Equinux VPN Tracker 8.1.1 Manuel d'utilisateur

VPN Tracker 8 Manual

Activating a License from the equinux Online StoreTo activate a license bought in our online store:‣Open VPN Tracker. In case you still have time left

Migrating from Previous VersionsNo matter which version you are coming from, it’s easy to migrate all your settings to VPN Tracker 8 to continue worki

Getting ConnectedVPN Crash CourseIs this your first time working with a VPN? Read this chapter to get you up to speed.VP...What?VPN Tracker allows you

The Big PictureTo give you a better idea how to set up your VPN, here's a quick overview. We'll look at the details in the following chapter

Basic SettingsLet’s take a closer look at the essential settings that VPN Tracker needs to connect to your VPN gateway. Depending on your device, some

Advanced SettingsYou likely won‘t have to modify any settings on the Advanced tab, unless:‣your device uses different settings than the factory defaul

Setup for an Existing VPNWhen connecting to a VPN that’s already set up, your goal is to configure VPN Tracker to match the settings on your VPN gatew

Setup without Configuration GuideAlmost all IPsec VPN gateways can be used with VPN Tracker, even if they have not been tested with VPN Tracker.Set up

‣If your VPN gateway requires a single address to be entered, this will mean that only one VPN client can use this VPN connection at a time. It also m

Importing ConnectionsFind out how to import a connection that you have been given by your IT department or VPN administrator.PrerequisitesBefore impor

© 2014 equinux AG and equinux USA, Inc. All rights reserved.Under copyright law, this manual may not be copied, in whole or in part, without the writt

Connecting to Your New VPNWhen you’re done setting up your VPN, you’re ready to connect. To test your VPN, go to a location outside of the network tha

Working with VPN Tracker 21 Secure Desktop ItemsClick an icon to launch an applica-tion, connect to a server etc. VPN Tracker will automatically take

Secure Desktop: Your VPN CockpitConnect to file servers, launch the applications you need, and much more. And stop thinking about VPN connections.Sett

Adding File Servers to Your Secure DesktopIf you would like to access a file server, enter the details in the Secure Desktop Assistant.To connect to a

Working with Secure DesktopStarting a Secure Desktop SessionClick one of the icons on your Secure Desktop to start working with that ap-plication, fil

To modify an item, click it while Secure Desktop is in edit mode. To finish editing, click on a free space on your Secure Desktop or hit the Esc key.W

VPN ProductivityFind out about other VPN Tracker features that will help you work more productively with your VPN.Managing Connections and Secure Desk

VPN Connection StatsWhen connected to your VPN, you can see statistics for your connection in the sidebar. The traffic graph lets you know how much da

ActionsConnect this VPN when VPN Tracker is openedEnable this option to automatically connect to this VPN whenever VPN Tracker is opened.LocationsIf y

NotesIf you would like to make a few notes – for yourself, or for others that you’re setting up this VPN for, the Notes tab is the right place. ‣Notes

Contents...Introducing VPN Tracker 5...What’s

Network Scanner The Network Scanner in VPN Tracker Pro lets you explore the remote network of your VPN, assist users and easily locate hosts and servi

Scan Results 31 Filter ResultsType a search term to locate specific hosts or services. Use the popup button to show or hide groups of hosts or service

Using Scan ResultsConnect to ServicesYou can connect to a service right from the Network Scanner, or open the app associated with this service on your

Accounting Accounting tracks the time you were connected to your VPN. It can assist you with billing your clients, documenting your work, or figuring

Exporting Connections Whether you’re quickly exporting a VPN connection for a co-worker, or rolling out VPN Tracker to hundreds of users, VPN Tracker’

Locking Exported ConnectionsVPN Tracker offers several ways of locking down and protecting your connec-tion information when you export or deploy conn

Permit XAUTH credentials to be stored in and loaded from the keychain Checking this option will (a) move included XAUTH credentials into the user’s ke

ActionsIf you have configured actions to be executed when the connection is con-nected or disconnected, you can include them as well. Any settings you

TroubleshootingIn most cases, your connection will work fine if you follow the instructions in this manual. However, computer networking and VPN are c

No Access to the Remote NetworkIf you find yourself in a situation where your VPN appears to be connected, but you cannot access resources (servers, e

VPN Tracker 8 at a Glance 4 Network TrafficSee what’s happening on your VPN connection.Network ScannerExplore the remote network and instantly connec

Make sure the host you are trying to reach knows where to send repliesThis one is a little more complex to check. Start with checking if your local ad

Troubleshooting Remote DNSIf you can access resources on the remote network using their IP addresses, but not their host names, you will need a suitab

If you don’t see an “Answer Section” with the correct IP address, then the re-mote DNS server is not configured to resolve fileserver.example.com. If

ReferenceSettings ReferenceThis chapter describes the settings available in VPN Tracker. Settings are grouped by location and sorted from top to botto

Cisco EasyVPNAn extension of Mode Config for Cisco devices that is also capable of trans-mitting the Remote Network(s) and Perfect Forward Secrecy (PF

Related Settings: Basic > Local Address, Basic > Network Configuration, Ba-sic > Remote NetworksAvailability: Not available with Cisco EasyV

CertificateThe VPN client and the VPN gateway mutually authenticate using X.509 cer-tificates (RSA signatures). This method is very secure, but requir

Local IdentifierThe identifier that VPN Tracker uses to identify itself to the VPN gateway. The VPN gateway uses the identifier to map the incoming co

ASN.1 DNAn ASN.1 Distinguished Name (DN) is used for identification. Normally used in conjunction with certificate-based authentication. Enter the (co

“Receive DNS Settings from VPN gateway” only: If the VPN gateway transmits a search domain, the remote DNS server is used only for looking up host nam

Introducing VPN TrackerWelcome to VPN Tracker, the leading VPN client on Mac. Whether you are new to VPN or a seasoned VPN guru, this manual will help

Advanced TabEstablishing the VPN: Phases, Proposals and Device ProfilesAn IPsec VPN connection is established in two phases. In phase 1, VPN Tracker a

Phase 1In phase 1, using the pre-shared key or RSA signatures, VPN Tracker and the VPN gateway negotiate encryption keys with which the set up of the

In case you do not know what is configured on your VPN gate-way, it is possible to select both SHA-1 and MD5 here, most VPN gateways will be able to n

VPN Gateway Setting: Some devices do not have a dedicated setting for the PFS DH group. These devices typically use the same group as for phase 1.Esta

Send only traffic for the addresses below over VPNUse this setting to send only traffic for certain addresses through the VPN. This is useful for VPNs

Perform active Dead Peer Detection every ... seconds, if necessaryIf the VPN gateway is Dead Peer Detection capable, but does not perform Dead Peer De

Availability: According to the selected device profile.Additional SettingsDirect Link DetectionThis setting helps VPN Tracker detect when your Mac is

If a pre-shared key or password is stored, the password entry field will be pre-filled with this password, but the “Store in Keychain” checkbox will b

Availability: Only available using a custom device profile.Treat delete payloads in phase 2 as errorsA delete payload normally is a strong indication

Show VPN status in menu barVPN Tracker can show its status in the menu bar. For more information about what the menu bar item can do, see →#Menu Bar I

What’s New in VPN Tracker 8?Stunning New Look for OS X YosemiteVPN Tracker was redesigned from the ground up to perfectly match the new look of OS X Y

To disable testing for the current Internet connection:‣Open the VPN Availability Test (Tools > VPN Availability Test)‣Click “More Details”‣Check “

Use the “Notifications” popup to select those events that you would like to be notified about. You can customize the way notifications are displayed

Secure Desktop ReferenceThis chapter describes the items available in Secure Desktop and how to customize them to get the most out of Secure Desktop.C

Opening Websites and other URLsYou can use the Web Browser item in Secure Desktop to open a website.The Web Browser item can open any URL, e.g. telnet

Accessing Windows PCs using CoRDCoRD is an alternative to Microsoft Remote Desktop for Mac to share the screen of remote Windows PCs right form Secure

Accessing your Macs using Apple Remote Desktop (ARD)If you have Apple Remote Desktop (ARD) installed, you can use it to manage remote Macs over VPN ri

Opening Mac and Windows ApplicationsYou can open any Mac application from Secure Desktop, as well as Windows applications from Virtual Machines runnin

Automating Tasks Using AppleScriptYou can use AppleScript to automate repetitive tasks that need a VPN: Up-loading files to a server, getting the newe

Accessing Files & Printers over VPNUsing Finder to Connect to File ServersSecure Desktop or Finder? Your Choice!Secure Desktop lets you connect to

Printing over VPNIt is possible to print to network printers over VPN. The trick is to use the printers IP address (or DNS host name) when setting up

Upgrading to VPN Tracker 8If you currently own VPN Tracker, you can easily upgrade to VPN Tracker 8 and take advantage of all these great new features

L2TP / PPTP Connections Find out how to integrate OS X LT2P / PPTP connections into VPN Tracker.OS X has a built-in VPN client that can connect to L2T

VPN and Network Address Translation (NAT)VPN Tracker provides reliable VPN connectivity, even through routers that perform Network Address Translatio

NAT-TraversalNetwork Address Translation used to be a problem for VPN connections: Once the VPN is established, the actual communication over the VPN

Testing for NAT-Traversal Support As you can see from the diagram, there are a several points where the local router could interfere with the VPN. VP

Certificates and Smart CardsThis chapter describes how VPN Tracker can be integrated into a PKI (Public Key Infrastructure) using digital certificates

Importing CertificatesCertificates can be imported into a OS X keychain using any of the usual cer-tificate formats (PEM, DER, PKCS#7, PKCS#12). To im

Which Certificates Do I Need?To use certificate-based authentication in VPN Tracker, you will need the fol-lowing certificates in your OS X keychain:V

Local CertificateThe local certificate is the certificate you are using to identify to the VPN gateway as a user/client. It is sometimes called client

Using Smart Cards Storing certificates on a smart card provides even more security than using certificate-based authentication with certificates store

Verifying AccessTo verify that you are indeed able to access your smart card or token through the OS X keychain, start the Keychain Access application

VPN Tracker EditionsWe offer two different editions of VPN Tracker to fit your requirements. Find out which edition is right for you.VPN TrackerVPN Tr

Troubleshooting CertificatesMost errors can be resolved quickly by carefully following the hints given by VPN Tracker in its log. However, here are so

Choosing the Right VPN DeviceWhat You’re Looking ForWhether you’re shopping for a new device or are trying to find out if your ex-isting router can ac

Further ResourcesVPN TrackerVPN Tracker Interoperability WebsiteUp-to-date information about device compatibility and detailed configuration guides fo

Keyboard ShortcutsHere are some of the most useful keyboard shortcuts supported by VPN Tracker.ActionShortcutManaging connectionsManaging connectionsS

Getting StartedThis chapter shows you how to install VPN Tracker, and how to activate your license. If you do not have a license yet, don’t worry – we