Configuring Tunnel Client Settings

Connect Tunnel is a client application that is installed on a user’s device, and OnDemand Tunnel is the same CT client that is activated each time a user logs in to WorkPlace from supported device.

For each community, the Tunnel Access tab lets you configure the tunnel access methods and client settings available to that community's members. In the AMC, navigate to User Access > Realms, click the link for the community you want to configure, and select the Tunnel Access tab.

The following access methods and settings are available:

• IP address pools: Controls which configured IP address pools are available to the community.

• Redirection mode: Determines whether client traffic is routed to the appliance using Split Tunnel or Redirect All, and lets you define community exclusions that override this behavior.

• Tunnel Client Options: Customizes the Connect Tunnel client's start menu caption and desktop icon behavior.

• Cached Credentials: Controls whether and how the Connect Tunnel client caches user credentials between connections.

• Software updates: Controls how users are notified of, and required to install, tunnel client updates.

• Secure Network Detection: Automatically establishes a tunnel connection when a user logs in from an unsecure location.

• Always On VPN: Establishes a VPN connection between the user's device and the appliance whenever the device has a network connection to the internet.

• Custom connection: Overrides the default realm and appliance FQDN that the client uses.

• Session Termination: Determines whether, and after how long, tunnel client sessions require users to re-authenticate.

• Proxy options: Routes Internet traffic through an internal proxy server when Redirect All is enabled.

• Post-connection scripts: Launches an executable file or script after the tunnel connection is established.

• Advanced: Controls ESP encapsulation of tunnel network traffic.

For field descriptions and the complete configuration procedure, see Selecting Tunnel Access Methods for a Community. For a more detailed description of the tunnel client itself, see Network Tunnel Client Configuration.