• Secure Mobile Access 12.4
• Introduction to Connect Tunnel
  • About Connect Tunnel
  • Guide Conventions
  • Resources Available from Connect Tunnel
  • Downloading and Installing Connect Tunnel
• Connect Tunnel Client for Windows
  • Launching VPN Connection
  • Launching VPN Connection using Network Logon
  • Launching VPN Connection using Always-ON VPN (AoV)
  • Launching VPN Connection using Device VPN
  • Using Connect Tunnel
    • Viewing Connect Tunnel Status
    • Logging into Connect Tunnel
    • Choosing a Login Group
    • Processing Server Certificates
    • Disconnecting from Connect Tunnel
  • Customizing Connect Tunnel
    • Viewing Current Settings
    • Connecting to a Different VPN
    • Configuring Split Tunnel Mode
    • Configuring a Device VPN connection
    • Updating the Connect Tunnel Application
  • Provisioning of Connect Tunnel using SCCM or Intune
    • Support for using default browser for SAML Authentication
  • Troubleshooting Connect Tunnel
    • Unable to Connect
    • Troubleshooting ESP
    • Unable to Access Resources or the Internet
    • Using Logs
    • Installation Fails
    • EPC Zone Classification doesn't work as intended
    • OpswatWrapper Init Error
• Connect Tunnel Client for macOS and Linux
  • System Requirements for MacOS
  • System Requirements for Linux
  • Starting Connect Tunnel
    • Connect Tunnel on macOS
    • Connect Tunnel on Linux
    • Specifying a Login Group
    • Connecting to a Different VPN
    • Quitting Connect Tunnel
  • Managing Configurations
    • Viewing Connect Tunnel Settings
    • Deleting a Configuration
      • Editing Connect Tunnel Settings
    • Creating a New Configuration
    • Selecting the Advanced Button
    • Advanced Options
    • Credential Caching/Secure Network Detection
  • Processing Server Certificates
  • Configuring Proxy Server Settings (Linux Only)
  • Troubleshooting
    • Unable to Connect VPN
    • Troubleshooting ESP
    • Unable to Access Resources or the Internet
    • Unable to Access Resources on Linux
• SonicWall Support
  • About This Document

Logging into Connect Tunnel

To access network resources through Connect Tunnel, users must first verify their identity. This ensures that only authorized users can access protected network resources. The credentials used to verify your identity typically consist of a user name and password (or pass code).

Depending on the resources, you may also need to enter a one-time password given to you by your administrator and/or accept an Acceptable Use Policy.

During Login, a prompt may appear indicating that an upgrade is ready. For instructions on upgrading,
see Updating the Connect Tunnel Application.

To log into Connect Tunnel

1. Click the Windows Start button.

2. Click All Programs > search for Connect Tunnel.

   

3. Click on Connect Tunnel application or Open.

4. The initial login screen appears. Enter your VPN configuration choice and click Connect to start the login process.

   

5. The next screen gives a drop down list to choose between login groups/realms to log into. Select a login groups/realm, then click OK.

   

6. Enter your authentication credentials.

   Depending on how your administrator has configured Connect Tunnel, you may see a combination of these prompts.

   The screen below are examples:

   

   • Type your username in the Username field.
   • In the Password or Passcode field, type your password or passcode. (Passwords may be case-sensitive. Make sure the Caps Lock or Num Lock keys are not enabled.)
   • Enter a one-time password if one was sent to you by your administrator and click OK.

   If your administrator has configured Connect Tunnel with the enabled change password option, you can view the Change Password checkbox.

   

   • Select the Change Password check box to reset the password and click OK.

   If your administrator has configured Connect Tunnel with the enabled settings for Time-based One-time Passwords (TOTP), you can view the app-based one-time password icon as below.

   

   If your administrator has configured settings for Time-based One-time Passwords (TOTP) by enabling allowing user to deregister account and to use back-up codes options in the AMC, you can view both Renew backup codes and Deregister buttons.

   Based on the enabled option, you can view the particular section and button in the Connet Tunnel.

   

   • Click Renew button to generate a new set of back-up codes.
   • Click Deregister button to remove your app-based one-time password (TOTP) account from server. You will be asked to register again during next login.
   • If a client certificate is required for authentication, the Certificate list displays the ones on your device that match the certificate authority (CA) used by the authentication server. Often there is only one listed.
   • If an Acceptable Use Policy is displayed, click Accept to accept it.

7. If your login is successful, the following screen appears to show that you are connected to the VPN.

   

   The Status “Device VPN connected” is displayed when you have selected the Device VPN enabled realm.

   The Connect Tunnel icon appears in the task bar notification area, indicating that Connect Tunnel is running and connected to the VPN.

   Your login may not be exactly the same as that shown above. Your administrator might send you login instructions that allow you to connect to a specific network.