Setting up the SSL VPN

A road warrior is a user who uses a device on the road, for example, a mobile or tablet. You can configure the Smoothwall to connect to the device securely. All user groups are given access to an SSL VPN by default. However, you can manage this by turning off the SSL VPN for a selected group. To can carry out custom commands before or after a VPN comes up or goes down, you can upload preconnect, connect and disconnect custom client scripts. When you have configured your SSL VPN, you can generate an archive file to distribute to users so that they can install the SSL VPN client on their device.

Tip: To make sure that a user gets full VPN connectivity within a Windows environment, add the user to the network configuration operator group.

Prerequisite

• Set the default local certificate, see our help topic, Managing global VPN network settings.

Procedure

On the NETWORK menu, under the VPN submenu, click SSL road warriors.

• To turn the SSL VPN on or off for a user group:
  1. Under the Select group section, from the Select group list, select the group that you want to turn the SSL VPN on or off for, and then click Select. The Smoothwall displays SSL VPN group settings.
  2. Under the SSL VPN group settings section, to turn the road warrior on or off, select or clear the Enable option and click Save.
  3. Repeat the previous steps for any other groups that you want to stop using SSL VPN.
• To upload a script:
  1. Under the Select group section, from the Select group list, either leave as the default "Global" to apply the script to all groups or select the group that you want to deploy the script and click Select.
  2. Under the Custom client scripts section, for the type of script that you want to upload click Choose File, select the file and click Upload <script type> script.
  3. Repeat the steps to upload other script types.
• To remove a script:
  1. Under the Select group section, from the Select group list, either leave as the default "Global" to apply the script to all groups or select the group that you want to deploy the script and click Select.
  2. Under the Custom client scripts section, click Remove <script type> script.
  3. Repeat the steps to remove other script types.
• To generate an archive containing the software with the VPN settings and custom scripts:
  1. Under the Custom client scripts section, click Generate client archives and save the file. If you don't want to include custom scripts in the archive use the Global page to generate the archive.
  2. Distribute the file to users who want to use the SSL VPN.

Follow-up tasks

• Use the User Portal to distribute the archive to users.
• Install the Smoothwall VPN client.