Jump to:navigation, search
Wiki





































Configure Windows profiles for VPN clients in the USC

Last adaptation to the version: 2.5

New:
notempty
This article refers to a Beta version
-
Access: portal.securepoint.cloud Unified Security Console Windows Profiles

Introduction

Assigning pre-configured profiles to Windows VPN clients allows to configure clients quickly and easily. By assigning these profiles to a roadwarrior pool in the VPN configuration, you can easily connect your Windows devices to a corporate UTM.

notempty
Use the latest version of the Securepoint VPN Client for your Windows devices (>= 3.0.0)


Overview

All Windows profiles including some information are displayed under Unified Security Console Windows Profiles .
Caption Value Description
Overview of Windows profiles
 ID: 12345678-abcd-efgh-ijkl-mnopqrstuvwxy Unique ID of the profile
 Tags: Tags of the profile
 Clients: HOMER-WIN11-V (123abc) Clients for which this profile is configured
 Comment: Individual comment on the profile
 Share: Authorization Configurations that are influenced by this profile


Add profile

A Windows profile can be created under  Unified Security ConsoleWindows Profile using the  Add profile button
Caption Value Description

General

General
Name     Name of the profile
Add profile Allgemein
Priority 5
Default
The higher the number, the higher the priority. This is only used if a device is assigned to several profiles. The profile with the highest priority is then used.
Clients Clients Add The profile is assigned to these clients
Tags Tags Add The profile is assigned to all clients with these tags
Comment Comment Comment that should describe the function of the profile

Permissions

Permissions
Allow creating connections    Allow setting up new connections via the wizard or by import
Add profile Berechtigungen
Allow editing connections    Allows disabling, deleting, and editing connections, including data export and applying new certificates.
Allow editing user data    Allows storing and editing user data for the connection

Client

Client
Appearance
Add profile Client
Color scheme Custom Setting this allows the system's color scheme to be overridden
Language Custom The language of the application can be set here
Application start
Run at startup Custom The application starts automatically when the computer boots up
Start in minimized view Custom The client starts in a reduced view without detailed information
Start application minimized Custom The application starts in the background and is accessible via the tray icon
Show migration assistant again Custom The migration assistant is shown when the application starts. This allows old connections to be imported directly.
Connections
Minimize after connecting Custom The application is automatically, minimized after a connection is established
Allow multiple VPN connections Custom Allowing multiple simultaneous VPN connections requires careful configuration to avoid issues
Block shutdown Custom The VPN client prevents the computer from shutting down as long as there is an active VPN connection
Display pop-up when minimizing Custom Information is displayed in a pop-up window when the application is minimized
Advanced Settings
Perform updates automatically Custom Updates are carried out automatically to ensure that the client is always up to date
Avoid DNS leaks Custom DNS requests are routed exclusively through the encrypted tunnel. This ensures that online activities cannot be viewed by third parties.

Edit profile

Existing profiles can be edited. In addition to the existing profile tabs (see above), two additional ones are displayed.

Publication status

Publication status
Publication status
  • This shows all Windows VPN clients that have this Windows profile
  • Further information on these Windows VPN clients is also displayed


VPN configuration

VPN configuration
notempty
This tab is only displayed if a VPN configuration has been applied to the Windows VPN client.
Caption Value Description
VPN configuration
Roadwarrior: TTT-Point RW | TN: 192.168.175.1/24 | Core-UTM: TTT-Point UTM Displays the corresponding Roadwarrior of the VPN configuration with the transfer network and the core UTM
Auto start:   
  • If    is activated, this connection is automatically started if it is selected as the active connection
  • If the connection is interrupted, it is automatically restarted
  • This setting can be changed on the device by the user afterwards
Activate Pre-Log-on:   
  • If    is activated, this connection is established immediately when the Windows VPN client is started
  • Connections can be established before the user has logged in
  • Pre-logon is only possible if all requirements (Internet and name server available etc.) are met
  • can only be activated when Auto-Start is active   
  • If Activate pre-log-on is active    and Auto-Start is deactivated, Activate pre-log-on is also automatically deactivated
  • notempty
    New as of: 2.5
    Force PIN to be set:
       If    is activated a PIN must be set in the client for this connection, which will be requested each time the connection is established.

    As long as the PIN is not set, this connection cannot be established by the client. This setting does not prevent the connection from being started from the portal.