CONFIGURE SONICWALL NETEXTENDER INSTALL
CONFIGURE SONICWALL NETEXTENDER WINDOWS

Launch Dell SonicWALL NetExtender client.

After this, clients will be able to launch Dell SonicWALL NetExtenderВ client directlyВ from their Start MenuВ without having to login to your SonicWALL SSL-VPN web portal.Д®stablishingВ SSL-VPN tunnel (from the client's side)

Above steps only need to be completed once.

Set the Peer IKE ID to the same IP address as the IPSec Gateway. Set the Local IKE ID to the external IP from SonicWall. Disable client auto-update in the client settings and attempt to connect with a different NetExtender version (at least 8.6.266). NetExtender will complain about the cert, but you can accept it temporarily. Set the Shared Secret using the document you downloaded in the previous step. A few things to try would be: Change back to a device generated cert and attempt to connect.

CONFIGURE SONICWALL NETEXTENDER INSTALL

Download and install Dell SonicWALL NetExtenderВ ( NXSetupU.exe) Configure the IPSec Primary Gateway to use the IP address of AWS Tunnel 1.

CONFIGURE SONICWALL NETEXTENDER WINDOWS

Click on ' Click here to download Windows NetExtender Client'.You can ignoreВ this, plugin is not necessary. SonicWALLВ may also try to install a browserВ plugin (which in Google Chrome case would be blocked). Navigate to SSL-VPN Client Settings screen, configure Default Device Profile and click Client Routes tab. To locate the option, Login to SonicWall management page. In this case I simply instructed users to login using alternative browser. If yes, please disable this option and save the config. I had an issue where clients on Google Chrome would sometimes get automatically redirected /npNLChrome.crx webpage in which ' No data received - ERR_EMPTY_RESPONSE' error would be displayed. Login using previouslyВ created SSL-VPN user credentials. SonicWALL Virtual Office portalВ will load.BlowseВ to your SonicWALL admin interface and click on ' Click here for sslvpn login'.SonicWALL NetExtender installation (on the client's side) Without this, users will get ' Login failed - HTTPS User login not allowed from here' when trying to login to SSL-VPN web portal. Click Configure next to your WAN interface and check HTTPS box next to User Login.Each user must me a member of SSLVPN Services group and have X0 Subnet added to VPN AccessВ 'Allow' list. Add required numbers of SSL-VPN users that your clients will use to login.Normally it would be X0 Subnet, but you can be more restrictive, limiting access to certain hosts or address ranges. However, I would not recommend allowing to save passwords. For client convenience you may want to enableВ Create Client Connection Profile.This doesn't have to match you target network domain. Currently the ASA config for the AAA Server is as follows: Server Name or IP:. But I am running into a problem with the LDAP configuration on the Sonicwall and could use some advise. User Domain: domain that clients will have to enterВ in their Dell SonicWALL NetExtender client software. Ideally the client will be using NetExtender with 2FA using Duo.NetExtender Start IP and NetExtender End IP: IP address range within above interface, but not clashing with DHCP range (and any static IP addresses) on your target network.Interface: X0 (normally your LAN interface).

Configure sonicwall netextender