SonicWall SSL VPN Client.
Secure remote access on any device, any OS.
SonicWall SSL VPN Client licenses add concurrent user capacity to the SSL VPN service built into every
SonicWall firewall. The SSL VPN client runs on Windows, macOS, Linux, iOS, and Android through the SonicWall
Mobile Connect app, making it the right choice for organizations with a mixed device environment, BYOD
policies, or users connecting from personal devices. A browser-based clientless option also lets users reach
web applications and file shares from any public device without installing software.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
How It Works
SSL VPN Client at a Glance
Built Into Every SonicWall Firewall
SSL VPN is a native service on every SonicWall firewall. No add-on hardware is required. You purchase
concurrent user licenses to set how many simultaneous SSL VPN sessions the firewall will allow. The
firewall handles encryption, authentication, and policy enforcement. The client software is a free
download from SonicWall's portal or from the iOS and Android app stores under the SonicWall Mobile
Connect name.
Cross-Platform Client
The SonicWall SSL VPN client runs on Windows, macOS, and Linux as a full-tunnel Layer 3 VPN client. On
iOS and Android, the SonicWall Mobile Connect app provides the same encrypted tunnel with per-app VPN
and data-at-rest protection for mobile devices. Chromebook support is available through the Mobile
Connect app on ChromeOS. Users connect from managed corporate laptops or personal BYOD devices using the
same set of firewall-enforced access policies.
Clientless Browser Access
For users connecting from public or unmanaged devices where software installation is not possible,
SonicWall SSL VPN includes a clientless HTML5 portal. Users authenticate through a web browser and reach
published web applications, file shares, RDP sessions, and SSH terminals without installing anything. IT
controls which resources are available to clientless sessions separately from full-tunnel client
sessions.
Authentication and Policy
SSL VPN authenticates through RADIUS, LDAP, Active Directory, and local firewall accounts. Multi-factor
authentication is configurable at the firewall level. Access policies can vary by user group, device
type, and time of day. Split-tunnel and redirect-all tunnel modes are both supported, giving
administrators control over whether only corporate traffic or all user traffic routes through the VPN.
SSL VPN vs. Global VPN Client: not sure which to run?
SSL VPN works on every platform and supports BYOD. Global VPN Client is Windows-only but uses IPSec over
UDP, which is faster for high-throughput use cases on managed corporate devices. If you need both, a
SonicWall firewall supports running both services simultaneously on separate user groups. Talk to our team
to map the right client type to your user population.
A SonicWall SSL VPN Client license adds concurrent user capacity to the SSL VPN
service built into every SonicWall firewall. The license defines how many simultaneous encrypted SSL
VPN sessions the firewall will allow. The client software itself is a free download from SonicWall.
Users install the client on their device and connect through the firewall using their organization
credentials.
The SonicWall SSL VPN client supports Windows, macOS, and Linux as a full Layer 3
tunnel client. Mobile users connect via the SonicWall Mobile Connect app on iOS, Android, and
ChromeOS. A clientless HTML5 portal option is also available for users connecting from public or
unmanaged devices through a standard web browser.
Yes. SonicWall SSL VPN supports multi-factor authentication configured through the
firewall's user authentication settings. RADIUS-based MFA, one-time passwords, and integration with
third-party MFA providers are all supported, depending on the firewall model and firmware version. The
built-in SSL VPN 2FA is configured at the firewall level and applies to all SSL VPN users or specific
user groups.
SonicWall SSL VPN operates at Layer 4 using SSL/TLS over TCP and supports Windows,
macOS, Linux, iOS, Android, and ChromeOS. It is cross-platform and BYOD-friendly. The Global VPN
Client (GVC) uses IPSec over UDP and is Windows-only. Because GVC uses UDP, it transfers data faster
than SSL VPN under the same network conditions. GVC is better suited to corporate-managed Windows
devices where performance matters. SSL VPN is the better choice for mixed-OS environments and BYOD.
SSL VPN licenses are concurrent, meaning the count reflects how many users can be
connected simultaneously, not how many total users exist in your directory. To estimate the right
count, review your peak concurrent VPN usage from any existing VPN solution and add 20 to 30 percent
headroom for growth. Different SonicWall firewall models have a maximum concurrent SSL VPN user cap,
so confirm the ceiling on your model before purchasing more licenses than it can support.
Not sure how many SSL VPN licenses your firewall needs?
Tell us your firewall model, current user count, and whether you are running a mixed-OS environment or a
BYOD policy. A SonicWall-certified engineer will confirm the right license count and make sure it fits
within your firewall's session ceiling, within one business hour.
Login and Registration Form
Existing User