Secure Mobile Access 8.6 Admin Guide

Using Virtual Office

Virtual Office

This section provides an overview of the Virtual Office page and a description of the configuration tasks available on this page.

Virtual Office Overview

The Virtual Office option is located in the navigation bar of the Secure Mobile Access management interface.

The Virtual Office option launches the Virtual Office user portal in a separate Web browser window. The Virtual Office is a portal that users can access to create and access bookmarks, file shares, NetExtender sessions, Secure Virtual Assist, and Secure Virtual Meeting.

Using the Virtual Office

To use the Virtual Office:
From the Secure Mobile Access web-based management interface, click Virtual Office in the navigation bar.
A new browser window opens to the Virtual Office home page.
NOTE: When you launch the Virtual Office from the Secure Mobile Access web-based management interface, you are automatically logged in with your administrator credentials.

The Logout button does not appear in the Virtual Office when you are logged on as an administrator. To log out, you must close the browser window.

From the Virtual Office home page, you can:
Launch and install Secure Mobile Access Connect Agents
Launch and install NetExtender
Use File Shares
Launch a Virtual Assist session
Add and configure bookmarks
Add and configure bookmarks for offloaded portals
Follow bookmark links
Import certificates
Get Virtual Office help
Configure a system for Secure Virtual Access mode, if allowed by administrator
Configure passwords
Configure single sign-on options
NOTE: For detailed configuration information about the Virtual Office user portal and these tasks, refer to the Secure Mobile Access User Guide.

SMA Connect Agent

The Browser Plug-ins (NPAPI and ActiveX) are used to launch native applications such as Net-Extender, Virtual Assist, EPC, and so on. For security reasons, popular browsers block theses Plug-ins. The Chrome browser, for example, has disabled all NPAPI Plug-ins, and the newest Microsoft Edge browser does not support ActiveX. As such, the ease-of-use ability of launching directly from the browser is no longer functional, and a new method for seamless launching is necessary.

There is another application to launch that opens a specific Scheme URL. There are some Schemes already defined in the Windows/OS X, such as mailto. The SMA Connect Agent uses the Scheme URL to replace the Browser Plug-ins. The SMA Connect Agent is like a bridge that receives the Scheme URL requests and launches the specific native application.

To launch the Citrix Receiver through a Citrix bookmark, you must first install the SMA Connect Agent.


Supported Operating Systems

The SMA Connect Agent supports Windows (7, 8, and 10) as well as the Macintosh (OS X) operating systems.

Downloading and Installation

On the Welcome page, the download and install notification displays when you need to use the EPC or PDA features:

On the Portal page, the download and install notification displays when the user attempts to launch Net-Extender, Virtual Assist, Virtual Meeting, RDP Bookmark (Native), or Citrix Bookmark (Native):

Download - Click Download to download and install SMA Connect Agent. After that, users can click Installed to tell the browser to 'remember' that the SMA Connect Agent has been installed, or click Continue just to bypass the page and log in to the StoreFront.
Installed - the notification does not appear again.
Continue - closes the notification and continues the action.
[Details] - opens a window to introduce the SMA Connect Agent.

After the download is complete, it includes the Installer. The Windows installer is SMAConnectAgent.msi, the Macintosh installer is SMAConnectAgent.dmg. The Windows installer needs your permission to install, the Macintosh installer guides you to put the SMA Connect Agent in the /Application directory.

Setting up the SMA Connect Agent

Proxy Configuration

SMA supports proxy deployment, where all client browsers are configured to redirect to a proxy server, but an appliance sits between the client browsers and the proxy server. All SMA features are supported in this scenario, including supporting domain exclusions when the domain is part of a virtual hosting server, or in some cloud deployments, wherein the same server IP can be used by multiple domains.

Additionally, typical data center server farms are fronted with a load balancer and/or reverse SSL Proxy to offload SSL processing on the servers. For a load balancer fronting the servers and doing decryption, the appliance usually only sees the IP of the load balancer, and the load balancer decrypts the content and determines the specific server to assign this connection to. DPI-SSL now has a global policy option to disable an IP-based exclusion cache. The exclusions continue to work even when the IP-based exclusion cache is off. The SMA Connect Agent can setup the proxy by user.

There are four options to setup the proxy configuration:

No Proxy - When no proxy server is configured, IPv6 attributes are discarded.
Use system proxy settings -
Manual proxy configuration -
Automatic proxy configuration URL -


There is a Log tray on the system tool bar. You can right-click the tray and select the popup menu to view the logs.

Browser Warning

When the Scheme URL tries to launch the SMA Connect Agent, the browser could popup a warning message to confirm that you want to launch the SMA Connect Agent:

With a Firefox warning window, press OK to launch the SMA Connect Agent.

To launch the Citrix Native Bookmark, after logging in to the StoreFront, launch any Citrix desktops or applications such as other Citrix bookmarks. A browser confirmation message might appear.

In a Chrome warning window, press Launch Application to launch the Citrix or SMA Connect Agent.

In an Internet Explorer warning window, press Allow to launch the SMA Connect Agent.

End Point Control (EPC)

The SMA Connect Agent supports doing an EPC check from the browser. If you enable the EPC check in the login page, the browser launches the specific Scheme URL requesting the SMA Connect Agent do the EPC check.

The SMA Connect Agent checks the EPC Service on the machine. If the EPC Service is not on the local machine or if there is a newer version on the Appliance, the SMA Connect Agent downloads/Installs or upgrades the EPC Service. After installing or upgrading, the SMA Connect Agent does the EPC check.

If the EPC feature (Appliance side) enables the “Show EPC failed message in detail at client side,” the SMA Connect Agent records the detailed fail message in the log. Then, you can view the tray Log.

PDA (Personal Device Authorization)

The SMA Connect Agent helps the PDA feature get the local machine's information. In the login page, if the user enables the PDA feature, the browser launches the SMA Connect Agent. SMA Connect gets the information of the local machine and sends the information to the appliance.

SonicWall Application

On the portal page, there are buttons you can click to launch supported SonicWall Applications, including Net-Extender, Virtual Assist, and Virtual Meeting.

Net-Extender cannot run on Macintosh. Therefore, the SMA Connect Agent does not support the Net-Extender connection on Macintosh.