Secure Network Detection

Secure Network Detection allows users to automatically establish a tunnel connection when attempting to login from an unsecure location. The client determines the secure network either by connecting to an internal secure host or by matching the client's DNS suffices and servers. Depending on this comparison, the following occurs:

Secure network detection

	If connected...	If not connected...
Secure host reachable/DNS entry found	Disconnect and reconnect in SND state	Connect in SND state
Secure host reachable/DNS entry not found	Leave connected	Connect using dialer

Secure Network Detection (SND) is provided by Connect Tunnel and Mobile Connect. SND allows secure “always on, always connected” SSL VPN sessions to SMA appliances from client endpoint devices. When Secure Network Detection is enabled, the Connect Tunnel client can detect when the user is located on a non-secure network and automatically establish a tunnel connection. Mobile connect still follows DNS suffix entry for detecting secure network.

The connection status is indicated by an icon on the systray:

Systray Icon	Description
	Connected
	Disconnected
	Secure Network

Consider the following when using SND:

• At the EPC Zone level, the Allow user to resume session from multiple IP addresses checkbox must be checked for SND to work.
• When enabling Secure Network Detection without Credential Caching, the user may be prompted for their credentials when they transition from secure to non-secure networks (or vice-versa) if their session has been alive longer than the maximum Credential lifetime length under General Settings > Appliance Options.

For more information on how secure network hosts are used to detect SND, refer to the Secure Network Detection section.