SonicWall® Mobile Connect 5.0 for Chrome OS User Guide Contents 1 Part 1. Introduction About Mobile Connect . .4 How Mobile Connect Works . 4 What’s New in Mobile Connect 5.0 . 4 Supported Platforms . 5 Chrome OS Product Support . 5 SonicWall Appliance Support . 5 Required Network Information . 5 Part 2. Installing and Using Installing Mobile Connect . .8 Using Mobile Connect . .9 Creating a Connection . 9 Creating Firewall or SMA 100 Series/SRA Connections . 9 Creating SMA 1000 Series / E‐Class SRA Connections . 12 Connecting to the Mobile Connect Server . 14 Configuring Mobile Connect Settings . 16 URL Control Syntax and Parameters . 17 Part 3. Monitoring and Troubleshooting Monitoring Mobile Connect . .22 Troubleshooting Mobile Connect . .23 SonicWall Support . .24 About This Document . 25 SonicWall Mobile Connect 5.0 for Chrome OS User Guide 2 Contents Part 1 Introduction • About Mobile Connect • How Mobile Connect Works • What’s New in Mobile Connect 5.0 • Supported Platforms SonicWall Mobile Connect 5.0 for Chrome OS User Guide 3 Introduction 1 About Mobile Connect SonicWall® Mobile Connect 5.0 for Chrome OS is an app for Chrome OS devices running Chrome 45 or newer that enables secure, mobile connections to private networks protected by SonicWall security appliances. Topics: • How Mobile Connect Works on page 4 • What’s New in Mobile Connect 5.0 on page 4 • Supported Platforms on page 5 How Mobile Connect Works Modern business practices increasingly require that users be able to access any network resource (files, internal websites, and so on), anytime, anywhere. At the same time, ensuring the security of these resources is a constant struggle. While most users are aware that they must protect PCs from network security risks, this security awareness does not always extend to Chrome OS devices like the Google Pixelbook. And yet, Chromebooks are increasingly being used in enterprises and academic institutions. Furthermore, remote Chromebook users can often use insecure, untrusted, public Wi‐Fi hot spots to connect to the Internet. It is therefore a challenge to provide secure, mobile access while still guarding against the inherent security risks faced by mobile users. The SonicWall Mobile Connect 5.0 for Chrome OS app provides secure, mobile access to sensitive network resources. Mobile Connect establishes a Secure Socket Layer Virtual Private Network (SSL VPN) connection to private networks that are protected by SonicWall security appliances. All traffic to and from the private network is securely transmitted over the SSL VPN tunnel. After installing SonicWall Mobile Connect from the Chrome Web Store, to get started with Mobile Connect: 1Ensure that the SonicWall SMA or firewall appliance being used by Mobile Connect is connected to the network. 2Configure Network Information (server name, username, password, and so on). 3Mobile Connect establishes a SSL VPN tunnel to the SonicWall security appliance. 4You can now access resources on the private network. All traffic to and from the private network is securely transmitted over the SSL VPN tunnel. What’s New in Mobile Connect 5.0 This section describes the enhancements included in the Mobile Connect 5.0 release. •SAML IdP authentication for SMA 1000 – Mobile Connect supports connecting to SMA 1000 Series servers configured with SAML 2.0 IdP. Additional fixes and improvements are also included in this release. SonicWall Mobile Connect 5.0 for Chrome OS User Guide 4 About Mobile Connect Supported Platforms The following sections describe supported platforms and network requirements for SonicWall Mobile Connect: • Chrome OS Product Support on page 5 • SonicWall Appliance Support on page 5 • Required Network Information on page 5 Chrome OS Product Support SonicWall Mobile Connect is supported on all Chromebook models running Chrome OS 45, available as a free upgrade. See the following web site for information on how to upgrade your Chromebook to the latest version: https://support.google.com/chromebook/answer/177889?hl=en SonicWall Appliance Support SonicWall Mobile Connect is a free app, but requires a concurrent user license on one of the following SonicWall solutions in order to function properly: • SonicWall firewall appliances including the TZ, NSA, E‐Class NSA, and SuperMassive™ 9000 Series running SonicOS 5.8.1.0 or higher • SonicWall Secure Mobile Access 100 Series / SRA appliances running 8.0 or higher • SonicWall Secure Mobile Access 1000 Series / E‐Class SRA appliances running 11.4 or higher Required Network Information To use Mobile Connect, you need the following information from your network administrator or IT Support: •Server name or address ‐ This is either the IP address or URL of the SSL VPN server to which you are connecting. • Username and password ‐ Typically, you are required to enter your username and password, although some connections might not require this. •Domain name ‐ The domain name of the SSL VPN server. Mobile Connect might be able to automatically determine this when it first contacts the server, or there could be multiple domains that can be selected. DNS Domain Settings on Appliances Before Mobile Connect users are able to access the private network, the network administrator must configure the DNS Domain on the SonicWall appliance. When the Mobile Connect user accesses a URL on the private network, the configured DNS domain is used to resolve the hostname lookup. For public domains that do not match the configured DNS domain, the DNS server for the Wi‐Fi or cellular network is used. NOTE: The Mobile Connect user does not need to perform any configuration tasks related to DNS. The following information is for SonicWall network administrators. The DNS Domain configuration process varies, depending on the type of SonicWall appliance being used: •SonicWall firewall appliances ‐ On the SSL VPN > Client Settings page, enter the DNS domain name in the DNS Domain field. SonicWall Mobile Connect 5.0 for Chrome OS User Guide 5 About Mobile Connect •SonicWall SMA 100 Series / SRA appliances ‐ The DNS domain can be configured either globally, at the group level, or at the individual user level: • Global level: On the Network > DNS page, enter the DNS domain name in the DNS Domain field. • Group level: On the Users > Local Groups page, click the edit icon for the group. Click on the NX Settings tab and enter the DNS domain the DNS Domain field. • User level: On the Users > Local Users page, click the edit icon for the user. Click on the NX Settings tab and enter the DNS domain the DNS Domain field. •SonicWall SMA 1000 Series / E‐Class SRA appliances ‐ The DNS domain can be configured either globally or for specific IP address pools: • Global level: From the main navigation menu in the Appliance Management Console (AMC), click Network Settings. In the Name resolution area, click Edit. The Configure Name Resolution page appears. Enter the DNS domain name in the Search domains field. • IP address pool level: From the main navigation menu in the AMC, click Services. Under Access services, in the Network tunnel service area, click Configure. The Configure Network Tunnel Service page appears. Click the name of the IP address pool you want to edit. The Configure IP Address Pool page appears. To the right of the Advanced heading, click the arrow icon. Select Customize default settings and enter the DNS domain name in the Search domains field. SonicWall Mobile Connect 5.0 for Chrome OS User Guide 6 About Mobile Connect Part 2 Installing and Using • Installing Mobile Connect • Using Mobile Connect SonicWall Mobile Connect 5.0 for Chrome OS User Guide 7 Installing and Using 2 Installing Mobile Connect SonicWall Mobile Connect is installed through the Chrome Web Store. 1On your Chromebook, click the Web Store icon. 2In the Search field, type in SonicWall Mobile Connect, and press Enter. 3In the search results, select SonicWall Mobile Connect. 4 Select Free and then Add. The app installs on your Chromebook. When installation is complete, the Mobile Connect icon appears in your list of apps. NOTE: If you encounter an error when attempting to download SonicWall Mobile Connect, see the Chrome Web Store Help web site, where you can find information and troubleshooting procedures for using apps and report the issue to Google if necessary: https://support.google.com/chrome_webstore SonicWall Mobile Connect 5.0 for Chrome OS User Guide 8 Installing Mobile Connect 3 Using Mobile Connect The following sections describe how to use SonicWall Mobile Connect: • Creating a Connection on page 9 • Connecting to the Mobile Connect Server on page 14 • Configuring Mobile Connect Settings on page 16 Creating a Connection The process of creating a Mobile Connect connection is slightly different depending on which type of SonicWall appliance you are connecting to. • Creating Firewall or SMA 100 Series/SRA Connections on page 9 • Creating SMA 1000 Series / E‐Class SRA Connections on page 12 Creating Firewall or SMA 100 Series/SRA Connections 1The first time you launch Mobile Connect, you must add a VPN connection before you can connect. Select Add connection from the Connection popup menu. SonicWall Mobile Connect 5.0 for Chrome OS User Guide 9 Using Mobile Connect 2You are then presented with the screen to begin your first connection to the SonicWall appliance: •Name—Enter a descriptive name for the connection. •Server—Enter the URL or IP address of the server. 3 Click Next. Mobile Connect then attempts to contact the SonicWall appliance. If the attempt fails, a warning message is displayed asking if you want to save the connection. Verify that the server address or URL is spelled correctly, and then click Save. SonicWall Mobile Connect 5.0 for Chrome OS User Guide 10 Using Mobile Connect 4If Mobile Connect successfully contacts the server, you are prompted to optionally enter your Username and Password. Enter your user name and password, and then scroll down to the Domain field.