View source for SSL VPN Configuration on SonicWall Firewall


==SSL VPN Configuration on SonicWall Firewall==
'''Prerequisites'''
Before starting the configuration, ensure:
*Need a public static IP for configuring remote access VPN
*You have administrative access to the SonicWall Firewall.
*The appropriate SSL VPN licenses are active.
*A valid user account or group exists to assign SSL VPN access.
'''Configure SSL VPN Server Settings'''
#Navigate to Network → SSL VPN → Server Settings.
#Under SSL VPN Status on Zones, review the SSL VPN access status for each zone.
*A green indicator means SSL VPN access is active for that zone.
#Enable or disable SSL VPN for the desired zone by toggling the switch
#Under SSL VPN Server Settings, specify:
*SSL VPN Port Number (default is 4433 or as per requirement).
*Domain Name for VPN access (optional, if using FQDN).
'''Configure SSL VPN Client Settings'''
#Navigate to Network → SSL VPN → Client Settings.
#Click on the Configure icon for the Default Device Profile.
# the following:
*Zone IPv4: Select SSL VPN Zone.
*Network Address IPv4: Choose the Address Object (or) create for VPN clients (e.g., SSLVPN IP Pool).
#Apply and save the configuration.
#Go to the Client Routes tab and add the LAN Subnets that VPN users should have access to.
#Go to the Client Settings tab and set the DNS Servers.
*Scroll down, enable Create client connection profile, and click OK.

'''Configure SSL VPN Portal Settings'''
#Go to SSL VPN → Portal Settings.
#Customize the appearance and functionality of the SSL VPN Virtual Office portal.
'''Note:'''You can add company branding, modify login messages, or control available resources.

'''Configure User Access'''
#Navigate to Device → Users → Local Users & Groups.
#Verify that each SSL VPN user or group is a member of the SSLVPN Services group.
*This membership allows the user to authenticate and establish an SSL VPN connection.
#If necessary, create a new user and add it to the SSLVPN Services group.
'''Configure Access Rules'''
#Go to Policy - Rules and Policies - Access Rules.
#Verify that a rule exists allowing SSL VPN - LAN traffic.
*Click the matrix icon between SSL VPN and LAN zones to check.
#If remote users require access to other zones (e.g., DMZ or Custom Zones), create or adjust the necessary rules accordingly.
'''Verification'''
*connect using the SonicWall Connect Tunnel client.
*Confirm that the user receives an IP from the SSLVPN pool and can access internal resources as intended.