SonicWALL Global VPN Client

Making VPN ConnectionsMaking a VPN connection from the Global VPN Client is easy because the configurationinformation is managed by the SonicWALL VPN gateway. The SonicWALL administrator setsthe parameters for what is allowed and not allowed with the VPN connection policy. Forexample, for security reasons, the SonicWALL VPN Gateway administrator may not allowmultiple VPN connections or the ability to access the Internet or local network while the VPNconnection is enabled.The Global VPN Client support two IPSec Keying modes: IKE using Preshared Secret and IKEusing 3rd Party Certificates. Preshared Secret is the most common form of the IPSec Keyingmodes. If your VPN connection policy uses 3rd party certificates, you use the CertificateManager to configure the Global VPN Client to use digital certificates.A Pre-Shared Key (also called a Shared Secret) is a predefined field that the two endpoints ofa VPN tunnel use to set up an IKE (Internet Key Exchange) Security Association. This field canbe any combination of Alphanumeric characters with a minimum length of 4 characters and amaximum of 128 characters. Your Pre-Shared Key is typically configured as part of your GlobalVPN Client provisioning. If it is not, you are prompted to enter it before you log on to the remotenetwork.Accessing Redundant VPN GatewaysThe Global VPN Client supports redundant VPN gateways by manually adding the peer in thePeers page of the VPN connection Properties dialog box. See “Peers” on page 32 for moreinformation. The Global VPN Client version 2.1.0.0 (or higher) adds automatic support forredundant VPN gateways if the IPSec gateway’s domain name resolves to multiple IP address.For example, if gateway.yourcompany.com resolves to 67.115.118.7, 67.115.118.8 and67.115.118.9, the Global VPN Client cycles through these resolved IP addresses until it findsa gateway that responds, allowing multiple IP addresses to be used as failover gateways. If allthe resolved IP addresses fail to respond, Global VPN Client switches to the next peer, ifanother peer is specified in the Peers page of the VPN connection Properties dialog box. See“Peers” on page 32 for more information.Page 20 SonicWALL Global VPN Client 2.1 Administrator’s Guide