Mobile Connect Android 2.0 User Guide
Mobile Connect Android 2.0 User Guide
Mobile Connect
for Android 2.0
User Guide
NOTE: A NOTE indicates important information that helps you make better use of your system.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are
not followed.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
P/N 232-001394-00
Rev. D
Table of Contents
How Mobile Connect Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Android Product Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Dell SonicWALL Appliance Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Required Network Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Table of Contents | 3
2.
3.
4.
Mobile Connect establishes a SSL VPN tunnel to the Dell SonicWALL security appliance.
5.
You can now access resources on the private network. All traffic to and from the private
network is securely transmitted over the SSL VPN tunnel.
Prerequisites
The following sections describe prerequisites for SonicWALL Mobile Connect:
Samsung Nexus S
ASUS Nexus 7
Samsung Nexus 10
Samsung Galaxy S2
LG Nexus 4
Samsung Galaxy S3
Note Although Mobile Connect is designed to work with all Android devices running the 4.0 or
newer platform, only the above platforms have been tested and verified to run Mobile
Connect. Custom ROMs are not officially supported.
Dell SonicWALL firewall appliances including the TZ, NSA, E-Class NSA running SonicOS
5.8.1.0 or higher
Dell SonicWALL SRA appliances running 5.5 or higher
Dell SonicWALL Aventail E-Class SRA appliances running 10.5.4 or higher
Server name or address This is either the IP address or URL of the SSL VPN server that
you will connect to.
Username and password Typically, you will be required to enter your username and
password, although some connections may not require this.
Domain name The domain name of the SSL VPN server. Mobile Connect may be able to
automatically determine this when it first contacts the server, or there may be multiple
domains that can be selected.
On your Android devices web browser, go to the SonicWALL Mobile Connect page on the
Play Store:
https://play.google.com/store/apps/details?id=com.sonicwall.mobileconnect
2.
Click the Install button under SonicWALL Mobile Connect. The app will install on your
device. When installation is complete, the SonicWALL Mobile Connect icon will appear on
your device.
If you encounter an error when attempting to download SonicWALL Mobile Connect, please see
the Play Store Help Center, where you can find troubleshooting procedures and instructions on
how to report the issue using your Google account:
http://support.google.com/googleplay/?hl=en
Creating a Connection
The process of creating a Mobile Connect connection is slightly different depending on which
type of Dell SonicWALL appliance you are connecting to. The following sections describe how
to create a connection:
Launch SonicWALL Mobile Connect. You will be presented with the screen to begin your
first connection. Tap Add connection.
Name: Enter a descriptive name for the connection.
Server: Enter the URL or IP address of the server.
2.
Tap Next. Mobile Connect will then attempt to contact the Dell SonicWALL appliance.
If the attempt fails, a warning message will display, asking if you want to save the
connection. Verify that the server address or URL is spelled correctly, and then tap Save.
3.
If Mobile Connect successfully contacts the server, you will be prompted to enter your
Username and Password (unless the server does not require this information).
Note If the screenshots above do not match what is displayed on your device, you are connecting
to a Dell SonicWALL E-Class SRA appliance. Proceed to Creating a Connection to Dell
SonicWALL E-Class SRA Appliances on page 10, step 4.
4.
The Domain field is auto-populated with the default domain from the server. To select a
different domain, tap Domain to display a drop-down menu of the available options and tap
Save.
Launch Mobile Connect. You will be presented with the screen to begin your first
connection. Tap Add connection.
Name: Enter a descriptive name for the connection.
Server: Enter the URL or IP address of the server.
2.
Tap Next. Mobile Connect will then attempt to contact the Dell SonicWALL appliance. If the
attempt fails, a warning message will display, asking if you want to save the connection.
3.
Before tapping Save, verify that the server address or URL is spelled correctly.
4.
If Mobile Connect successfully contacts the server, you will be prompted to select which
Login Group on the appliance you want to connect to. If you do not know which Login Group
to connect to, contact your network administrator.
Note If the screenshots above do not match what is displayed on your device, you are connecting
to a Dell SonicWALL firewall or SRA appliance. Proceed to Creating a Connection to Dell
SonicWALL Firewall and SRA Appliances on page 8, step 3.
5.
If the Login Group you connect to is not listed, select Other... to manually type in the group
name.
6.
You will then be prompted to enter your Username and Password (unless the server does
not require this information).
7.
Tap OK.
Tap the connection in the list that you want to initiate. The Connection Status page
displays. Tap Connect.
2.
The first time you initiate a connection, a warning message displays. Tap the I trust this
application checkbox, and then tap OK.
3.
The first time you initiate a connection to a Dell SonicWALL E-Class SRA appliance, you
may be prompted to select and accept the certificate for Mobile Connect (if PKI
authentication is configured or End Point Control based on certificate is configured). To
accept, select the certificate and tap Allow.
4.
If your network administrator has given you a certificate to use with Mobile Connect, tap
Install.
Tip For information on how to install certificates on your Android device, see the instructions on
Enter your username and password if prompted (depending on whether the Dell
SonicWALL appliance you are connecting to allows for saving usernames and passwords).
When the connection is successfully established, the Status changes to Connected and
the Disconnect button replaces the Connect button.
Any bookmarks defined for the portal are displayed below the Disconnect button. Navigate
to a bookmarks destination.Bookmarks will only appear after a VPN connection is established
if the server is running firmware that supports Mobile Connect bookmarks and bookmarks have
been defined for that user. For the SRA appliances, the server must be running version 7.0 or
higher. UTM firmware will add support in a future firmware release.
6.
Press the Home button to return to your devices home screen. You can now navigate to
other apps to access your Intranet network. The status bar will display a VPN icon
to
indicate that the session is still connected.
If the VPN connection is interrupted, the VPN icon will disappear and you will no longer be
able to access the Intranet network. This can happen if your devices connection transitions
from wi-fi to 3G or to another network type.
Return to Mobile Connect to reestablish the connection. Optionally, you can configure the
Automatic Reconnect option on the Settings tab to have Mobile Connect automatically
attempt to reestablish interrupted connections.
Debug Logging - Enables full debug log messages of Mobile Connect activity. Leave this
setting disabled unless instructed to enable it by Dell SonicWALL Support staff.
The Forget Selections button is displayed below the connection information. Mobile Connect
remembers the Login Group that you specified when configuring the connection. To change to
a different Login Group, tap Forget Selections. The next time you connect to the server, you
will be prompted to select a new Login Group.
Note If this option is not displayed, then you are connecting to either a Dell SonicWALL firewall
or SRA appliance.
mobileconnect://addprofile[/]?name=ConnectionName&server=ServerAddress
[&Parameter1=Value&Parameter2=Value...]
Following are examples of the addprofile command:
mobileconnect://addprofile/?name=Example&server=vpn.example.com
sonicwallmobileconnect://addprofile/?name=Example&server=vpn.example.com
mobileconnect://addprofile?name=Example%202&server=vpn.example.com
mobileconnect://addprofile?name=vpn.example.com
mobileconnect://addprofile?server=vpn2.example.com
mobileconnect://addprofile?name=SRA%20Connection&server=sslvpn.example.com&
username=test&password=password&domain=LocalDomain&connect=1
mobileconnect://addprofile?name=EX%20Connection&server=workplace.example.com&
username=test&password=password&realm=Corp&connect=1
Note All appropriate characters in values of parameters used in URLs are required to be URL
encoded. For instance, to match a space, enter %20.
Add Profile Command Parameters
Command
Parameter
Description
name
The unique name of the VPN connection entry that will be created and appear in
the Mobile Connect Connections list. Mobile Connect accepts the name only if it is
unique. Letters are case sensitive.
server
The domain name or IP address of the Dell SonicWall appliance in which you wish
to connect. For example: vpn.example.com
username
password
Command
Parameter
Description
realm
Optional: The realm used in the VPN connection profile. Applies to EX series
connections only.
domain
Optional: The domain used in the VPN connection profile. Applies to SRA and
UTM connections only.
sessionid
connect
Optional: If presented and the value is non-null, the connection will be initiated if
the profile was successfully added.
callbackurl
Optional: The callback URL is be opened by Mobile Connect after the add profile
command has been processed. See Add Profile Command on page 18 for full
details of the callback URL syntax and options.
Connect Command
The connect command is used to easily establish VPN connections. Connection information can
be embedded in the URLs and they can be provided to users for easy setup and configuration.
In addition, a callback URL can be provided that Mobile Connect will open after the connection
attempt is completed, making it possible for other applications to initiate VPN connections in a
seamless manner.
Syntax:
mobileconnect://connect[/]?[name=ConnectionName|server=ServerAddress]
[&Parameter1=Value&Parameter2=Value...]
Following are examples of the mobileconnect command:
mobileconnect://connect/?name=Example
sonicwallmobileconnect://connect/?name=Example
mobileconnect://connect?name=Example
mobileconnect://connect?server=vpn.example.com
mobileconnect://connect?name=Example%202&server=vpn.example.com
mobileconnect://
connect?name=SRA%20Connection&server=sslvpn.example.com&username=test
&password=password&domain=LocalDomain
mobileconnect://connect?name=EX%20Connection&server=
workplace.example.com&username=test&password=password&realm=Corp
Description
name
The unique name of the VPN connection entry that will be created and
appear in the Mobile Connect Connections list. Mobile Connect accepts
the name only if it is unique. Letters are case sensitive.
server
username
password
realm
domain
Optional: The domain used in the VPN connection profile. Applies to SRA
and UTM connections only.
sessionid
connect
Optional: If presented and the value is non-null, the connection will be initiated if the profile was successfully added.
callbackurl
Disconnect Command
The disconnect command is used to disconnect an active connection. In addition, a callback
URL can be provided that Mobile Connect will open after the connection is disconnected, which
makes it possible to return to the calling app. If there is no active VPN connection, the command
is ignored.
Syntax:
mobileconnect://disconnect[/]
mobileconnect://disconnect[/]?[callbackurl=<callbackurl>]
Following are examples of the disconnect command:
mobileconnect://disconnect
mobileconnect://disconnect/
sonicwallmobileconnect://disconnect
mobileconnect://
disconnect?callbackurl=customapp%3A%2F%2Fhost%3Fstatus%3D%24STATUS%24%
26login_group%3D%24LOGIN_GROUP%26error_code%3D%24ERROR_CODE%24
sonicwallmobileconnect://
disconnect?callbackurl=customapp%3A%2F%2Fhost%3Fstatus%3D%24STATUS%24%
26login_group%3D%24LOGIN_GROUP%26error_code%3D%24ERROR_CODE%24
Description
callbackurl
Callback URL
While invoking Mobile Connect using a URL, a third party application can include a callback
URL that is called by Mobile Connect once it completes the requested action. The callback URL
value may also contain special tokens that will be evaluated and dynamically replaced by
Mobile Connect to provide additional status and connection information back to the app that is
opened by the callback URL. Tokens are evaluated in place, in the same order in which the
tokens were specified.
To ensure that it functions properly, the base callback URL format should be RFC 1808
compliant and should be able to be launched independently of Mobile Connect. For example it
should launch through a web page or iOS web clip.
URL: <scheme>://<net_loc>/<path>;<params>?<query>#<fragment>
Note The value of callbackurl must also be properly URL encoded to ensure that Mobile Connect
can process the callback URL correctly.
Dynamic Tokens Supported by the Callback URL
Dynamic Token
Description
$ERROR_MESSAGE$$
The string value of the error message from the failed connection attempt.
$LOGIN_GROUP$
$COMMUNITY$
$ZONE$
$TUNNEL_IP$
$TUNNEL_MODE$
$ESP_ENABLED
Note Any number of tokens from the table above can be specified.
Bookmarks
When there are more than five bookmarks, the bookmarks are replaced by a Filter screen that
groups bookmarks by type. Select the type of bookmarks to display or select All Bookmarks
to display all bookmarks. Note that for the SRA appliances, the server must be running version 7.0
or higher.
Selecting a bookmark for an app that is not installed will prompt you to install the app. Apps
referenced by bookmarks also can be installed at any time using the Settings > Bookmarks tab.
In addition to installing apps for bookmarks, the Settings > Bookmarks tabs is also used to
select and install apps for bookmarks that support multiple third party apps. For example, you
might select Safari or Google Chrome for a Web bookmark.
Mobile Connect supports the following types of bookmarks and associated apps.
Desktop Bookmarks:
Portal name: Terminal Services (RDP ActiveX), Terminal Services (RDP Java) Internal type:
RDP5ActiveX, RDP5Java
RDP bookmark types attempt to launch with the associated RDP application, as configured in
the Settings tab.
Android Version
Wyse PocketCloud Pro
1.2.287
10.5.1298
3.9
Remote RDP
3.9
3.9
Additional details such as screen resolution should be provided to the client. However, support
for passing such parameters will vary based on the application. For example:
Wyse PocketCloud Pro does not support the connect to console option
Portal name: Virtual Network Computing (VNC)
Internal type: VNC
VNC bookmark types attempt to launch with the associated VNC application as configured in
the Settings tab.
Android Version
Wyse PocketCloud Pro
1.2.287
android-vnc-viewer
0.5.0
Remoter VNC
Additional details such as screen resolution should be provided to the client. However, support
for passing such parameters varies based on the application.
3.1.170
Additional details such as screen resolution should be provided to the client. However, support
for passing such parameters will very based on the application.
Web Bookmarks:
Portal name: Web (HTTP), Secure Web (HTTPS), External Web Site
Internal type: HTTP, HTTPS, URL, URL_https
These bookmarks will launch in an associated web browser and the provided Name or IP
Address (HostID) will be passed as the parameter to display in the browser.
Android Version
Any Browser
Yes
Safari
Google Chrome
18.0.1025123
1.7.1
iSSH
ConnectBot notes: Proper formatting is required for ConnectBot SSH (server bookmark field
requires username@server).
The About tab of SonicWALL Mobile Connect displays the version number and legal text.
When a Mobile Connect session is active, the Android System Notifications area includes an
entry indicating that the VPN is connected.
Tapping on the SonicWALL Mobile Connect entry in the Android System Notifications area
displays a summary of statistics on the VPN session. The statistics page displays the server
name, duration of the session, and the amount of traffic that has been sent and received. Three
buttons are also provided on this screen:
The widget shows the connection status (connected, disconnected, connecting, etc.)
Tap the icon to establish a tunnel when disconnected.
Tap the icon to disconnect the tunnel when connected.
Tap any other area of the widget to launch the Mobile Connect client.
Double check that you have entered the server name properly in the connection
configuration.
2.
Go to the web browser on your device and attempt to navigate to the SSL VPN appliance
web portal.
3.
If you are unable to load the web portal, the problem is with the Dell SonicWALL appliance.
Contact your network administrator if the problem persists.
4.
If the web portal loads successfully on the browser and you still cannot establish a Mobile
Connect connection, notify Dell SonicWALL Support, as follows:
a. On the Settings tab, enable the Debug Logging option.
b. Attempt a connection to the server again to ensure that full debugging messages are
your mail client with the Mobile Connect log attached. Address the email to
[email protected]. Add any additional comments to the email and tap Send.
Dell SonicWALL Support staff will contact you after reviewing your case.