TheGreenBow VPN Client

1 Property of TheGreenBow 2016 TheGreenBow VPN Client User Guide TheGreenBow VPN Client User Guide June 2016 TheGreenBow VPN Client 2 Property of TheGreenBow 2016 Table of Contents 1 Presentation .. 4 The Universal VPN Client .. 4 Full compatibility with PKI .. 4 VPN security policies .. 5 TheGreenBow VPN Client features .. 5 Specifications .. 5 2 Installation .. 6 Installation .. 6 Evaluation period .. 6 3 8 Step 1 .. 8 Step 2 .. 8 Activation errors .. 8 Manual activation.

2 9 Temporary license .. 11 License and activated software .. 11 4 Software update .. 12 How to obtain an update .. 12 Update of VPN security policy .. 13 Automation .. 13 5 Uninstalling .. 14 6 Quick use cases .. 15 Opening a VPN Tunnel .. 15 Configuring a VPN tunnel .. 15 Setting the automatic opening of a VPN tunnel .. 16 7 VPN Configuration Wizard .. 17 8 User Interface .. 21 Overview .. 21 Windows Desktop .. 21 Taskbar .. 21 9 Connection 24 10 Configuration Panel .. 26 Menus .. 26 Status bar .. 27 Shortcuts.

3 27 VPN Tunnel tree .. 27 11 "About" window .. 32 12 Import, Export VPN Security Policy .. 33 Import a VPN security policy .. 33 Exporting a VPN security policy .. 34 Merge VPN security policies .. 35 Split VPN security policies .. 35 13 Configure a VPN tunnel .. 36 VPN SSL, IPsec IKEv1 or IPsec IKEv2 .. 36 Modify and save the VPN configuration .. 36 Configure an IPsec IKEv1 VPN tunnel .. 37 TheGreenBow VPN Client User Guide June 2016 TheGreenBow VPN Client 3 Property of TheGreenBow 2016 Configure an IKEv2 IPsec tunnel.

4 48 Configure a SSL VPN tunnel .. 56 14 Redundant Gateway .. 63 15 64 16 IPv4 and IPv6 .. 66 17 Managing Certificates .. 67 Configuration .. 67 Import a certificate .. 69 Using the Windows Certificate Store .. 70 Define a Smartcard or a Token ("Options PKI") .. 70 Use a VPN Tunnel with a Certificate from a Smartcard .. 70 18 Remote Desktop Sharing .. 71 Configuring the Remote Desktop Sharing .. 71 Using the Remote Desktop Sharing .. 71 19 Connection Panel Management .. 72 20 USB Mode .. 73 The VPN USB Mode .. 73 USB Mode settings.

5 73 Use the USB Mode .. 75 21 GINA Mode .. 77 GINA Mode .. 77 Configuring the GINA Mode .. 77 Using the GINA Mode .. 77 22 Access control to the VPN security policy .. 79 23 Options .. 80 Access Control .. 80 Hide menus .. 80 General .. 80 Options IGC / PKI .. 81 Managing languages .. 81 24 Console and Trace Mode .. 83 Console .. 83 Trace Mode .. 83 25 Recommendations for Security .. 85 General recommendations .. 85 VPN Client administration .. 85 Configuring VPN security policy .. 85 26 Contact .. 87 Information.

6 87 Sales .. 87 Support .. 87 27 Annexes .. 88 Shortcuts .. 88 Languages .. 88 TheGreenBow VPN Client specifications .. 89 Credits and Licenses .. 92 TheGreenBow VPN Client User Guide June 2016 TheGreenBow VPN Client 4 Property of TheGreenBow 2016 1 Presentation The Universal VPN Client TheGreenBow VPN Client is a VPN Client software designed for any Windows workstation or laptop. It establishes a connection, and guarantees a secure communication with the information system of the company. TheGreenBow VPN Client is universal and compatible with all IPsec VPN gateways on the market (see the list of qualified VPN gateways).

7 It also helps to establish VPN tunnels in point-to-point connection between two machines equipped with the software. TheGreenBow VPN Client implements IPsec, IKE and SSL standards to be compatible with openVPN Gateway. For most VPN gateways on the market, TheGreenBow provides a configuration guide. To configure your VPN gateway, see the list of configuration guides of VPN gateways. Full compatibility with PKI TheGreenBow VPN Client is fully integrated in all PKI (Public Key Infrastructure). He brings unparalleled flexibility in taking account of certificates and Smartcards: - Compatibility with a wide range of Token and Smartcard (see list of qualified Tokens) - Automatic detection of smartcard and token (PKCS11 or CSP) or storage media (file, Windows certificate store) - Configuring Tokens "on the fly" - Taking into account multi-format certificates (X509, PKCS12, PEM) - Configuring multi-criteria certificates to be used (subject, key usage, ).

8 TheGreenBow VPN Client offers more features with additional security around the PKI management, such as the opening and closing of the tunnel upon insertion and removal of the Smartcard, or the ability to configure the PKI interface and Smartcard in the installer software, to automate deployment. TheGreenBow VPN Client User Guide June 2016 TheGreenBow VPN Client 5 Property of TheGreenBow 2016 VPN security policies TheGreenBow VPN Client provides a high level of security management and the consideration of VPN security policies.

9 The software can be configured when installed to restrict all access VPN security policies the administrator only. The software also allows you to secure the maximum use of VPN security policies, conditioning the opening of a tunnel to the various authentication mechanisms available: X-Auth, TheGreenBow VPN Client features TheGreenBow VPN Client provides several specific features that made the software popular: - Multi-tunnelling: simultaneous VPN tunnels, IKEv1, IKEv2 or SSL - VPN Tunnel stability enhanced mechanisms - VPN USB Mode.

10 Protection of VPN security policy on a removable media - Secured Remote Desktop Sharing - VPN Automations: scripts, automatic tunnel opening, etc. - GINA Mode: VPN tunnel opening before Windows logon - Deployment and integration facilities: customization, setup configuration, etc. Specifications TheGreenBow VPN Client provides the following features: - Ability to support network in IPv4 and IPv6 simultaneously - Ability to create IPsec VPN tunnel using either IKEv1 or IKEv2 - Ability to create VPN tunnel using either IPsec or SSL - Multiple VPN tunnels with a mix of IPsec and SSL - Point-to-point or peer-to-gateway IPsec VPN tunnel - VPN Tunnel on all media types.