sonicwall ssl vpn client configuration group

Sonicwall ssl vpn client configuration group how to#
Sonicwall ssl vpn client configuration group install#
Sonicwall ssl vpn client configuration group update#
Sonicwall ssl vpn client configuration group series#
Sonicwall ssl vpn client configuration group download#

Learn more about using the Proxy Manager. The Proxy Manager is a Windows utility that helps you edit the Duo Authentication Proxy configuration, determine the proxy's status, and start or stop the proxy service.

Sonicwall ssl vpn client configuration group install#

When installing, you can choose whether or not you want to install the Proxy Manager.

Launch the Authentication Proxy installer on the target Windows server as a user with administrator rights and follow the on-screen prompts.

Note that the actual filename will reflect the version e.g.

Sonicwall ssl vpn client configuration group download#

Download the most recent Authentication Proxy for Windows from.

See Protecting Applications for more information about protecting applications in Duo and additional application options. You'll need this information to complete your setup. Click Protect to get your integration key, secret key, and API hostname.

Click Protect an Application and locate SonicWALL SRA SSL VPN in the applications list.

Debian 7 or later (Debian 9+ recommended).

Ubuntu 16.04 or later (Ubuntu 18.04+ recommended).

Red Hat Enterprise Linux 7 or later (RHEL 8+ recommended).

CentOS 7 or later (CentOS 8+ recommended).

Windows Server 2012 or later (Server 2016+ recommended).

The proxy supports these operating systems: Locate (or set up) a system on which you will install the Duo Authentication Proxy. This Duo proxy server will receive incoming RADIUS requests from your SonicWall SMA/SRA SSL VPN, contact your existing local LDAP/AD or RADIUS server to perform primary authentication, and then contact Duo's cloud service for secondary authentication. To integrate Duo with your SonicWall SMA/SRA SSL VPN, you will need to install a local Duo proxy service on a machine within your network. You should already have a working primary authentication configuration for your SonicWall SMA/SRA SSL VPN users before you begin to deploy Duo.

Sonicwall ssl vpn client configuration group how to#

First Stepsīefore moving on to the deployment steps, it's a good idea to familiarize yourself with Duo administration concepts and features like options for applications, available methods for enrolling Duo users, and Duo policy settings and how to apply them. If your organization requires IP-based rules, please review this Duo KB article. Firewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. This application communicates with Duo's service on TCP port 443.

Sonicwall ssl vpn client configuration group update#

If you have issues with the v10 'Contemporary mode' and cannot update your device firmware, access the 'Classic mode' login page by changing the VPN login URL in your browser from to There is no setting in the SMA config to force use of 'Classic mode'. The issue displaying the Duo prompt in 'Contemporary mode' was fixed in SMA firmware update 10.2.1.0-17. This mode may prevent display of the Duo prompt. Sonicwall introduced a new 'Contemporary mode' for SMA in v10.2.

Sonicwall ssl vpn client configuration group series#

SMA 1000 series devices which run v11 or v12 firmwares.

No update to 9.0.0.10 to address the issued a zero-day vulnerability alert is available for these end-of-life SRA appliances.

SRA devices which have reached end of life, which includes SRA 1600, SRA 4600, SRA EX6000, and SRA EX7000.

SonicWall discontinued SMA v8.x support in September 2019, and discontinued v9.0.x support in October 2021.

SMA 100 series devices or upgraded SRA devices with firmware versions before 9.0.0.2-13.

We do not support the Duo web-based prompt with:

SonicWall discontinued SMA v10.0 support in October 2020.

SMA 100 series devices (SMA 200, SMA 400, and SMA 500v) with v10 firmware.

SonicWall has issued a zero-day vulnerability alert for firmware versions below 9.0.0.10.

SMA 100 series devices (SMA 200, SMA 400, and SMA 500v) with 9.0.0.2-13 or later v9 firmware.

We support the Duo web-based prompt with the following: Other types of SonicWall devices (such as the SMA 1000 series, NSA series, or Aventail) may also work with Duo's RADIUS Application. The Duo Prompt shown in browsers does not work with SonicWall client VPN applications. If you are using SonicWall Mobile Connect client or SonicWall's Global VPN Client using IPsec, or an unsupported device as listed below, then see the VPN Client Instructions to configure the SonicWall device to use Duo Security's push authentication. Duo integrates with your SonicWall SRA or SMA 100 Series SSL VPN to add two-factor authentication to browser VPN logins, complete with inline self-service enrollment and Duo Prompt.