NetExtender disable, SSLVPN/VO Links working?
Is there a way to disable Net Extender, but still have Virtual Office Links work?
Ie so a user can sign into the virtual office, and connect and use the links, but if they download the NetExtender, and try to logon using that they get denied, or, alternatively, have not access to anything.
Category: SSL VPN
0
Answers
If you leave the Default Device Profile empty or have no Client Routes defined in it does not have the effect you want?
If there is nothing set for SSL VPN access in the User or Group settings, no access to anything should also apply.
There is no general switch to disable NXT/MC access.
—Michael@BWC
Thanks for your answer, I appreciate the help.
We do need to have the SSLVPN available for some people that use the netextender… unfortunately.
But, if I leave the default device profile empty, you're saying that no devices can use netextender, but they can still access the virtual office, and use RDP/HTTP5 to access their devices? I haven't tried that due to the requirement of having netextender for a few people, but it's good to know.
I think the problem is limiting the access to only the specific devices we want to allow to connect. I was starting to look into the NAC/ClearPass option on the sonicWALL to see if that is something that might work. Need to read more about it to see if it's a solution.
Net Extender would be nice to allow our devices to use, but it's not as safe as we would like because we cannot ensure those connecting devices are safe. The HTTP5/RDP adds some level of separation.
You could cripple NetExtender settings to stop it being used as a VPN as suggested, and then give users who need VPN access with Global VPN Client.