NetExtender Linux 10.2.816/ NetExtender Windows 10.2.300 Feature Guide

NetExtender Linux 10.2.816/ NetExtender Windows 10.2.300 Feature Guide

Analytics

SonicWall NetExtender Linux 10.2.816 or Windows 10.2

SonicWall NetExtender Linux 10.2.816 or Windows 10.2.300 Feature Guide NetExtender Linux RPM 32-Bit 10.2.816 NetExtender Linux RPM 64-Bit 10.2.816

NetExtender Client Versions - SonicWall

virtually identical to that of using a traditional IPSec VPN clients, but NetExtender does not require any manual client installation. Instead, the stand-alone ...

Full PDF Document

If the viewer doesn’t load, open the file directly.

Extracted Text

SonicWall� NetExtender Linux 10.2.816 or Windows 10.2.300
Feature Guide
NetExtender Linux RPM 32-Bit 10.2.816 NetExtender Linux RPM 64-Bit 10.2.816 NetExtender Linux TGZ 32-Bit 10.2.816 NetExtender Linux TGZ 64-Bit 10.2.816 NetExtender Windows 10.2.0.300

Contents

Contents 1
NetExtender Feature Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Document Scope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 What is NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Benefits of using NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 NetExtender Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Stand-Alone Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Installing NetExtender through Microsoft Installer - Pre-filling the Server and Domain Fields . . . . 4 Multiple Ranges and Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 External Authentication Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Point to Point Server IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Tunnel All Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Proxy Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 About SMA Connect Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 NetExtender Client Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Supported Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Supported SonicWall Appliances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Feature Support in NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Configuring NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 User Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
For Windows Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 For Linux Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 User Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Installing NetExtender on Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Launching NetExtender Directly from Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Configuring NetExtender Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Installing NetExtender on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Using NetExtender on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Using NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Viewing the NetExtender Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Disconnecting NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Upgrading NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Changing Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Authentication Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Uninstalling NetExtender . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Verifying NetExtender operation from the System Tray . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Using the NetExtender Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
NetExtender Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

NetExtender 10.2 Feature Guide Contents

1

SonicWall Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 About This Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

NetExtender 10.2 Feature Guide Contents

2

1
NetExtender Feature Overview

Document Scope
This document provides a brief overview of the SonicWall NetExtender 10.2 features, concepts, and how to configure and manage them. The Feature Overview chapter contains the following subsections:
� What is NetExtender � Benefits of using NetExtender � NetExtender Concepts � Supported Platforms � Feature Support in NetExtender

What is NetExtender
SonicWall NetExtender is a transparent software application that enables the remote users to securely connect to the remote network. With NetExtender, remote users can securely run any application on the remote network. Users can upload and download files, mount network drives, and access resources in the same way as if they were on the local network. The NetExtender connection uses a Point-to-Point Protocol (PPP) connection.

Benefits of using NetExtender
NetExtender provides remote users with full access to the protected internal network. The experience is virtually identical to that of using a traditional IPSec VPN clients, but NetExtender does not require any manual client installation. Instead, the stand-alone NetExtender client is automatically installed on the PC of a remote user by an ActiveX control when using the Internet Explorer or Firefox. On Linux systems, supported browsers use Java controls to automatically install NetExtender from the Virtual Office portal.
The NetExtender Windows client also has a custom-dialer that allows it to be launched from the Windows Network Connections menu. This custom-dialer allows NetExtender to be connected before the Windows domain login. The NetExtender Windows client also supports a single active connection, and displays real-time throughput and data compression ratios in the client.
After installation, NetExtender automatically launches and connects a virtual adapter for SSL-secure NetExtender point-to-point access to permitted hosts and subnets on the internal network.

NetExtender Concepts

The following sections describes the advanced concepts of SonicWall NetExtender.

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

3

� Stand-Alone Client � Installing NetExtender through Microsoft Installer - Pre-filling the Server and Domain Fields � Multiple Ranges and Routes � External Authentication Methods � Point to Point Server IP Address � Tunnel All Mode � Connection Scripts � Proxy Configuration � About SMA Connect Agent
Stand-Alone Client
Secure Mobile Access provides a stand-alone NetExtender application. NetExtender is a browser-installed lightweight application that provides comprehensive remote access without requiring users to manually download and install the application. The first time a user launches NetExtender, the NetExtender stand-alone client is automatically installed on the user's PC. The installer creates a profile based on the user's login information. The installer window then closes and automatically launches NetExtender. If the user has a legacy version of NetExtender installed, the installer first uninstalls the old NetExtender and installs the new version. After the NetExtender stand-alone client has been installed, Windows users can launch NetExtender from their PC's Start > Programs menu and configure NetExtender to launch when Windows boots. NetExtender can establish a VPN session before the user logs into the Windows domain. Users can click Switch User on the Windows login screen and click the blue computer icon that appears at the right bottom of the screen to view the dialup connection list, and then can select NetExtender to connect. On Linux systems, the installer creates a desktop shortcut in /usr/share/NetExtender. This can be dragged to the shortcut bar in environments like Gnome and KDE. NetExtender is officially supported on the following client platforms:
� Fedora 14+ � Ubuntu 11.04+ � OpenSUSE 10.3+ � Windows 10 NetExtender might work properly on other Linux distributions, but they are not officially supported by SonicWall Inc.
Installing NetExtender through Microsoft Installer - Pre-filling the Server and Domain Fields
Installing NetExtender through Microsoft Installer (MSI) now supports the use of default profile settings during the installation process where the default server and default domain can be pre-filled along with additional options that control whether the server and domain fields can be edited by a standard user. This feature is designed specifically for administrators who want their default servers and domains pre-set during the installation process.

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

4

To set the default server and domain during the NetExtender Installation with Microsoft Installer: 1 On the Default Profile Setting page, enter the IP address of the Default Server in the appropriate field and the location of the Default Domain in the second field. 2 Disable Allow connections to other profiles to prevent users from connecting to other profiles. This setting disables the Server and Domain fields for editing on the login page of NetExtender. 3 Enable this option to allow those connections. If this option is not enabled, users are not able to add or delete profiles on the NetExtender properties page.
Multiple Ranges and Routes
The Network administrators can use the multiple range and route support of NetExtender to easily segment groups and users, without configuring firewall rules to govern access. This user segmentation allows granular control of access to the network, allows users to access the necessary resources, and restricts access to the sensitive resources to only those who require them. For networks that do not require segmentation, client addresses and routes can be configured globally.
IP Address User Segmentation
Administrators can configure separate NetExtender IP address ranges for users and groups. These settings are configured on the Users > Local users and Users > Local groups pages. A NetExtender tab has been added to the Edit User and Edit Group windows. When configuring multiple user and group NetExtender IP address ranges, it is important to know how the SMA appliance assigns IP addresses. When assigning an IP address to a NetExtender client, the SMA appliance uses the following hierarchy of ranges:
1 An IP address from the range defined in the user's local profile. 2 An IP address from the range defined in the group profile to which the user belongs. 3 An IP address from the global NetExtender range. To reserve a single IP address for an individual user, enter the same IP address in both the Client Address Range Begin and Client Address Range End fields on the NetExtender tab of the Edit Group window.
Client Routes
NetExtender client routes are used to allow and deny access to various network resources. You can configure the client routes at the user and group level. NetExtender client routes are also configured on the Edit User and Edit Group windows. The segmentation of client routes is fully customizable allowing administrator to specify any possible permutations of user, group, and global routes. For example, only group routes, only user routes, group and global routes, user, group, and global routes, and so on. This segmentation is controlled by Add Global NetExtender Client routes and Add Group NetExtender Client routes.
External Authentication Methods
Networks that use an external authentication server are not configured with local user names on the SMA appliance. In such cases, when a user is successfully authenticated, a local user account is created when the Add Global NetExtender Client routes and Add Group NetExtender Client routes settings are enabled.

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

5

Point to Point Server IP Address
In Secure Mobile Access, the PPP server IP address is 192.0.2.1 for all connecting clients. This IP address is transparent to both the remote users connecting to the internal network and to the internal network hosts communicating with remote NetExtender clients. Because the PPP server IP address is independent from the NetExtender address pool, all IP addresses in the global NetExtender address pool are used for NetExtender clients.

Tunnel All Mode

Tunnel All mode routes all traffic to and from the remote user over the Secure Mobile Access NetExtender tunnel including traffic to the remote users local network. This accomplished by adding the following routes to all remote clients' route table.

Tunnel All Mode: Routes to be Added to Remote Client's Route Table

IP Address 0.0.0.0 0.0.0.0 128.0.0.0

Subnet Mask 0.0.0.0 128.0.0.0 128.0.0.0

NetExtender also adds routes for the local networks of all connected Network Connections. These routes are configured with higher metrics than any existing routes to force traffic destined for the local network over the Secure Mobile Access tunnel instead. For example, if a remote user is has the IP address 10.0.67.64 on the 10.0.*.* network, the route 10.0.0.0/255.255.0.0 is added to route traffic through the Secure Mobile Access tunnel.
Tunnel All mode is configured at the global, group, and user levels.

Proxy Configuration
SMA appliances support NetExtender sessions using proxy configurations. Currently, only HTTPS proxy is supported. When launching NetExtender from the Web portal, if your browser is already configured for proxy access, NetExtender automatically inherits the proxy settings. The proxy settings can also be manually configured in the NetExtender client preferences. NetExtender can automatically detect proxy settings for proxy servers that support the Web Proxy Auto Discovery (WPAD) Protocol.
NetExtender provides three options for configuring proxy settings:
� Automatically detect settings - To use this setting, the proxy server must support Web Proxy Auto Discovery Protocol (WPAD)) that can push the proxy settings script to the client automatically.
� Use automatic configuration script - If you know the location of the proxy settings script, you can select this option and provide the URL of the script.
� Use proxy server - You can use this option to specify the IP address and port of the proxy server. Optionally, you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses and bypass the proxy server. If required, you can enter a user name and password for the proxy server. If the proxy server requires a username and password, but you do not specify them, a NetExtender pop-up window prompts you to enter them when you first connect.
When NetExtender connects using proxy settings, it establishes an HTTPS connection to the proxy server instead of connecting to the SMA server directly. The proxy server then forwards traffic to the SMA server. All traffic is encrypted by SSL with the certificate negotiated by NetExtender, of which the proxy server has no knowledge. The connecting process is identical for proxy and non-proxy users.

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

6

About SMA Connect Agent
The Browser Plug-ins (NPAPI and ActiveX) are used to launch native applications such as NetExtender, EPC and so on. For security reasons, popular browsers block theses Plug-ins. The Chrome browser, for example, has disabled all NPAPI Plug-ins, and the newest Microsoft Edge browser does not support ActiveX. As such, the ease-of-use ability of launching directly from the browser is no longer functional, and a new method for seamless launching is necessary.
There is another application to launch that opens a specific Scheme URL. There are some Schemes already defined in the Windows/OS X, such as mailto. The SMA Connect Agent uses the Scheme URL to replace the Browser Plug-ins. The SMA Connect Agent is like a bridge that receives the Scheme URL requests and launches the specific native application.
To launch the Citrix Receiver through a Citrix bookmark, you must first install the SMA Connect Agent.
Supported Operating Systems for Connect Agent
The SMA Connect Agent supports Windows and MacOS operating systems.

Supported Platforms
This section describes the following topics: � NetExtender Client Versions � Supported Clients � Supported SonicWall Appliances

NetExtender Client Versions

The NetExtender client versions include the following:

Description NetExtender for Windows 10 MSI NetExtender for 32-Bit Linux TGZ NetExtender for 64-Bit Linux TGZ NetExtender for 32-Bit Linux RPM NetExtender for 64-Bit Linux RPM

Version 10.2.300 10.2.816 10.2.816 10.2.816 10.2.816

Supported Clients
NetExtender 10.2.300 is supported on computers running the following Windows versions: � Windows 10 with the latest patches
NetExtender 10.2.816 is supported on computers running the following Linux versions: � Ubuntu 18.04 and later

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

7

NOTE: Always on VPN and SND are available with NetExtender MSI client for Windows, but not with NetExtender for Linux.
Supported SonicWall Appliances
SonicWall appliances receive NetExtender connections from remote clients. The following appliances are supported: SonicWall firewalls running SonicOS 7.0 or SonicOSX 7.0, including the following platforms:
� TZ670, TZ570, TZ570W, TZ570P running SonicOS 7.0 � NSv 270, NSv 470, and NSv 870 running SonicOSX 7.0 � NSsp 15700 running SonicOSX 7.0 SonicWall firewalls running SonicOS 6.5, including the NSa, TZ, SOHO, and SuperMassive series platforms � NSa 2600-6600 � NSa 2650-9650 � TZ300-TZ600, TZ300W-TZ500W, TZ300P, TZ600P, TZ350, TZ350W � SOHO W, SOHO 250, SOHO 250W � SuperMassive 9200-9600 Secure Mobile Access (SMA) 100 Series appliances running 9.0 or higher: � SMA 200/400 � SMA 210/410 � SMA 500v for ESXi (on ESXi 5.0 and higher) � SMA 500v for Hyper-V (on Hyper-V 2016 and 2019) � SMA 500v for AWS � SMA 500v for Azure

Feature Support in NetExtender

Feature Support on NetExtender for Windows and NetExtender for Linux

Feature
Tunneling Certificate Authentication SAML Authentication TLSv1.3 Support Always On VPN Endpoint Control Personal Device Authorization Auto Reconnect

Supported by NetExtender for Windows Yes Yes Yes No Yes Yes Yes Yes

Supported by NetExtender for Linux Yes No Yes Yes No Yes Yes Yes

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

8

Feature
Credential Cache Post Connection Script

Supported by NetExtender for Windows Yes
Yes

Feature Support on SMA 100 and SonicWall Firewalls

Feature Always On VPN SAML Authentication One-Time Password Method Switching Post Connection Script Endpoint Control Personal Device Authorization DHCP IP Pool

Supported on SMA 100 Yes Yes Yes
Yes Yes Yes Yes

Supported by NetExtender for Linux Yes Yes
Supported on Firewalls No No No
No No No No

NOTE: The features listed above in the Feature Support on SMA 100 and SonicWall Firewalls table are supported only when using NetExtender with the SMA 100 Series.

SonicWall NetExtender 10.2 Feature Guide NetExtender Feature Overview

9

2
Configuring NetExtender

This section explains how to configure SonicWall NetExtender. This section includes the following topics: � User Prerequisites � User Configuration Tasks

User Prerequisites
This section describes the user Prerequisites for Windows clients and Linux clients for installing NetExtender.

For Windows Clients
Windows clients must meet the following prerequisites to use NetExtender:
� One of the following platforms:
� Windows 10
� One of the following browsers:
� Mozilla Firefox 16.0 and higher
� Google Chrome 22.0 and higher
� To initially install the NetExtender client, the user must be logged into the PC with administrative privileges.
� If the SMA gateway uses a self-signed SSL certificate for HTTPS authentication, it is necessary to install the certificate before establishing a NetExtender connection. If you are unsure if the certificate is self-signed or generated by a trusted root Certificate Authority, SonicWall recommends that you import the certificate. The easiest way to import the certificate is to click Import Certificate on the Virtual Office home page. When using the network logon method from the Windows login screen, NetExtender uses System Store for certificate-based authentication. When the user is already logged in to Windows, NetExtender uses the User Store for certificate-based authentication. A user who wants to use the network logon method when certificate authentication is also enabled should import his user certificate into the System Store as well as into the User Store.

For Linux Clients

Linux 32-bit or 64-bit clients are supported for NetExtender when running one of the following distributions (32-bit or 64-bit):
� Linux Fedora Core 20 or higher, Ubuntu 12.04, 13.10, or higher, or OpenSUSE 10.3 or higher
The NetExtender client has been known to work on other distributions as well, but these are not officially supported.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

10

NOTE: Open source Java Virtual Machines (VMs) are not currently supported. If you do not have Java 1.5 or higher, you can use the command-line interface version of NetExtender.
User Configuration Tasks
SonicWall NetExtender is a software application that enables remote users to securely connect to the remote network. With NetExtender, remote users can virtually join the remote network. Users can mount network drives, upload and download files, and access resources in the same way as if they were on the local network. The following sections describe how to use NetExtender on the various supported platforms:
� Windows Platform Installation � Installing NetExtender on Windows
� Windows Platform Usage � Launching NetExtender Directly from Computer � Installing NetExtender with Microsoft Installer � Configuring NetExtender Properties � Configuring Connection Profiles Settings � Configuring Settings � Connection Scripts Settings � Configuring Proxy Settings � Configuring Log Settings � Configuring Advanced Settings � Configuring Acceleration Settings � Configuring Packet Capture Settings � Configuring Languages Settings
� Linux Platform � Installing NetExtender on Linux � Using NetExtender on Linux
Installing NetExtender on Windows
The procedure for installing NetExtender is same for all supported browsers on Windows platform.
To install and launch NetExtender for the first time: 1 Log in to the Secure Mobile Access Virtual Office portal. 2 Click NetExtender.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

11

3 The prompt is displayed asking you to download the SMA Connect Agent. Download and install the SMA Connect Agent and allow SMA Connect agent to launch NetExtender from your browser. For detailed information, see Downloading and Installation and Setting up the SMA Connect Agent.
NOTE: If the SMA Connect Agent is already installed, click Installed to ensure that you don't see the prompt again or click Continue to skip the prompt.
4 The NetExtender is downloaded automatically and the NetExtender installer launches. In the User Account Control prompt, click Yes to run the NetExtender installer. NetExtender is connected. If you see error connecting to NetExtender, click Reconnect, and skip to Step 17 to enter the user credentials.
5 (Conditional) If you do not see the prompt, the NexEtender client has not downloaded automatically. Continue executing the next steps to download and install the NetExtender manually.

a Click the <user icon> at the upper-right corner of the page.
b Click Downloads.
c Select your platform for manual download and click Save File. The file is saved in your Downloads folder.
6 Navigate to your Downloads folder and double-click NXSetupU.exe to run the installer.
7 The User Account Control dialog "Do you want to allow the following program to make changes to this computer?" displays. Click Yes.
8 The SonicWall NetExtender Setup wizard is launched. The Welcome screen recommends that you close all other applications before starting the setup to avoid the need to restart your computer after the installation. When ready to proceed, click Next.
9 In the License Agreement screen, read the agreement, select I accept the terms of the License Agreement and then click Next.
10 In the Choose Install Location screen, optionally change the Destination Folder field by using Browse. Click Next.
11 In the Shortcuts screen, select or clear the shortcut options checkboxes that you require. The following options are selected by default:
� Create a shortcut on StartMenu.
� Create a shortcut on QuickLaunch bar.
� Create a shortcut on Desktop.
12 Click Install.
13 If a Windows Security dialog box asks, "Would you like to install this device software?", click Install.
14 In the Completing the SonicWall NetExtender Setup Wizard screen, leave the Run SonicWall NetExtender check box selected to launch NetExtender immediately, or clear the check box to complete the installation without launching NetExtender.
15 Click Finish.
16 After launching NetExtender, type the IP address or FQDN of the SMA appliance into the Server field. This is the same server that you point your browser to when accessing the portal page to download

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

12

NetExtender.

17 Specify Username and Password in the respective fields.
18 In the Domain field, type in the domain. This is the same domain shown in the Domain field of the login page when you access the portal in your browser.
19 Click Connect. NetExtender takes a few seconds to connect to the server and verify your credentials. The NetExtender status window displays, indicating that NetExtender successfully connected. The

NetExtender icon

is displayed in the task bar.

The Status tab provides the following information:

Field Server
Client IP Sent
Received
Throughput

Description Indicates the name of the server to which the NetExtender client is connected.
Indicates the IP address assigned to the NetExtender client.
Indicates the amount of traffic the NetExtender client has transmitted since initial connection.
Indicates the amount of traffic the NetExtender client has received since initial connection.
Indicates the current NetExtender throughput rate.

20 (Optional) To disconnect NetExtender, click Disconnect.
TIP: Closing the window (clicking the x icon in the upper right corner of the window) does not close the NetExtender session, but minimizes it to the system tray for continued operation.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

13

Launching NetExtender Directly from Computer
After the first access and installation of NetExtender, you can launch NetExtender directly from your computer without first navigating to the Secure Mobile Access portal.
To launch NetExtender: 1 Navigate to Start > All Programs. 2 Select the SonicWall NetExtender folder, and then click SonicWall NetExtender. The NetExtender login window is displayed. 3 The IP address of the last SMA server you connected to is displayed in the Server field. To display a list of recent SMA servers you have connected to, click the arrow. 4 Enter your username and password. 5 The last domain you connected to is displayed in the Domain field.
NOTE: The NetExtender client reports an error message if the provided domain is invalid when you attempt to connect. Note that the domain names are case-sensitive.
6 The drop-down menu at the bottom of the window provides three options for remembering your username and password: � Save user name and password if server allows � Save user name only if server allows � Always ask for user name & password

TIP: Having NetExtender save your user name and password can be a security risk and should not be enabled if there is a chance that other people could use your computer to access sensitive information on the network.
Installing NetExtender with Microsoft Installer
Installing NetExtender through Microsoft Installer (MSI) supports the use of default profile settings during the installation process where the default server and default domain can be pre-filled along with additional options that control whether the server and domain fields can be edited by a standard user. This feature is designed specifically for administrators who want their default servers and domains pre-set during the installation process.
To set the default server and domain during the NetExtender Installation with Microsoft Installer:
1 On the Default Profile Setting page, enter the IP address of the Default Server in the appropriate field and the location of the Default Domain in the second field.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

14

2 Disable Allow connections to other profiles to prevent users from connecting to other profiles. This setting disables the Server and Domain fields for editing on the login page of NetExtender.
Configuring NetExtender Properties
NetExtender Properties feature helps you to manage the options including settings, log, languages, and so on.
Configuring Connection Profiles Settings
The Connection Profiles tab displays the Secure Mobile Access connection profiles you have used, including the IP address of the SMA server, the domain, and the username. To manage the connection profiles settings:
1 Click to view the NetExtender Properties window and then click Connection Profiles.
This tab provides you with the following options: � To create a shortcut on your desktop that launches NetExtender with the specified profile, highlight the profile and click Create Shortcut. � To delete a profile, highlight it by clicking on it and then click Remove. Click Remove All to delete all connection profiles.
2 Click Apply to save your changes.
Configuring Settings
The Settings tab allows you to customize the behavior of NetExtender. To manage the settings option:
1 Click to view the NetExtender Properties window and then click Settings.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

15

The setting tabs allows you to do the following customizations:
� To have NetExtender connect to a specific profile when starting up your computer, select Automatically connect with profile and select the profile from the drop-down list.
� To have NetExtender launch when you log in to your computer, select the Automatically start NetExtender UI. NetExtender starts, but is only displayed in the system tray. To have the NetExtender login window display, select Display NetExtender UI.
� Select Minimize to the tray icon when NetExtender window is closed to have the NetExtender icon display in the system tray. If this option is not selected, you are only able to access the NetExtender UI through Window's program menu.
� Select Minimize to the tray icon when NetExtender connected to have the NetExtender icon display in the system tray when you are connected.
� Select Display Connect/Disconnect Tips from the System Tray to have NetExtender display tips when you mouse over the NetExtender icon.
� Select Automatically reconnect when the connection is terminated to have NetExtender attempt to reconnect when it loses connection.
� Select Automatically reconnect when computer resumed to have NetExtender reconnect when the computer resumes from a sleep or a locked mode.
� Select Display precise number in connection status to display precise byte value information in the connection status.
� Select Enable UI animations to enable the sliding animation effects in the UI.
� Select Disable auto upgrade when admin allowed to eanble auto upgrades.
� Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session.
� Select Disconnect an active connection to have NetExtender log out of all of your SSL VPN sessions when you exit a NetExtender session.
� Select Uninstall EPC Agent automatically to have the End Point Control Agent uninstalled when NetExtender is uninstalled from the system.
2 Click OK to save your changes.
Connection Scripts Settings
Secure Mobile Access provides users with the ability to run batch file scripts when NetExtender connects and disconnects. The scripts can be used to map or disconnect network drives and printers, launch applications, or open files or websites.
To manage the connection scripts options:
1 Log in to NetExtender and click to view the NetExtender Properties window.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

16

2 Click Connection Scripts.

� To enable the domain login script, select Attempt to execute domain logon script. When enabled, NetExtender attempts to contact the domain controller and execute the login script. Optionally, select Hide the console window. If this check box is not selected, the DOS console window remains open while the script runs.
NOTE: Enabling this feature might cause connection delays while remote client's printers and drives are mapped. Make sure the domain controller and any machines in the logon script are accessible through NetExtender routes.
� To enable the script that runs when NetExtender connects, select the Automatically execute the batch file "NxConnect.bat" check box. Optionally, select Hide the console window. If this check box is not selected, the DOS console window remains open while the script runs.
� To enable the script that runs when NetExtender disconnects, select Automatically execute the batch file "NxDisconnect.bat."
3 Click OK to save your changes.
Configuring Batch File Commands
NetExtender Connection Scripts can support any valid batch file commands. For more information on batch files, see the following Wikipedia entry: http://en.wikipedia.org/wiki/.bat. The following tasks provide an introduction to some commonly used batch file commands.
1 To configure the script that runs when NetExtender connects, click Edit "NxConnect.bat." The NxConnect.bat file is displayed.
2 To configure the script that runs when NetExtender disconnects, click Edit "NxDisconnect.bat." The NxConnect.bat file is displayed.
3 By default, the NxConnect.bat file contains examples of commands that can be configured, but no actual commands. Too add commands, scroll to the bottom of the file.
4 To map a network drive, enter a command in the following format: net use drive-letter\\server\share password /user:Domain\name For example to if the drive letter is z, the server name is engineering, the share is docs, the password is 1234, the user's domain is eng and the username is admin, the command would be net use z\\engineering\docs 1234 /user:eng\admin.
5 To disconnect a network drive, enter a command in the following format: net use drive-letter: /delete For example, to disconnect network drive z, enter the command net use z: /delete.
6 To map a network printer, enter a command in the following format: net use LPT1 \\ServerName\PrinterName /user:Domain\name For example, if the server name is engineering, the printer name is color-print1, the domain name is eng,

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

17

and the username is admin, the command would be net use LPT1 \\engineering\color-print1 /user:eng\admin.
7 To disconnect a network printer, enter a command in the following format: net use LPT1 /delete
8 To launch an application enter a command in the following format: C:\Path-to-Application\Application.exe For example, to launch Microsoft Outlook, enter C:\Program Files\Microsoft Office\OFFICE11\outlook.exe.
9 To open a website in your default browser, enter a command in the following format: start http://www.website.com
10 To open a file on your computer, enter a command in the following format: C:\Path-to-file\myFile.doc
11 When you have finished editing the scripts, save the file and close it.

Configuring Proxy Settings
Secure Mobile Access supports NetExtender sessions using proxy configurations. Currently, only HTTPS proxy is supported. When launching NetExtender from the Web portal, if your browser is already configured for proxy access, NetExtender automatically inherits the proxy settings.

To manage the proxy settings options:

1 Log in to NetExtender and click 2 Click Proxy.

to view the NetExtender Properties window.

3 Select Enable proxy settings.
4 NetExtender provides three options for configuring proxy settings:
� Automatically detect settings - To use this setting, the proxy server must support Web Proxy Auto Discovery Protocol (WPAD)) that can push the proxy settings script to the client automatically.
� Use automatic configuration script - If you know the location of the proxy settings script, select this option and enter the URL of the scrip in the Address field.
� Use proxy server - Select this option to enter the Address and Port of the proxy server. Optionally, you can enter an IP address or domain in the BypassProxy field to allow direct connections to those addresses that bypass the proxy server. If required, enter User name and Password for the proxy server. If the proxy server requires a username and password, but you do not specify them in the Properties window, a NetExtender pop-up window prompts you to enter them when you first connect.
5 Click Apply to save your changes.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

18

Configuring Log Settings
The Log tab provides the basic control over the NetExtender Log and Debug Log. To manage the Log options:

1 Log in to NetExtender and click 2 Click Log.

to view the NetExtender Properties window.

� To establish the size of the NetExtender Log, select either Unlimited log file size or Set maximum log file size to. If you choose to set a maximum size, use the adjoining arrows. To clear the NetExtender Log, select Clear NetExtender Log.
� To Enable NetExtender Log, select the corresponding check box. To clear the debug log, select Clear Debug Log.
� Click Log Viewer... to view the current NetExtender log.
3 Click OK to save the changes.

Configuring Advanced Settings
The Advanced tab provides the options to adjust the advanced settings on NetExtender properties and protocols.
To manage the Advanced settings:

1 Log in to NetExtender and click 2 Click Advanced.

to view the NetExtender Properties window.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

19

3 You can customize the link speed that the NetExtender adapter reports to the operating system. To select a virtual link speed to report, select either Report the underlying network speed to OS, or select Report a fixed speed and designate a speed.
NOTE: Users can click Advanced Network Properties to make adjustments. However, modifying these settings could impact NetExtender performance and/or functionality. It is recommended to only make changes here if advised to do so by SonicWall support.
4 Click OK to save your changes.

Configuring Acceleration Settings
The Acceleration Settings tab allows you to accelerate IP and port to ensure high performance. NOTE: Acceleration is supported only on Gen6.

To manage the Acceleration settings:

1 Log in to NetExtender and click 2 Click Acceleration.

to view the NetExtender Properties window.

� Specify the IP address and select Enable Acceleration to enable the IP Address acceleration. You can include or exclude the IP Address as required.
� Select the Enable WXAC Debug log checkbox, if required.
� Specify the Port number and select Check for upgrades automatically to enable upgrades. You can include or exclude the Ports as required.
3 Click OK to save your changes.

Configuring Packet Capture Settings
The Packet Capture tab allows you to enable and disable packet capture and data compression on NetExtender. You must have Administrator privileges to change packet capture settings.
To manage the Packet Capture settings:

1 Log in to NetExtender and click

to view the NetExtender Properties window.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

20

2 Click Packet Capture.

� To enable packet capture, select Enable NetExtender packet capture.
� If packet capture is enabled, clear all captured packet data when NetExtender exits by selecting Clear the capture when NetExtender exits. To disable packet capture, clear this check box.
� If packet capture is enabled, clear all captured packet data when NetExtender exits by selecting Enable capture cache. To retain packet data, clear this check box.
� To enable data compression of captured packets, select Enable data compression. To disable data compression the next time NetExtender is connected, clear this box. If packet capture is enabled when NetExtender connects and you want to disable data compression immediately (instead of waiting until the next time NetExtender is connected), select Attempt to disable data compression during packet capture.
3 Click OK to save the changes.

Configuring Languages Settings
The Languages tab allows you to define your language settings and import other packs on NetExtender. To manage the Language settings:

1 Log in to NetExtender and click 2 Click Languages.

to view the NetExtender Properties window.

� The Language drop-down list allows you to select the available languages on NetExtender. The default language is English. After you select a language from the drop-down list, click OK. Restart NetExtender for the new language to be applied.
� Click Import to upload a new language pack to NetExtender. The languages packs must be in the .ZIP format. Select the language pack you want to import. Click Open. After the import, the language displays in the Language drop-down list.
3 Click OK to save your changes.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

21

Installing NetExtender on Linux
Secure Mobile Access supports NetExtender on Linux. To use NetExtender on your Linux system, your system must meet the following prerequisites:
� i386-compatible distribution of Linux � Linux Fedora Core 15 or later, Ubuntu 18.04 or later, or OpenSUSE 10.3 or later
To install NetExtender on your Linux system: 1 Log in to the SonicWall Virtual Office. 2 Click NetExtender. A pop-up window indicates that you have chosen to open a .tgz file. Click OK to save it to your default download directory.

NOTE: You must be logged in as root to install NetExtender, although many Linux systems allows the sudo ./install command to be used if you are not logged in as root.
3 To install NetExtender from the CLI, navigate to the directory where you saved the .tgz file and enter the tar -zxf NetExtender.tgz command.

4 Enter the cd netExtenderClient/ command. 5 Enter su -C " ./install" to install NetExtender. 6 Enter your system password.
7 The installer asks if you want non-root users to be able to run NetExtender. Enter either y for yes or n for no.
NOTE: To allow non-root users to run NetExtender, the installer sets PPPD to run as root. This could be considered a security risk.

Using NetExtender on Linux

To use NetExtender on a Linux computer: 1 After NetExtender is installed, there are two methods to launch it: � Click the NetExtender icon in the Applications menu, under either the Internet or Network category. � Enter the netExtenderGui command.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

22

2 The first time you connect, you must enter the SMA server name in the Server field. NetExtender remembers the server name.
3 Enter your username and password. 4 The first time you connect, you must enter the Domain name. The domain name is case-sensitive.
NetExtender remembers the domain name in the future. 5 To view the NetExtender routes, select the Routes tab in the main NetExtender window.
6 To view the NetExtender DNS server information, select the DNS tab in the main NetExtender window.

SonicWall NetExtender 10.2 Feature Guide Configuring NetExtender

23

3
Using NetExtender
This chapter describes how to use NetExtender on the various supported platforms: � Viewing the NetExtender Log � Disconnecting NetExtender � Upgrading NetExtender � Changing Passwords � Authentication Methods � Uninstalling NetExtender � Verifying NetExtender operation from the System Tray � Using the NetExtender Command Line Interface
Viewing the NetExtender Log
The NetExtender log displays information on NetExtender session events. The log is a file named NetExtender.dbg. It is stored in the directory: C:\Program Files\SonicWall\SSL VPN\NetExtender.
To view the NetExtender log, log in to the NetExtender and click .

To view details of a log message, double-click a log entry, or go to View > Log Detail to open the Log Detail pane.
To save the log, either click the Export icon or go to Log > Export.
To filter the log to display entries from a specific duration of time, go to the Filter menu and select the cutoff threshold.

SonicWall NetExtender 10.2 Feature Guide Using NetExtender

24

To filter the log by type of entry, go to Filter > Level and select one of the level categories. The available options are Fatal, Error, Warning, and Info, in descending order of severity. The log displays all entries that match or exceed the severity level. For example, when selecting the Error level, the log displays all Error and Fatal entries, but not Warning or Info entries. To view the Debug Log, either click the Debug Log icon or go to Log > Debug Log.
NOTE: It could take several minutes for the Debug Log to load. During this time, the Log window is not accessible, although you can open a new Log window while the Debug Log is loading.
To clear the log, click Log > Clear Log.
Disconnecting NetExtender
To disconnect NetExtender: 1 Right click the NetExtender icon in the system tray to display the NetExtender icon menu and click Disconnect. 2 The NetExtender session disconnects after few seconds.
You can also disconnect by double-clicking on the NetExtender icon to open the NetExtender window and then clicking Disconnect. When NetExtender is disconnected, the NetExtender window displays and gives you the option to either Reconnect or Close NetExtender.
Upgrading NetExtender
NetExtender automatically notifies users when an updated version of NetExtender is available. Users are prompted to click OK and NetExtender downloads and installs the update from the SMA security appliance.
Changing Passwords
Before connecting to the new version of NetExtender, users might be required to reset their password by suppling their old password, along with providing and re-verifying a new one.
Authentication Methods
NetExtender supports various two factor authentication methods, including one-time password, RSA, and Vasco, and authentications in mobile applications using Google, Microsoft, and Duo. If an Administrator has configured one-time passwords to be required to connect through NetExtender, you are asked to provide this information before connecting.

SonicWall NetExtender 10.2 Feature Guide Using NetExtender

25

If an Administrator has configured RSA pin-mode authentication to be required to connect through NetExtender, users are asked whether they want to create their own pin, or receive one that is system-generated.
After the pin has been accepted, you must wait for the token to change before logging in to NetExtender with the new passcode.
During authentication, the SMA server can be configured by the Administrator to request a client certificate. In this case, users must select a client certificate to use when connecting.

Uninstalling NetExtender
The NetExtender utility is automatically installed on your computer. To remove NetExtender, click Start > All Programs, click SonicWall NetExtender, and then click Uninstall. You can also configure NetExtender to automatically uninstall when your session is disconnected.
To configure NetExtender to automatically uninstall when your session is disconnected:

1 Right click the NetExtender icon Properties window is displayed.

in the system tray and click Properties... The NetExtender

2 Click the Settings tab.

3 Select Uninstall NetExtender automatically to have NetExtender uninstall every time you end a session.

4 Click Apply.

Verifying NetExtender operation from the System Tray
To view options in the NetExtender system tray, right-click the NetExtender icon in the system tray. The following are some tasks you can complete with the system tray.
Displaying Route Information: To display the routes that NetExtender has installed on your system, click the Route Information option in the system tray menu. The system tray menu displays the default route and the associated subnet mask.
Displaying Connection Information: You can display connection information by mousing over the NetExtender icon in the system tray.

Using the NetExtender Command Line Interface

NOTE: The NetExtender command line interface is only available on Windows platforms.

To launch the NetExtender CLI:
1 Launch the Windows Command Prompt by going to the Start menu, select Run, enter cmd, and click OK.
2 Change directory to where NetExtender is installed. To do this, you first must move up to the root drive by entering the cd .. command. Repeat this command until you are at the root drive. Then enter cd Program Files\SonicWall\SSL-VPN\NetExtender.
NOTE: : The specific command directory could be different on your computer. Use Windows Explorer to find the directory path where NetExtender is located.

SonicWall NetExtender 10.2 Feature Guide Using NetExtender

26

Below, and options describes the commands available in the NetExtender CLI and their options.

NetExtender CLI commands and options

Command NECLI addprofile

Option -s server

NECLI connect

-u user-name -p password -d domain-name
-s server

NECLI deleteprofile

-u user-name -p password -d domain-name - clientcertificatethumb thumb - clientcertificatename name

-s server

NECLI disconnect

-u user-name -d domain-name
timeout

NECLI displayprofile

-s server

-u user-name

-d domain-name

NECLI queryproxy NECLI reconnect NECLI showstatus

Description Creates a NetExtender profile
The IP address or hostname of the SMA server
The username for the account.
The password for the account.
The domain to connect to.
Initiates a NetExtender session.
The IP address or hostname of the SMA server.
The username for the account.
The password for the account.
The domain to connect to.
The SSL Client Certificate thumbprint value.
The SSL Client Certificate name.
Deletes a saved NetExtender profile.
The IP address or hostname of the SMA server.
The username for the account.
The domain to connect to.
Disconnects
(Optional) Timeout duration, after which the session is disconnected.
Displays all NetExtender profiles.
(Optional) Displays only the profiles that are saved for the specified server
(Optional) Displays only the profiles that are saved for the specified user name.
(Optional) Displays only the profiles that are saved for the specified domain name.
Checks the connect to the proxy server.
Attempts to reconnect to the server.
Displays the status of the current NetExtender session.

SonicWall NetExtender 10.2 Feature Guide Using NetExtender

27

Command NECLI setproxy
NECLI viewlog

Option -t [0 |1 | 2 | 3]
-s proxy address -o port -u user name -p password -b bypass-proxy -save

Description
Configures proxy settings for NetExtender
There are three options for setting proxy settings: 0 - Disable proxy. 1 - Automatically detects proxy settings. The proxy server must support Web Proxy Auto Discovery Protocol (WPAD). 2 - Uses a proxy configuration script. 3 - Manually configure the proxy server
The address of the proxy script or proxy server
The port number.
The user name for the proxy server.
The password name for the proxy server.
Bypasses the previously configured proxy settings.
Saves the proxy settings.
Displays the NetExtender log.

SonicWall NetExtender 10.2 Feature Guide Using NetExtender

28

4
NetExtender Troubleshooting

This chapter provides you help with troubleshooting information for the SonicWall NetExtender utility. NetExtender Cannot Be Installed

Problem NetExtender cannot be installed.

Solution
1 Check your OS Version, NetExtender only supports Linux OpenSUSE in addition to Fedora Core and Ubuntu. An i386-compatible Linux distribution is required, along with Sun Java 1.6.0_10+.
2 Check that the user has administrator privilege, NetExtender can only install/work under the user account with administrator privileges.
3 Check if ActiveX has been blocked by Internet Explorer or third-party blockers.
4 If the problem still exists, obtain the following information and send to support:
� The version of Secure Mobile Access NetExtender Adapter from Device Manager.
� The log file located at C:\Program files\SonicWall\SMA\NetExtender.dbg.
� The event logs in the Event Viewer found under the Windows Control Panel Administrator Tools folder. Select Applications and System events and use the Action /Save Log File as... menu to save the events in a log file.

NetExtender Connection Entry Cannot Be Created

Problem
NetExtender connection entry cannot be created.

Solution
1 Navigate to Device Manager and check if the Secure Mobile Access NetExtender Adapter has been installed successfully. If not, delete the adapter from the device list, reboot the machine and install NetExtender again.
2 Navigate to Windows Service manager under Control Panel > Administrator Tools > Services. Look for the Remote Access Auto Connection Manager and Remote Access Connection Manager to see if those two services have been started. If not, set them to automatic start, reboot the machine, and install NetExtender again.
3 Check if there is another dial-up connection in use. If so, disconnect the connection, reboot the machine and install NetExtender again.
4 If problem still exists, obtain the following information and send them to support:
� The version of Secure Mobile Access NetExtender Adapter from Device Manager.
� The log file located at C:\Program files\SonicWall\SMA\NetExtender.dbg.
� The event logs in Control Panel > Administrator Tools > Event Viewer. Select Applications and System events and use the Action /Save Log File as... menu to save the events in a log file.

SonicWall NetExtender 10.2 Feature Guide NetExtender Troubleshooting

29

NetExtender Cannot Connect

Problem NetExtender cannot connect

Solution
1 Navigate to Device Manager and check if the Secure Mobile Access NetExtender Adapter has been installed successfully. If not, delete the adapter from the device list, reboot the machine and install NetExtender again.
2 Navigate to Network connections to check if the Secure Mobile Access NetExtender Dialup entry has been created. If not, reboot the machine and install NetExtender again.
3 Check if there is another dial-up connection in use, if so, disconnect the connection and reboot the machine and connect NetExtender again.
4 If problem still exists, obtain the following information and send them to support:
� The version of Secure Mobile Access NetExtender Adapter from Device Manager.
� The log file located at C:\Program files\SonicWall\SMA\NetExtender.dbg.
� The event logs in Control Panel > Administrator Tools > Event Viewer. Select Applications and System events and use the Action /Save Log File as... menu to save the events in a log file.

NetExtender BSOD After Connected

Problem

Solution

NetExtender BSOD after connected 1 2

Uninstall NetExtender, reboot machine, reinstall the latest version NetExtender.
Obtain the following information and send them to support:
� The version of Secure Mobile Access NetExtender Adapter from Device Manager.
� The log file located at C:\Program files\SonicWall\SMA\NetExtender.dbg.
� Windows memory dump file located at C:\Windows\MEMORY.DMP. If you cannot find this file, then open System Properties, click Startup and Recovery Settings under the Advanced tab. Select Complete Memory Dump, Kernel Memory Dump or Small Memory Dump in the Write Debugging Information drop-down list. Of course, you should also reproduce the BSOD to get the dump file.
� The event logs in Control Panel > Administrator Tools > Event Viewer. Select Applications and System Events and use the Action /Save Log File as... menu to save the events in a log file.

Related Topics:
� https://www.sonicwall.com/support/search-results/?searchtext=netextender+config
� https://www.sonicwall.com/support/knowledge-base/dns-ip-not-getting-updated-on-netextender-after-c hanging-the-dns-on-the-box/180619133203645/
� https://www.sonicwall.com/support/knowledge-base/enable-proxy-settings-in-the-netextender/17050550 6096633/
� https://www.sonicwall.com/support/knowledge-base/sonicwall-net-extender-service-is-grayed-out-with-9 -0-x-msi-file/190314150454875/
� https://www.sonicwall.com/support/knowledge-base/damaged-version-of-net-extender-error-message-o n-windows-10/170707194358278/
� https://www.sonicwall.com/support/knowledge-base/unable-to-log-in-with-netextender-while-using-ger man-special-characters/170502534932980/

SonicWall NetExtender 10.2 Feature Guide NetExtender Troubleshooting

30

� https://www.sonicwall.com/support/knowledge-base/how-to-do-packet-capture-in-the-sonicwall-netexte nder-client/170503659610663/
� https://www.sonicwall.com/support/knowledge-base/macos-x-netextender-stops-passing-traffic-while-co nnected/170505241957037/
� https://www.sonicwall.com/support/knowledge-base/why-is-my-sra-appliance-dropping-net-extender-co nnections-or-becoming-unresponsive/170502978802721/
� https://www.sonicwall.com/support/knowledge-base/net-extender-being-identified-as-a-virus/181030100 825053/
� https://www.sonicwall.com/support/knowledge-base/not-able-to-uninstall-the-net-extender-client/17121 0134226180/

SonicWall NetExtender 10.2 Feature Guide NetExtender Troubleshooting

31

5
SonicWall Support
Technical support is available to customers who have purchased SonicWall products with a valid maintenance contract. The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/support. The Support Portal enables you to:
� View knowledge base articles and technical documentation � View and participate in the Community forum discussion at
https://community.sonicwall.com/technology-and-support. � View video tutorials � Access MySonicWall � Learn about SonicWall professional services � Review SonicWall Support services and warranty information � Register for training and certification � Request technical support or customer service To contact SonicWall Support, visit https://www.sonicwall.com/support/contact-support.

SonicWall <Product Name> 10.2 Feature Guide SonicWall Support

32

About This Document
Legend
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.
NetExtender Feature Guide Updated - September 2020 Software Version - 10.2 232-005421-00 Rev A
Copyright � 2020 SonicWall Inc. All rights reserved.
The information in this document is provided in connection with SonicWall Inc. and/or its affiliates' products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. SonicWall Inc. and/or its affiliates do not make any commitment to update the information contained in this document. For more information, visit https://www.sonicwall.com/legal.

SonicWall <Product Name> 10.2 Feature Guide SonicWall Support

33