SonicWall SMA - Always On VPN.

hello again thanks for the interest in

the previous video it's been a great

turnout - reaching well in excess of a

thousand views on lengthen in the

previous video I touch on different

challenges of work from home and

security today I want to take a minute

to explain the first challenge I was

referring to which is how do I keep my

trusted and corporate laptop safe when

they connect any untrusted Network many

underestimate that challenge thinking

that a simple VPN client will do but

it's not doing you any good in those

days where schools are shut down

I'll leverage conciliation of work and

family and use my son to demonstrate the

challenge here we have the own Wi-Fi

which is represented by my lovely

basement we have the corporate laptop

which will be my son and the

unprofessional home PC which quite

frankly can only be done by myself the

home network is loaded with unsafe

devices whether it's a trampoline where

the corporate laptop is adding a blast

Dumbo's laying on the floor perfecting

their skills of killing your toes or the

dangerous and less-than-desirable home

PC feeding the corporate device with

questionable stuff and probably exposing

him to inappropriate content so when you

allow the corporate device to enjoy

himself in any network he please

there are exposed to many hazards that

eventually can only end up with damages

and the inevitable will occur and he

will catch a virus from its new pal then

after he end out any unsafe network

having the time of his life he finally

wants to get to work so he starts the

VPN client go through the tunnel with

everything he managed to get from home

and making its way through the corporate

network which obviously can be a threat

to business continuity and the obvious

will most likely occur the moment you

have a tunnel all VPN to the corporate

network generally speaking you

good care viruses from the untrust

Network cannot get you actually any form

of unwanted element or inappropriate

content can get you as you have no

access whatsoever to the on network or

and vice versa

the issue is the time between you have

any network connectivity and the time

you actually get into that tunnel all

VPN this is where you are exposed to

whatever element that can be found on

that unknown network fortunately enough

SonicWALL have a always-on VPN on the

SonicWALL SMA appliance corporate device

are locked down into a tunnel as soon as

there is any network connectivity the

VPN starts automatically forcing

absolutely all traffic through the

tunnel users can disconnect the VPN

meaning the device is virtually always

in the office safe and never exposed to

a more airport guest Wi-Fi I truly hope

that this simple demonstration shed some

light on the issues of a simple VPN

client now I will demonstrate out this

actually works I want to first take a

second to give a big thank you to a

company called Lotte net they've always

been deploying and Oh sting anything I

throw at them and provided me with fixed

IP addresses as I needed free of charge

for over ten years now without their

help

today's video would simply not be

possible so thanks guys great Quebec

based company for a hosting and wireless

internet service provider in the Greater

Montreal next let's get on the road

hunting for some guests Wi-Fi from

restaurant next door and see how this

VPN clients behave

okay so here we are I am at the de

Morden and just like any good

salesperson I am going to grab a bite in

a coffee in between two customers

obviously with I never thought I would

say this but for obvious health reason

I'm not gonna get out of my car

so let's pretend that I am in this

little Morden sipping a coffee and I

want to join their Wi-Fi and get to work

do some emails and other Scelzi stuff so

I do like I do for any Wi-Fi I just

click here and finally open Wi-Fi

unsecured and I will connect to it and

hope for the best as you can see again

the same splash page I get pretty much

from any type of Wi-Fi where it is the

hotel or what's not and as you can see

the net extender actually connected

right away so I am now connected to the

office I am NOT I am until - more than

Wi-Fi but I got a full tunnel having no

access whatsoever to Tim Orton and of

course they have no access to me because

I'm in a closed pipe to be at office for

those of you who knows about our VPN

client its net extender looks pretty

much like the same that extender you

have on some equal far walls and one

exception here the disconnect button is

gone

so I cannot disconnect from that VPN I'm

forced in here I got a tunnel all VPN

meaning all my traffic is sent through

the office and secured through the

corporate firewall whatever corporate

firewall you may use and now let's head

back to the office and see what is going

to happen

hey I changed my plan I decide to stop

home and work for a bit I'm so I'm gonna

connect you my home Wi-Fi and as you can

see the VPN will start automatically so

all my traffic Twitter its corporate

traffic gorgeous Facebook YouTube

whatever it is goes through the tunnel

and through the security features of any

corporate firm all you may have at the

office so I have no access to anything

in my house I don't have access to my

smallness I have no access to my Smart

TV no nothing so I am physically owned

but that thing is actually in the office

so now let's get to the office and see

how this thing behaves now okay so I'm

back at the office

and again for obvious reason I am

staying in my car

not getting in the office so I am within

range of the corporate firewall

corporate Wi-Fi so I'm just gonna

pretend I sit at my desk and connect on

the corporate and Sicard Wi-Fi as you

can see it got a nice pop-up ear saying

as the undetected VPN Auto disconnected

as the n stands for a secured network

detection so the VPN client detected

that I'm not in a any guest Wi-Fi or

home Wi-Fi had detected through some DNS

magic tricks that I am in the office so

the VPN is simply not starting because

it's kind of pointless to be in an

office to do a VPN to connect securely

to that very same office so I really

hope you appreciated that video and you

understood that not all VPNs are made

equal a big value of the SonicWALL VPN

with the SMA appliance is the always on

VPN meaning that the VPN always turn on

automatically and is enforce and people

cannot disconnect from VPN meaning that

at any given time wherever they are like

here in the office or at the Tim Orton

they are virtually always in the office

and never ever on a

unknown and untrusted unsecured wireless

networks where they could grab and get

infected with anything they may found on

a unsecured Network so if you have any

questions please feel free to reach out

to myself or any of your seneca

SonicWALL employees that you know well

so with that thanks and a good day