background image

 

SonicWALL SSL-VPN 2000/4000 2.1 Early Field Trial 

 Release Notes 

SonicWALL, Inc. 

February 5, 2007 

 

Contents 

Platform Compatibility 
New Features 
Known Issues 
Resolved Known Issues 
Upgrading SonicWALL SSL-VPN Software Procedures 
Related Technical Documentation 
 

Platform Compatibility 

The SonicWALL SSL-VPN 2.1 release is supported on the following platforms: 

 

SonicWALL SSL-VPN 2000

 

 

SonicWALL SSL-VPN 4000

 

 

New Features 

The following features are introduced in the SonicWALL SSL-VPN 2000/4000 2.1 release: 

 

File Shares Java Applet

—The File Shares Java Applet is a Java Virtual Machine (JVM) Web 

browser plug-in for remote users that provides improved navigation when using File Shares to 
access to shared network resources. Using the File Shares Java Applet, files and folders can be 
moved by drag-and-drop and multiple files and folders can be transferred with a single command. 
From the SSL-VPN portal, select HTML or Java File Shares application to launch by default.  

 

LDAP Multiple Organizational Unit (OU) support

—Provides LDAP authentication capability for 

multiple organizational units (OUs) using multiple base distinguished names (baseDNs), including 
authentication of LDAP accounts in nested sub-OUs without additional configuration. Additionally, 
users can login as an LDAP user with a common name (CN) or user ID (UID), rather than a DN.  

 

Active Directory (AD) Group support

—Provides access control based on existing AD group 

memberships. If a SonicWALL SSL-VPN group has one or more AD groups associated with it, 
only users from the associated AD groups will have access to that SSL-VPN group. SonicWALL 
SSL-VPN groups that are not associated with AD group(s) can be accessed by any user from the 
AD domain. By creating an “SSL-VPN User” group on the AD server and configuring the 
SonicWALL SSL-VPN to only accept members from that group, administrators can effectively 
limit SSL-VPN logins to specific AD users.  

 

RADIUS Filter-ID Group support

—Provides access control based on existing RADIUS group 

memberships using the RADIUS Filter-ID attribute. If a SonicWALL SSL-VPN group has one or 
more RADIUS groups associated with it, only users from the associated RADIUS groups will have 
access to the SonicWALL group. SonicWALL SSL-VPN groups that are not associated with 
RADIUS groups can be accessed by any user from the RADIUS domain. 

 

Page 1 of 10

 

 

 

 

© 2006 SonicWALL, Inc. SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered 
trademarks of their respective companies. 

P/N 232-001037-00 

Rev A 02/07

 

Summary of Contents for SL-VPN 4000

Page 1: ...nested sub OUs without additional configuration Additionally users can login as an LDAP user with a common name CN or user ID UID rather than a DN Active Directory AD Group support Provides access con...

Page 2: ...enable auto reconnect feature in NetExtender standalone client Support for proxy servers using HTTPS and secure proxy server forwarding Various performance improvements including cleaned up lock file...

Page 3: ...Home that links to 1 2 3 4 BSmith This variable can also be used for CIFS access policies RDP ActiveX enhancements RDP ActiveX enhancements include RDP6 support encryption for sensitive parameters pr...

Page 4: ...s to a Web server running IIS 6 0 is set to use digest authentication and a reverse proxy bookmark on the SSL VPN is used to reach the Web server Workaround For servers using IIS 6 0 reconfigure the s...

Page 5: ...ccess the Sharepoint portal 46012 Symptom Portal home page and login message files cannot be deleted from the SSL VPN security appliance after loading a configuration without the portal Condition Occu...

Page 6: ...L VPN image file to a directory on your management station Exporting a Copy of Your Configuration Settings Before beginning the update process export a copy of your SonicWALL SSL VPN appliance configu...

Page 7: ...tton The upload process can take up to one minute 3 When the upload is complete you are ready to reboot your SonicWALL SSL VPN appliance with the new SonicWALL SSL VPN image You can either reboot the...

Page 8: ...to a LAN port on the SonicWALL security appliance and configure your management station IP address with an address on the 192 168 200 0 24 subnet such as 192 168 200 20 Note The SonicWALL security app...

Page 9: ...ing the SonicWALL security appliance with your current settings Click the boot icon in the same line with Current Firmware 5 After the SonicWALL security appliance has rebooted try to open the managem...

Page 10: ...contains a list of technical documentation available on the SonicWALL Technical Documentation Online Library located at http www sonicwall com support documentation html The SonicWALL SSL VPN 2000 and...

Reviews: