Global VPN Client Features

The SonicWall Global VPN Client delivers a robust IPsec VPN solution with these features:

• OTP and TOTP - Two Factor Authentication can be configured to use TOTP and OTP with mail when connecting between Global VPN Client and the firewall.

  This feature is only supported on GEN8 Firewalls.

• IPsec Driver Support - Network Adapter Name and Driver versions have been updated from SonicWall Virtual NIC (Driver version 10.1.040) to SonicWall GVC Adapter (Driver version 5.0.0.1010).
  
• Network Security Appliance Connection - Provides secure general connection to SonicOS network security appliances running versions 6.5, 7.x and 8.x.
• Easy to Use ‐ Provides an easy‐to‐follow Installation Wizard to quickly install the product, an easy‐to‐follow Configuration Wizard with point‐and‐click activation of VPN connections, and streamlined management tools to minimize support requirements.
• Multiple Language Support ‐ The Global VPN Client user interface supports English, Simplified Chinese, Japanese, Korean, and Brazilian Portuguese. The UI automatically displays in the Windows display language.
• Client Policy Provisioning ‐ Using only the IP address or Fully Qualified Domain Name (FQDN) of the SonicWall VPN gateway, the VPN configuration data is automatically downloaded from the SonicWall VPN gateway via a secure IPsec tunnel, removing the burden from the remote user of provisioning VPN connections.
• XAUTH Authentication with RADIUS ‐ Provides added security with user authentication after the client has been authenticated via a RADIUS server.
• VPN Session Reliability ‐ Allows automatic redirect in case of a SonicWall VPN gateway failure. If a SonicWall VPN gateway is down then the Global VPN Client can go through another SonicWall VPN gateway.
• Multiple Subnet Support ‐ Allows Global VPN Client connections to more than one subnet in the configuration to increase networking flexibility.
• Third‐Party Certificate Support ‐ Supports VeriSign, Entrust, Microsoft, and Netscape Certificate Authorities (CAs) for enhanced user authentication.
• Tunnel All Support ‐ Provides enhanced security by blocking all traffic not directed to the VPN tunnel to prevent Internet attacks from entering the corporate network through a VPN connection.
• DHCP over VPN Support ‐ Allows IP address provisioning across a VPN tunnel for the corporate network while allowing WAN DHCP for Internet Access from the ISP.
• Secure VPN Configuration ‐ Critical Global VPN Client configuration information is locked from the user to prevent tampering.
• AES Encryption ‐ Supports AES-256 (Advanced Encryption Standard) for increased security.
• Multi‐Platform Client Support ‐ Supports 64-bit Windows 11.
• NAT Traversal ‐ Enables Global VPN Client connections to be initiated from behind any device performing NAT (Network Address Translation). The SonicWall Global VPN Client encapsulates IPsec VPN traffic to pass through NAT devices, which are widely deployed to allow local networks to use one external IP address for an entire network.
• Automatic Reconnect When Error Occurs ‐ Allows the Global VPN Client to keep retrying a connection if it encounters a problem connecting to a peer. This feature allows the Global VPN Client to automatically make a connection to a SonicWall VPN gateway that is temporarily disabled, without manual intervention.
• Ghost Installation for Large Scale Installations ‐ Enables the Global VPN Client’s virtual adapter to get its default address after installation and then create a ghost image.
• Dual Processor Support ‐ Enables the Global VPN Client to operate on dual‐processor computers.
• Group Policy Management ‐ Global VPN Clients access can be customized and restricted to specific subnet access (Requires SonicOS Enhanced).
• Hub and Spoke VPN Access ‐ Allows IP addressing from SonicWall VPN gateway’s DHCP Server to Global VPN Client for configuring a different subnet for all remote Global VPN Clients than the subnet of the LAN. Makes hub‐and‐spoke VPN access simpler. When a Global VPN Client successfully authenticates with the central site, it receives a virtual IP address that also grants it access to other trusted VPN sites.
• Default VPN Connections File ‐ Enables the SonicOSadministrator to configure and distribute the corporate VPN connections with the Global VPN Client software to streamline VPN client deployment.
• Automatic Configuration of Redundant Gateways from DNS ‐ When an IPsec gateway domain name resolves to multiple IP addresses, the Global VPN Client uses the IP addresses in the list as failover gateways.
• Tunnel State Display Enhancement ‐ The Global VPN Client provides information about the state of VPN tunnels. In addition to the states of enabled, disabled, and connected, the Global VPN Client indicates when tunnels are authenticating, provisioning, and connecting.
• Tunnel Status Pop‐Up Window ‐ The Global VPN Client alerts users when tunnels are connected or disconnected by displaying a small pop‐up window.
• Smart Card and USB Token Authentication ‐ The Global VPN Client is integrated with the Microsoft Cryptographic Application Program (MS CryptoAPI or MSCAPI), which enables the Global VPN Client to support user authentication using digital certificates on Smart cards and USB tokens.
• NAT‐T RFC 3947 Support ‐ Allows for automatic detection of NAT along the path between two IKE peers during IKE Phase 1 negotiation. On detection of NAT in middle, packets are UDP encapsulated using port 4500.
• DNS Redirect ‐ DNS queries to DNS suffix associated with Virtual Adapter are not sent on the physical adapter.
• Tunnel All Support Enhancement ‐ Provides the ability to route clear traffic to directly connected network interfaces that are configured with the Route All policy, which is generally used in the WLAN zone.
• Program Auto‐Start on VPN Connection ‐ Automatically launches a program, with optional arguments, when successful VPN connections are established, as specified in the Connection Properties dialog.