VPN configuration Roadwarrior

In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden

• MS/Android-App (← links)
• MS/iOS-App (← links)
• MS/Changelog Portal (← links)
• USC (← links)
• MS/deployment/profile/android/sicherheit (← links)
• MS/deployment/profile/android (← links)
• USC/VPN/Konfiguration (transclusion) (← links)

---

Information about the VPN configuartion for Roadwarrior using Securepoint Unified Security Console

Last adaptation to the version: 2.20.3

New:

• Added a note stating that the rules are out of date

• Generated Android profiles can no longer be selected as Roadwarriors

notempty

This article refers to a Beta version

-

Access: portal.securepoint.cloud  Unified Security Console dr

---

Requirement

notempty

VPN configuration in the USC require a UTM v14.0 or higher

---

Add Roadwarrior

To add a Roadwarrior, click the  Satellit / Roadwarrior button on an active, connected core UTM. A dialog window will open where the new Roadwarrior can be configured
Caption	Value	Description	Dialog window for adding a Roadwarrior
Type	Roadwarrior	Select Roadwarrior as the type
Name	RW_General	The name to be used for this Roadwarrior
Transfer network	10.0.2.0/24	Enter a private IPv4 or IPv6 address to be used as the transfer network.
Profile	Android RW  iOS RW  Windows VPN RW	Profile selection. Possible options are Android profiles notempty New as of: 2.19 notempty Generated profiles can no longer be selected iOS device profiles iOS profiles with active Cloud Shield notempty New as of: 2.12 For iOS profiles, the system checks whether a VPP license is available for the VPN client app. If no license is available, a message is displayed To add this profile as a road warrior, you need a VPP license for the Securepoint VPN client from Apple Business Manager Windows profiles Devices from these profiles can be connected to this network after the configuration is published. Multiple profiles can be selected.
Only when all fields are filled in does the  Add button become active, and the Roadwarrior can then be added using it.
Finally, this configuration must be applied using the  Publish button.

Edit Roadwarrior

A Roadwarrior can be edited via the button
Caption	Value	Description	Dialog window for editing a Roadwarrior
Type	Roadwarrior	The type of a Roadwarrior cannot be changed
Name	RW-Smartphones	The Name used for this Roadwarrior.
Transfer network	10.0.2.0/24	IPv4- or IPv6 address, to be used as the transfer network
Profile	Android RW  iOS RW  Windows VPN RW	Profile selection. Possible options are Android profiles notempty New as of: 2.19 notempty Generated profiles can no longer be selected iOS device profiles iOS profiles with active Cloud Shield notempty New as of: 2.12 For iOS profiles, the system checks whether a VPP license is available for the VPN client app. If no license is available, the following message is displayed To add this profile as a road warrior, you need a VPP license for the Securepoint VPN client from Apple Business Manager Windows profiles Devices from these profiles can be connected to this network after the configuration is published. Multiple profiles can be selected.
Finally, this configuration must be applied using the  Publish button.

---

Add Roadwarrior rule

notempty

The rule configuration described here is obsolete as of ASC Version 1.1, and Portal Version 2.20!
This wiki article describes the rule configuration from ASC Version 1.1 onwards.

Caption	Value	Description	Dialog window for adding a packet filter rule for an address pool
Direction	Roadwarrior  Core-UTM	Indicates the direction of the packet filter rule (Source → Destination)
Source	Roadwarrior | 10.0.2.0/24	The source of the packet filter rule is always the address pool of the transfer network in which the Roadwarriors are located. (Cannot be changed)
Destination	Please select a network object	Selection of an existing network object. Existing network groups and network objects are listed.
	Show network object creation hide Klicken für dauerhafte Anzeige If no suitable network object is available, a new one can be created via the button. Name Name Name to be assigned to the network object Type Host Type of the network object. By Default, Host is selected, altenatively, Network can be chosen. Address IP address IPv4 or IPv6 address that the network object should use as the transfer network. Zone Select a Zone Zone in which the network object should be located. If no appropriate zone is available, one must be created in the UTM. Network Group Select Network Group Adds this network object to an existing network group.
Service		Selection of an existing service. Existing service groups and services are listed. A service can only be selected after a destination has been choosen.
	Show service creation hide Klicken für dauerhafte Anzeige Name Service name Service name. Service group name Service group name Adds the service to an existing service group. Protocol Select protocol Protocol to be used for the service.