection. There is no limit on the amount of time it takes to reconnect. •URL Control ‐ Allows other applications and web pages to pass action requests using special URLs to Mobile Connect. These action requests can create VPN connection entries and connect or disconnect VPN connections. For example, another application can launch Mobile Connect, access internal resources as needed, and then disconnect by using the supported URL handlers: •Add Profile: http[s]://www.sonicwall.com/mobileconnect/chrome/addProfile[/]?name=ConnectionName&se rver=ServerAddress[&Parameter1=Value&Parameter2=Value...] • Connect: http[s]://www.sonicwall.com/mobileconnect/chrome/connect[/]?name=ConnectionName&serv er=ServerAddress[&Parameter1=Value&Parameter2=Value...] •Disconnect: http[s]://www.sonicwall.com/mobileconnect/chrome/disconnect[/] NOTE: Additional information about URL Control is provided in URL Control Syntax and Parameters on page 17.
• Debug Logging ‐ Enables full debug log messages of the Mobile Connect app. Leave this section disabled unless instructed to enable it by SonicWall Support staff. •Clear Logs ‐ Deletes all log messages that have been saved on the device. •View Logs ‐ Launches a new window to view logs in real‐time as they occur.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 16 Using Mobile Connect •User Guide ‐ Displays the SonicWall Mobile Connect User Guide in the default web browser application (for example, Chrome). •Email Logs ‐ Creates an email to send the Mobile Connect log files to SonicWall Support staff. The email is opened in the default mail application (for example, Gmail).
URL Control Syntax and Parameters
This section provides the full set of URL parameters for the URL Control feature. URL Control currently supports the addprofile, connect, and disconnect commands. Callback URLs are also supported. See the following topics: • Add Profile Command on page 17 • Add Profile Command Parameters on page 18 • Disconnect Command on page 18 • Disconnect Command Parameters on page 19 • Callback URL on page 19
Add Profile Command The addprofile command requires either the name or server parameter, and accommodates both. All other parameters are optional. When the URL is opened in Mobile Connect, all of the parameters included in the URL are saved in the connection entry associated with that name and server.
Syntax http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile[/]?name=ConnectionName&server=ServerA ddress[&Parameter1=Value&Parameter2=Value...] Following are examples of the addprofile command: http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile/?name=Example&server=vpn.example.com http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile/?name=Example&server=vpn.example.com http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile?name=Example%202&server=vpn.example.c om http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile?name=vpn.example.com http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile?server=vpn2.example.com http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile?name=SRA%20Connection&server=sslvpn.ex ample.com&username=test&password=password&domain=LocalDomain&connect=1 http[s]://www.sonicwall.com/mobileconnect/chrome/addprofile?name=EX%20Connection&server=workplace. example.com&username=test&password=password&realm=Corp&connect=1
NOTE: All appropriate characters in values of parameters used in URLs are required to be URL encoded. For instance, to match a space, enter %20.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 17 Using Mobile Connect Add Profile Command Parameters
Command Parameter Description name The unique name of the VPN connection entry that will be created and appear in the Mobile Connect Connections list. Mobile Connect accepts the name only if it is unique. Letters are case‐sensitive. server The domain name or IP address of the SonicWall appliance in which you wish to connect. For example, vpn.example.com. username Optional: The username used in the VPN connection. password Optional: The password used in the VPN connection. realm Optional: The realm used in the VPN connection profile. Applies to SMA 1000 Series / E‐Class SRA connections only. domain Optional: The domain used in the VPN connection profile. Applies to SMA 100 Series / SRA and Firewall connections only. sessionid Optional: The session ID or Team ID used for authentication. connect Optional: If presented and the value is non‐null, the connection will be initiated if the profile was successfully added. callbackurl Optional: The callback URL is opened by Mobile Connect after the connect command has been processed. See Callback URL on page 19 for full details of the callback URL syntax and options.
Disconnect Command The disconnect command is used to disconnect an active connection. In addition, a callback URL can be provided that Mobile Connect will open after the connection is disconnected, which makes it possible to return to the calling app. If there is no active VPN connection, the command is ignored.
Syntax http[s]://www.sonicwall.com/mobileconnect/chrome/disconnect[/] http[s]://www.sonicwall.com/mobileconnect/chrome/disconnect[/]?[callbackurl=
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 18 Using Mobile Connect Disconnect Command Parameters Command Parameter Description callbackurl Optional: The callback URL is opened by Mobile Connect after the connect command has been processed. See Callback URL on page 19 for full details of the callback URL syntax and options.
Callback URL While invoking Mobile Connect using a URL, a third‐party application can include a callback URL that is called by Mobile Connect once it completes the requested action. The callback URL value may also contain special tokens that will be evaluated and dynamically replaced by Mobile Connect to provide additional status and connection information back to the app that is opened by the callback URL. Tokens are evaluated in place, in the same order in which the tokens were specified. To ensure that it functions properly, the base callback URL format should be RFC 1808 compliant and should be able to be launched independently of Mobile Connect. For example, it should launch through a Webpage. URL:
Dynamic Tokens Supported by the Callback URL
Dynamic Token Description $ERROR MESSAGES$ The string value of the error message from the failed connection attempt. $LOGIN GROUP$ The string value of the authentication login group or realm. Applies to SMA 1000 Series / E‐Class SRA connections only. $COMMUNITY$ The string value of authentication community. Applies to SMA 1000 Series / E‐Class SRA connections only. $ZONES$ The string value of EPC zone. Applies to SMA 1000 Series / E‐Class SRA connections only. $TUNNEL IP$ The string value of the Mobile Connect IPv4 client address. $TUNNEL MODE$ One of split, split‐nonlocal, redirectall, or redirectall‐nonlocal depending on the tunnel mode. Applies to SMA 100 Series / SRA and Firewall connections only. $ESP ENABLED Yes or No, depending on if ESP is enabled. Applies to SMA 100 Series / SRA and Firewall connections only.
NOTE: Any number of tokens from the table above can be specified.
The following are examples of using the callback URL: Callback URL http[s]://[customURLHandler]?status=$STATUS$&login_group=$LOGIN_GROUP&error_code=$ERROR_CODE$
Full URL with URL Encoded Callback URL Value
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 19 Using Mobile Connect http[s]://www.sonicwall.com/mobileconnect/chrome/connect?sessionid=
Callback URL myapp://callback?status=$STATUS$&login_group=$LOGIN_GROUP& error_code=$ERROR_CODE$
Full URL with URL Encoded Callback URL Value http[s]://www.sonicwall.com/mobileconnect/chrome/connect?sessionid=
Callback URL http://server/example%20file.html
Full URL with URL Encoded Callback URL Value http[s]://www.sonicwall.com/mobileconnect/chrome/connect?callbackurl=http%3A%2F%2Fserver%2Fexample %2520file.html
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 20 Using Mobile Connect Part 3
Monitoring and Troubleshooting
• Monitoring Mobile Connect • Troubleshooting Mobile Connect • SonicWall Support
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 21 Monitoring and Troubleshooting 4
Monitoring Mobile Connect
You can monitor Mobile Connect status, operations, and general information on the Monitor and About tabs. The Monitor tab displays additional details about the connection, statistics on traffic transmitted, DNS information, and routes that have been installed.
The About tab of Mobile Connect displays the version number and legal text.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 22 Monitoring Mobile Connect 5
Troubleshooting Mobile Connect
If you are unable to connect to the SonicWall server, complete the following steps to troubleshoot the connection. 1Double‐check that you have entered the server name properly in the connection configuration. 2Go to the Chrome browser on your Chromebook and attempt to navigate to the SMA appliance web portal. 3If you are unable to load the web portal, the problem is with the SonicWall appliance. Contact your network administrator if the problem persists. 4If the web portal loads successfully on the Chrome browser and you still cannot establish a Mobile Connect connection, notify SonicWall Support, as follows: aUnder Settings, enable the Debug Logging option. b Attempt a connection to the server again to ensure that full debugging messages are logged for the attempt. cThen, under the Help menu, click Email Logs. An email will open in your mail client. Be sure to manually attach the Mobile Connect log files to the email if they are not attached automatically. Address the email to [email protected]. Add any additional comments to the email and click Send. SonicWall Support staff will contact you after reviewing your case.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 23 Troubleshooting Mobile Connect 6
SonicWall Support
Technical support is available to customers who have purchased SonicWall products with a valid maintenance contract and to customers who have trial versions. The Support Portal provides self‐help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/support. The Support Portal enables you to: • View knowledge base articles and technical documentation • View video tutorials • Access MySonicWall • Learn about SonicWall professional services • Review SonicWall Support services and warranty information • Register for training and certification • Request technical support or customer service To contact SonicWall Support, visit https://www.sonicwall.com/support/contact‐support.
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 24 SonicWall Support About This Document
Legend
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.
Mobile Connect User Guide Updated ‐ November 2017 Software Version ‐ 5.0 232‐004064‐00 Rev A
Copyright © 2017 SonicWall Inc. All rights reserved.
SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S.A. and/or other countries. All other trademarks and registered trademarks are property of their respective owners The information in this document is provided in connection with SonicWall Inc. and/or its affiliates’ products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICUL AR PURPOSE, OR NON‐ INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. SonicWall Inc. and/or its affiliates do not make any commitment to update the information contained in this document. For more information, visit https://www.sonicwall.com/legal.
End User Product Agreement To view the SonicWall End User Product Agreement, go to: https://www.sonicwall.com/en‐us/legal/license‐agreements. Select the language based on your geographic location to see the EUPA that applies to your region.
Open Source Code SonicWall is able to provide a machine‐readable copy of open source code with restrictive licenses such as GPL, LGPL, AGPL when applicable per license requirements. To obtain a complete machine‐readable copy, send your written requests, along with certified check or money order in the amount of US 25.00 payable to “SonicWall Inc.”, to: General Public License Source Code Request SonicWall Inc. Attn: Jennifer Anderson 5455 Great America Parkway Santa Clara, CA 95054
SonicWall Mobile Connect 5.0 for Chrome OS User Guide 25 SonicWall Support