Fat clients or thin clients? Many IT managers use preconfigured or so-called fat clients, but often don't realise how advantageous thin clients can be. Not only do they offer better protection against security risks, they also allow access to the network from any computer with an internet connection. This means that users are no longer dependent on specially configured laptops.
SonicWall incorporates this thin client technology into its VPN clients – especially in NetExtender for various SonicWall firewalls. In this blog post, you will learn all the important information about NetExtender and other solutions, so that you will know exactly which VPN client best suits your needs.
To understand how SonicWall VPN clients work and their advantages, you first need to know the difference between a fat client and a thin client. Fat clients are standalone computers that run applications locally. Thin clients, on the other hand, are network computers that provide access to data and resources on the network. While the fat client handles processing, the thin client enables interaction with the user.
Fat client:
Thin client:
NetExtender operates at the SSL VPN level and enables secure, seamless network access to files and other resources. These can be both uploaded and downloaded. NetExtender also improves usability by reducing management costs and the time required for maintenance and administration. Unlike a fat client, NetExtender automatically establishes a connection with every application in the corporate network. This significantly expands the capabilities of the SonicWall SMA 100 and firewalls by enabling secure resource access.
Each remote user is granted Layer 3 access to the protected network. The user is assigned an IP address from a predefined pool, enabling access to all TCP/IP-based resources. In addition, secure point-to-point access is established to every authorised host or subnet in the internal network. The connection on the client computer remains active even after the session is closed (resident).
NetExtender is compatible with TZ firewalls, NSa series firewalls, NSsp series firewalls and NSv series firewalls.
SonicWall offers various VPN clients that meet different requirements depending on the company and virtual appliance. Below, we present the VPN clients and their compatibilities so that you can ensure secure access to your resources.
Mobile Connect
Mobile Connect allows you to protect your company data from mobile security threats. The solution is available for iOS, macOS, Android and Chrome OS devices and enables easy mobile access. Mobile Connect also impresses with its user-friendliness and high configurability, including detailed policies based on the respective context.
Mobile Connect is compatible with TZ firewalls, NSa series firewalls, NSsp series firewalls, NSv series firewalls and the SMA-1000 series.
Connect Tunnel
Connect Tunnel enables unrestricted and secure access to confidential company data when working remotely. This thin client supports IT-managed Mac, Windows and Linux users. For Windows 10 users, Connect Tunnel Device Guard (Windows server component) is also available, enabling authorised and fast access.
Connect Tunnel is compatible with the SMA-1000 series.
Global VPN Client (GVC)
The Global VPN Client (GVC) enables secure access to the corporate data centre with a familiar remote VPN experience. It is a classic, client-based VPN that can be used flexibly as an IPSec or SSL endpoint.
The Global VPN Client is compatible with TZ firewalls, NSa series firewalls, NSsp series firewalls and NSv series firewalls.
| VPN Client | Type | Special features | Compatible devices | Suitable for |
|---|---|---|---|---|
| NetExtender | Thin Client (SSL VPN) |
|
TZ, NSa, NSsp, NSv, SMA 100 | Remote users who flexibly access the company network from Windows or Linux devices |
| Mobile Connect | Thin Client (SSL VPN, mobile optimised) |
|
TZ, NSa, NSsp, NSv, SMA 1000 | Employees with mobile devices (smartphones, tablets, notebooks on the go) |
| Connect Tunnel | Thin Client (SSL VPN) |
|
SMA 1000 | Companies with many remote employees who need full access to internal resources |
| Global VPN-Client (GVC) | Fat Client (IPSec/SSL) |
|
TZ, NSa, NSsp, NSv | Scenarios with managed devices, especially if IPSec is preferred or only a few remote users are involved |
Whether NetExtender, Mobile Connect, Connect Tunnel or the classic Global VPN client, every SonicWall VPN client has its strengths and areas of application.
Our tip: There is no ‘one-size-fits-all’ client. Choose the VPN client that exactly matches the requirements of your employees and your IT infrastructure and benefit from security and flexibility every time you access your network. Are you unsure which VPN client is right for your business? Contact us, we will be happy to advise you and work with you to find the right solution. We not only offer SonicWall firewalls, but also a wide selection of access points, switches and licences.
