Equinux VPN Tracker 6.4.6 User Manual

VPN Tracker 6 The Complete Manual

VPN Tracker Editions Compared 10ProfessionalPersonalPlayerGeneralSet up and edit connections✔✔Import onlyExport & Deployment✔––Connect to multiple

Getting StartedThis chapter shows you how to install VPN Tracker, and how to activate your license. If you do not have a license yet, don’t worry – we

To purchase a license:‣Select VPN Tracker > Buy VPN Tracker from the menu bar‣Choose an edition‣Follow the instructions to purchase a licenseIf you

‣Some license vouchers are password-protected. If you are prompted for a password, enter the license password. If you don’t know your license pass-wor

Migrating from Previous VersionsNo matter which version you are coming from, it’s easy to migrate all your settings to VPN Tracker 6 to continue worki

VPN Crash CourseIs this your first time working with a VPN? Read this chapter to get you up to speed.VP...What?VPN Tracker allows your Mac to securely

Getting ConnectedNext we’ll walk you through setting up your VPN connection in VPN Tracker. Don’t worry if you do not know yet what to configure – sim

Basic SettingsLet’s take a closer look at the essential settings that VPN Tracker needs to connect to your VPN gateway. Depending on your device, some

Advanced SettingsIf you are connecting to one of the devices VPN Tracker has been tested with and are following the configuration guide, you most like

If you need additional help, you can email the log or a full Technical Support Report straight from the Log tab.A Technical Support Report contains th

© 2011 equinux AG and equinux USA, Inc. All rights reserved.Under copyright law, this manual may not be copied, in whole or in part, without the writt

Connecting to an Existing VPNWhen connecting to an existing VPN, your goal is to configure VPN Tracker to match the settings on your VPN gateway. In o

‣If prompted, enter your pre-shared key and Extended Authentication (XAUTH) user name and password.Connected? Great! Continue with the chapters →#Secu

Setup without Configuration GuideNearly all IPsec VPN gateways can be used with VPN Tracker, even if they’re not specifically listed as a supported mo

Configure VPN TrackerOnce you have your VPN gateway set up, enter the settings in VPN Tracker. For your connection, use a custom device profile to hav

Importing ConnectionsFind out how to import a connection that you have been given by your VPN administratorImport the Connection‣Locate the connection

Secure Desktop: The Easy Way to Access Your OfficeConnect to file servers, use the applications you need, and much more. And stop thinking about VPN c

Setting up your Secure DesktopWorking over a VPN connection used to be a hassle. First you needed to con-nect to your VPN. Then you went to Finder in

Adding File Servers to Your Secure DesktopIf you would like to access a file server, enter the details in the Secure Desktop Assistant.To connect to a

Working with Secure DesktopNow you have set up your Secure Desktop with the applications and file serv-ers you need, you’re ready to get to work. Star

Accessing FileMaker via Secure DesktopSecure Desktop makes it easy to access FileMaker over your VPN connection.To add your FileMaker database:‣Click

Which Manual is Right for You?We offer two manuals for VPN Tracker:VPN Tracker 6 – The Complete Manual (this document)‣For VPN administrators and adva

Accessing Your Macs with Screen SharingYou can also remotely control a Mac using the Screen Sharing utility built-in to OS X1. Add a Screen Sharing it

Give Windows Applications Access to your VPNDo you have Windows applications that require VPN access? VPN Tracker can share your Mac’s VPN connection

Customize the appearance of your Secure DesktopYou can give your Secure Desktop a personal touch, by adding your own pic-ture, choosing your own backg

Working with VPN TrackerFind out about other VPN Tracker features that will help you work more productively with your VPN connections.Managing Your Co

VPN Connection StatusAt the bottom of the connection list you can see the status of your connec-tion. The traffic graph lets you know how much data is

Actions after ConnectingVPN Tracker can take care of any tasks that need to be performed after the VPN connects. For example, if you use your VPN conn

Dashboard WidgetVPN Tracker also offers a handy Dashboard widget with which you can start and stop your VPN connections.To install the widget:‣Open th

Exporting Connections Whether you’re quickly exporting a VPN connection for a co-worker, or rolling out VPN Tracker to hundreds of users, VPN Tracker’

Locking Exported ConnectionsVPN Tracker offers several ways of locking down and protecting your connec-tion information when you export or deploy conn

SecurityDon’t allow settings to be changedThis settings prevents users from making accidental or undesirable changes to their VPN connections. The con

Contents...VPN Tracker 6 at a Glance 5...

Other Day-to-Day ConsiderationsUsing Certificates in ConnectionsIf your connection uses certificates for authentication, keep in mind that the certifi

Add licenses for each VPN user‣Log in with the equinux ID and password that contains your organization's licenses in the new window‣Select a lice

Managing LicensesIf you have a lot of VPN Tracker licenses and users, you need an easy way to keep track of them all. The equinux License Manager lets

Upgrading LicensesIf you would like to upgrade from an older version of VPN Tracker, or you would like to upgrade from VPN Tracker Personal a differe

TroubleshootingIn most cases, your connection will work fine if you follow the instructions in this manual. However, computer networking and VPNs are

No Access to the Remote NetworkIf you find yourself in a situation where your VPN appears to be connected, but you cannot access resources (servers, e

If your local IP is part of the remote network(s):‣Are you connecting to a SonicWALL with SonicWALL Simple Client Provi-sioning or DHCP over VPN?‣Are

Settings ReferenceThis chapter describes the settings available in VPN Tracker. Settings are grouped by location and sorted from top to bottom as they

The "passive" variant can be used to resolve problems when the general EasyVPN setting does not work with a particular device.Related Settin

Local AddressThe IP address the Mac running VPN Tracker uses in the remote network when connected through VPN1. If left empty, the current IP address

VPN Tracker 6 at a Glance 5Status AreaSee what’s happening on your VPN connec-tion. Click the arrow button for additional details.BasicBasic settings

The VPN gateway's certificate can in most cases be sent by the VPN gateway, but it is also possible to add it to the local keychain and set that

Email (User FQDN)An email address is used for identification (e.g. [email protected]). Make sure to enter the email address the VPN gateway expec

Related Settings: Basic > Network > Automatic ConfigurationBasic > DNS > Use Remote DNS ServerAvailability: Available if an automatic con

Advanced TabAn IPsec VPN connection is established in two phases. In each phase, VPN Tracker sends the algorithms it is willing to use, as well as a f

Exchange ModeThe Exchange Mode determines how the initial steps of establishing a VPN connection take place. The setting must match the exchange mode

Diffie-Hellman (DH) Key ExchangeThe key length to use for the Diffie-Hellman key exchange. It must match the key length (group) selected on the VPN ga

If you are setting up your VPN gateway from scratch: Using Per-fect Forward Secrecy is recommended. If possible, use at least "Group 2 (1024 bit)

Connection TimeoutThe default settings are more than sufficient for most setups. Only in extreme network environments with high packet loss or extreme

Send Cisco Firewall Attribute during Mode ConfigWhen checked, VPN Tracker will send a special attribute indicating the pres-ence of a firewall. This m

with devices that request the next passcode from a passcode generator token (which can take up to 1 minute).Do not increase the timeout unless you hav

Introducing VPN TrackerWelcome to VPN Tracker, the leading VPN client on Mac. Whether you are new to VPN or a seasoned VPN guru, this manual will help

VPN Tracker PreferencesUpdateVPN Tracker can automatically check for updates so you never miss out on important improvements to VPN Tracker. When an u

What should I do when I get an alert that other software is already using the standard VPN network ports?If you do not need to use the other software

AppendixChoosing the Right VPN DeviceWhat You’re Looking ForWhether you’re shopping for a new device or are trying to find out if your ex-isting route

L2TP / PPTP Connections Find out how to integrate LT2P / PPTP connections within VPN Tracker.OS X has a built-in VPN client, that can connect to L2TP

Accessing Files, Printers and Databases over VPNUsing Finder to Connect to File ServersSecure Desktop or Finder? Your Choice!The new Secure Desktop in

Printing over VPNIt is possible to print to network printers over VPN. To be able to do so, make sure to add the printer by IP address (or DNS host na

FileMaker over VPNIf you work with FileMaker, we recommend using VPN Tracker’s →#Secure Desktop to connect to your database over VPN. If you prefer, y

VPN and Network Address Translation (NAT)VPN Tracker provides sophisticated tools to handle VPN connections through routers that perform Network Addre

IPSec PassthroughThe simplest method is called IPSec Passthrough. It works with all VPN gate-ways1. NAT routers supporting this method will just send

the VPN gateway used for availability testing is located on the Internet, the test results reflect the connectivity from your location to VPN gateways

What’s New?With VPN Tracker 6, working on the go is not only more secure, it's more comfortable too. Use Secure Desktop to access everything you

CertificatesThis chapter describes how VPN Tracker can be integrated in a PKI (Public Key Infrastructure) using digital certificates or smart cards.Ge

Importing CertificatesCertificates can be imported into a Mac OS X keychain using any of the usual certificate formats (PEM, DER, PKCS#7, PKCS#12). To

Which Certificates Do I Need?To use certificate-based authentication in VPN Tracker, you will need the fol-lowing certificates in your Mac OS X keycha

Local CertificateThe local certificate is the certificate you are using to identify to the VPN gateway as a user/client. It is sometimes called client

Using Smart Cards Storing certificates on a smart card provides even more security than using certificate-based authentication with certificates store

Verifying AccessTo verify that you are indeed able to access your smart card or token through the Mac OS X keychain, start the Keychain Access applica

Troubleshooting CertificatesMost errors can be resolved quickly by carefully following the hints given by VPN Tracker in its log. However, here are so

Further ResourcesVPN TrackerVPN Tracker Interoperability WebsiteLists device compatibility and provides configuration guides for many popular VPN gate

Keyboard ShortcutsHere are some of the most useful keyboard shortcuts supported by VPN Tracker.ActionShortcutManaging connectionsManaging connectionsS

Edition ChangesWe’ve heard your feedback and have substantially boosted the Player Edition’s capabilities:VPN Tracker 6 Player Edition now supports an

VPN Tracker EditionsWe offer three different editions of VPN Tracker to fit different requirements. Find out which edition is right for you.Personal E