Enabling Always-On VPN Connection

This feature is not supported on firewalls. You can configure this feature only on an SMA appliance.

Prerequisites

• In the SMA appliance, enable AOV to specific users.

To add an AOV connection profile

1. Create a connection to the user and connect. For more information about adding a connection profile, refer to the Adding Connection Profile Management section.

2. After connecting, the user can find the connection name will change to AlwaysOnConnection.

   

3. When the user tries to click disconnect.

   1. The server does not allow to disconnect.

      

   2. The server allows disconnect.

      1. The user can disconnect.

      2. If a user clicks disconnect when the server does not allow disconnections, and then the server changes to allow disconnections, the user still has a 60-second gap before he is allowed to disconnect since NX will keep the last configuration for 60 seconds in case too many disconnections require the server.

4. If users disable AOV in the server, the connection changes to normal after disconnecting.