Support on SonicWall Products, Services and Solutions

Browse Knowledgebase by Category

Management and Reporting

How to perform custom Install for Device Guard or Modern Connect Tunnel Client

06/02/2020 17 4194

DESCRIPTION:

How to perform Custom Install using Modern Connect Tunnel Client? .

RESOLUTION:

Pre-configuration of Connect Tunnel (for Device Guard)

Connect Tunnel setup executable accepts few command line parameters to initialize the default connection profile during setup.

Name
1. Name of the VPN profile
VpnServer
1. Hostname or IP address of the appliance
Realm
1. Realm name

Example:

MCTSetup.exe Name=vpn.example.com Realm=”Split Tunnel”

The setup accepts additional parameters for either silent or non-interactive installation.

/s
1. Silent installation without any UI display
/passive
1. Non-interactive installation with minimal UI display

Example:

MCTSetup.exe /passive Name=ConnectionName VpnServer=vpn.example.com Realm=”Split Tunnel”

Note:

The setup does’t accept any INI file for configuration other than the parameters mentioned above.
All profiles created using above command would create profiles.xml once the connection being launched.

Configuration of connection profiles:

The connection profiles are stored in XML file at %localappdata%\SonicWall\SnwlConnect\Documents\profiles.xml. If client was already installed and if admin likes to override the connection profiles, they can push the profiles.xml using SCCM.

Note: If you are planning to push DGCT installer and profiles.xml you need to manually create SnwlConnect and Documents as profiles.xml needs to be placed in this location.

The elements of each profile as mentioned below:

Profile elements	Value
ID	Unique number starting from 0
AppType	Firmware type [Unknown = -1, SMA 1000 = 0]
ConfigType	Whether profile is created by user or admin [Internal = -1, User = 0, Admin =1]
Name	Profile name
HostAddress	Hostname or IP address
LoginGroup	Realm name
Username	Username of primary auth
Domain	Domain of primary auth
Username2	Username of secondary auth
Domain2	Domain of secondary auth
AutoCredType	Credential caching [Never = 0, Always = 1, Optional = 2, Biometric = 4]

Note:

To let users create connection profiles, the first profile is an internally managed profile with an ID = 0, AppType = -1 and ConfigType = -1.
Each profile contains additional elements like LastIpType, LastIp, Guid and Amid which are internally managed by client itself.

Example:

<?xml version="1.0" standalone="yes"?>

<Name>Add configuration</Name>

</VpnProfile>

<HostAddress>user1.ctrx.ntlmv1.local</HostAddress>

<LoginGroup>TRANS</LoginGroup>

<Guid>Hy/o5Dfl+06U7KWhdraK3w==</Guid>

<Amid>F1BPT0w9QVYxNTY2ODkzMjMyODk3QUVOAA==</Amid>

</VpnProfile>

<HostAddress>vpn.example.com</HostAddress>

<LoginGroup>Split Tunnel</LoginGroup>

<Guid>Qhpd877wUEObpmAy0K3Qcg==</Guid>

<Amid>F1BPT0w9QVYxMzYxMjMxODE4MDU2QURJAA==</Amid>

</VpnProfile>

</DataSet>

However, you can push the default profile as all the profiles are saved in a file named profiles.xml under %localappdata%\SonicWall\SnwlConnect\Documents. You can use SCCM to push the profiles.xml which pre-configures your CTDG. (For installation logs, you can pass “-l installerlog” to the MCTSetup.exe.)

Capture Cloud Platform

Federal

Partner Portal

Support Portal

Capture Cloud Platform

Federal

Partner Portal

Support Portal

How to perform custom Install for Device Guard or Modern Connect Tunnel Client

Example:

Example:

Note:

Configuration of connection profiles:

Note:

Example:

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Not Finding Your Answer?

Stay In Touch

How to perform custom Install for Device Guard or Modern Connect Tunnel Client

Example:

Example:

Note:

Configuration of connection profiles:

Note:

Example:

Categories

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Not Finding Your Answer?

Stay In Touch