Configure Secure Client Management VPN Tunnel

A management VPN tunnel provides connectivity to the corporate network whenever a client system is powered up, without the VPN users having to connect to the VPN. This helps organizations keep their endpoints up-to-date with software patches and updates. Management tunnel disconnects when the user-initiated VPN tunnel is established.

This section provides information about configuring Secure Client management VPN tunnel on threat defense. Configuring the Secure Client management tunnel on threat defense using the management center web interface requires the following settings:

  • A Connection profile with certificate-based authentication and a group URL.

  • Secure Client management VPN profile file, configured a server with group URL and backup servers if required.

  • A Group policy with the management VPN profile, split tunneling with explicitly included networks, client bypass protocol, and no banner.

For detailed instructions on configuring the Secure Client Management VPN tunnel, see Configuring Secure Client Management VPN Tunnel on Threat Defense.