• Mobile Connect for iOS 5.0
• Introduction to Mobile Connect
  • How Mobile Connect Works
  • New Features in Mobile Connect 5.0
  • Additional Feature Information
  • Supported Platforms
    • Apple Product Support
    • SonicWall Appliance Support
    • Required Network Information
• Installing and Connecting
  • Installing Mobile Connect
  • Creating and Saving Connections
    • Creating Firewall or SMA 100 Series Connections
    • Creating SMA 1000 Series Connections
  • Initiating a Connection
  • Configuring Connect on Demand
    • Connect on Demand to SMA 1000 Series
    • Connect on Demand to SMA 100 and SMA 1000 Series
  • Configuring Trusted Network Detection
  • Using Apple Configurator 2 with Mobile Connect
  • Configuring Per App VPN
• Settings, Bookmarks, Files, and Certificates
  • Settings Overview
  • URL Control Syntax and Parameters
    • Using the addprofile Command
    • Using the Connect Command
    • Using the Disconnect Command
    • Using the callbackurl Command Parameter
  • Using Bookmarks
    • Showing and Filtering Bookmarks
    • Supported Bookmark Types
      • Desktop Bookmarks
        • RDP Bookmarks
        • VNC Bookmarks
        • Citrix Bookmarks
      • Web Bookmarks
      • Mobile Connect Bookmarks
      • Terminal Bookmarks
  • Using Files
  • Files Features
    • Supported File Types
    • Unsupported File Types
    • File Policies and Actions
  • Importing Certificates to the iOS Device
    • Using Mobile Device Management for Certificate Import
    • Using Mobile Connect Client Certificate Importer
• Monitoring and Troubleshooting
  • Monitoring Mobile Connect
  • Troubleshooting Mobile Connect
• SonicWall Support
  • About This Document

Connect on Demand to SMA 1000 Series

The easiest way to determine if Connect on Demand is available for your SMA 1000 Series connection is to look at the Connection screen when a VPN is connected. If the information indicator appears at the right side of the Status row, Connect on Demand can be configured while connected.

Info indicator

A VPN configuration on the SonicWall SMA 1000 Series appliance must meet the following requirements to support Connect on Demand:

• The VPN tunnel must not be configured for Redirect-All mode.
• The realm must be configured to use client certificates, for authentication. Chained authentication (where a second authentication server is used) does not support Connect on Demand.
• A valid client certificate for the realm must be present. See Importing Certificates to the iOS Device for more information.
• The user must successfully connect to the appliance at least one time.

If the Mobile Connect app is not running and user interaction is required for the VPN connection attempt to succeed, VPN on Demand may fail to connect. Some scenarios where user interaction may be required include the following:

• The VPN server's SSL certificate is untrusted.
• Personal Device Authorization is enabled on the server and the device has not been authorized.
• Two-factor user authentication is required such as a one-time password.

To configure Connect on Demand to SonicWall SMA 1000 Series

1. Tap the information indicator in the Status row on the Connection tab that displays the Connect On Demand screen.

   

2. Tap Connect on Demand.

3. Set Domain List to one of the following:

   1. Set Domain List to Connect If Needed to have Mobile Connect establish a VPN connection when accessing a resource with any of the domain suffixes listed.
   2. Set Domain List to Never Connect to disable Connect on Demand for the domain suffixes listed.

   Always Connect domains are no longer supported in iOS. They behave the same as Connect if Needed.