Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 4193 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

When do we have to download a new SSLVPN client at user device?

Chandrashekhar Dahale

We have SSLVPN configured to allow users to connect to our network resources from outside world through internet.

 

What are the conditions under which a client update at users end necessary ?

 

1. When the Public Assigned to WAN ports change ?  Yes --- NO

We have 2 internet lines coming in to Firewall. If one goes down the other should take over. But the IPs assigned to ports are different.  Hence this question.

2. Whenever we change any Firewall Rules ?    Yes-----No

 

3. Whenever we change the network resources accessible over SSLVPN ?   Yes---- No



This thread was automatically locked due to age.
  • 0

    Hey  

    To clarify, these would be the conditions under which the client is required to re-download the updated SSL VPN configuration from their user portal. They are not required to re-download the SSL OpenVPN client.

    1. When the Public IP assigned to WAN ports change

    • No - If you are utilizing the Override Hostname setting [Configure > VPN > Show VPN settings (top right)] and you have a Dynamic DNS setup for your Public IP's
    • Yes - Otherwise

    2. Whenever we change any Firewall Rules?

    • No

    3. Whenever we change the network resources accessible over SSLVPN?

    • No - If you are using the SSL VPN as a default gateway
    • Yes - Otherwise

    If you would like to investigate further, you can always take a look at the SSL VPN user configuration file, to check what parameters are specified to determine when a re-download would be necessary.

    Generally, when you change a setting in [Configure > VPN > (Top Right) Show VPN Settings > SSL VPN], this requires a re-download of the SSL VPN User Configuration.

    An appliance certificate or user certificate regeneration would also require a re-download.

    Regards,