Dell SonicWALL Secure Mobile Access 8.5Administration Guide9249End Point ControlThis section provides information and configuration tasks specific to the End Point Control pages on the DellSonicWALL Secure Mobile Access web-based management interface.Topics:• Configuring End Point Control on page 249• End Point Control > Device Profiles on page 250• Users > Local Groups > Edit EPC Settings on page 251• Users > Local Users > Edit EPC Settings on page 253• End Point Control > Status on page 256• End Point Control > Settings on page 257• End Point Control > Log on page 258Configuring End Point ControlIn traditional VPN solutions, accessing your network from an untrusted site like an employee-owned computeror a kiosk at an airport or hotel increases the risk to your network resources. The SMA/SRA appliance providessecure access from any Web-enabled system, including devices in untrusted environments. Secure Mobile Accesssupports End Point Control (EPC), a default service available on SMA 400/200, SRA 4600/1600, and SMA 500vVirtual Appliance.EPC verifies that the user’s environment is secure before establishing a connection. EPC protects sensitive dataand ensures that your network is not compromised when accessed from devices in untrusted environments. EPCalso protects the network from threats originating from client devices participating in the SMA/SRA.EPC is checked when users log in to the web portal from a web browser that blocks any access to the privatenetwork from untrusted sites. The EPC portal checking process uses the browser plug-ins on your system.EPC is supported on iOS and Android mobile devices using Mobile Connect, allowing device profiles to becreated for these mobile devices. This provides security protection from threats against client devices andprotection to the SMA/SRA appliance from threats originating from client devices participating in the SSL VPN.For more information on Mobile Connect, refer to the Mobile Connect User Guides.Secure Mobile Access provides these end point security controls by completing host integrity checking andsecurity protection mechanisms before a tunnel session is begun. Host integrity checks help ensure that theclient system is in compliance with your organization’s security policy. Dell SonicWALL end point securitycontrols are tightly integrated with access control to analyze the client system and apply access controls basedon the results.EPC supports the Windows, Linux, and Mac NetExtender client. It also supports Mobile Connect for iOS, Android,OSX, Windows Phone, and Windows Next. For Web Portal login, EPC is supported only on Windows platforms.EPC enhancements are supported on the Dell SonicWALL SMA 400/200, SRA 4600/1600, and SMA 500v VirtualAppliance platforms.NOTE: When the EPC feature is active other features might run slower because of the increased traffic.
