• Secure Mobile Access 12.4
• Introduction to Connect Tunnel
  • About Connect Tunnel
  • Guide Conventions
  • Resources Available from Connect Tunnel
  • Downloading and Installing Connect Tunnel
• Connect Tunnel Client for Windows
  • Launching VPN Connection
  • Launching VPN Connection using Network Logon
  • Launching VPN Connection using Always-ON VPN (AoV)
  • Launching VPN Connection using Device VPN
  • Using Connect Tunnel
    • Viewing Connect Tunnel Status
    • Logging into Connect Tunnel
    • Choosing a Login Group
    • Processing Server Certificates
    • Disconnecting from Connect Tunnel
  • Customizing Connect Tunnel
    • Viewing Current Settings
    • Connecting to a Different VPN
    • Configuring Split Tunnel Mode
    • Configuring a Device VPN connection
    • Updating the Connect Tunnel Application
  • Provisioning of Connect Tunnel using SCCM or Intune
    • Support for using default browser for SAML Authentication
  • Troubleshooting Connect Tunnel
    • Unable to Connect
    • Troubleshooting ESP
    • Unable to Access Resources or the Internet
    • Using Logs
    • Installation Fails
    • EPC Zone Classification doesn't work as intended
    • OpswatWrapper Init Error
• Connect Tunnel Client for macOS and Linux
  • System Requirements for MacOS
  • System Requirements for Linux
  • Starting Connect Tunnel
    • Connect Tunnel on macOS
    • Connect Tunnel on Linux
    • Specifying a Login Group
    • Connecting to a Different VPN
    • Quitting Connect Tunnel
  • Managing Configurations
    • Viewing Connect Tunnel Settings
    • Deleting a Configuration
      • Editing Connect Tunnel Settings
    • Creating a New Configuration
    • Selecting the Advanced Button
    • Advanced Options
    • Credential Caching/Secure Network Detection
  • Processing Server Certificates
  • Configuring Proxy Server Settings (Linux Only)
  • Troubleshooting
    • Unable to Connect VPN
    • Troubleshooting ESP
    • Unable to Access Resources or the Internet
    • Unable to Access Resources on Linux
• SonicWall Support
  • About This Document

Launching VPN Connection using Always-ON VPN (AoV)

This section provides information on connecting to the VPN tunnel using Always-On VPN (AoV).

• Always-On VPN
• Enabling Always-On VPN (AoV) on Connect Tunnel
• Launching a VPN connection

Always-On VPN

AoV enforces that a VPN connection is always active during the Windows user session whenever the device has a network connection to the Internet.

Enabling Always-On VPN (AoV) on Connect Tunnel

AoV is enabled by administrator in the SMA appliance. On subsequent connection of Connect Tunnel to the SMA appliance, this AoV policy is pushed to the client and gets enabled in the Connect Tunnel.

Launching a VPN connection

After the user logs on to Windows user session, a VPN connection is automatically established between the user’s device and the appliance. Also, VPN connection is triggered to reconnect automatically after a network change or system hibernation.

Based on the administrator configuration in the SMA appliance, the AoV feature may differ in the Connect Tunnel as below:

1. The profile is locked from modification and the disconnect option is disabled by default unless the administrator allows user to disconnect the Connect Tunnel in the AoV configuration.

   

2. Network access is allowed by default when VPN is not connected unless the admin restricts the network access in the AoV configuration.

For more information about the AoV configuration, refer to the section Configuring Always-On VPN (AoV) in the SMA 1000 Administration Guide.