If you are trying to install Dell SonicWALL NetExtender (it’s a VPN client) on OSX El Capitan, you might run into a situation where it won’t connect to the VPN server and you might see this in the logs.
- Netextender For Mac
- Sonicwall Netextender Client For Mac Os
- Sonicwall Netextender Client For Mac Free
- Sonicwall Netextender Client For Mac Windows 10
SonicWall Mobile Connect is a free app, but requires a concurrent user license on one of the following SonicWall solutions in order to function properly:. SonicWall Next-Generation Firewall appliances including the TZ, NSA, and SuperMassive running SonicOS 5.8.1.0 or higher. Net Extender is deprecated for MAC OS 10.9 (Mavericks) and 10.10 (Yosemite). Support is limited to critical bugs and security vulnerabilities only. Please use SonicWall Mobile Connect instead.
[xml]
10/31/2015 13:09:33.292 [general notice] SSL Connection is ready
10/31/2015 13:09:34.301 [general info] Using new PPP frame encoding mechanism
10/31/2015 13:09:34.302 [general info] Using PPP async mode
10/31/2015 13:09:34.308 [general info] Connecting tunnel…
10/31/2015 13:09:34.308 [general error] ERROR: Pppd is not setuid-root and the invoking user is not root. (3)
10/31/2015 13:09:34.308 [general fatal] Please delete and reinstall NetExtender, or run ‘chmod u+s /usr/sbin/pppd’ as an administrator.
10/31/2015 13:09:34.308 [general notice] SSL VPN logging out…
10/31/2015 13:09:35.094 [general notice] SSL VPN connection is terminated.
[/xml]
10/31/2015 13:09:33.292 [general notice] SSL Connection is ready
10/31/2015 13:09:34.301 [general info] Using new PPP frame encoding mechanism
10/31/2015 13:09:34.302 [general info] Using PPP async mode
10/31/2015 13:09:34.308 [general info] Connecting tunnel…
10/31/2015 13:09:34.308 [general error] ERROR: Pppd is not setuid-root and the invoking user is not root. (3)
10/31/2015 13:09:34.308 [general fatal] Please delete and reinstall NetExtender, or run ‘chmod u+s /usr/sbin/pppd’ as an administrator.
10/31/2015 13:09:34.308 [general notice] SSL VPN logging out…
10/31/2015 13:09:35.094 [general notice] SSL VPN connection is terminated.
[/xml]
If you then try to do as the logs say, you won’t be able to do it.
Netextender For Mac
[xml]
$ sudo chmod u+s /usr/sbin/pppd
Password:
chmod: Unable to change file mode on /usr/sbin/pppd: Operation not permitted
[/xml]
$ sudo chmod u+s /usr/sbin/pppd
Password:
chmod: Unable to change file mode on /usr/sbin/pppd: Operation not permitted
[/xml]
Apparently, there is a new feature called ‘System Integrity Protection‘ in OSX El Capitan, which restricts the root account to do perform certain actions.
System Integrity Protection is a security technology in OS X El Capitan that’s designed to help prevent potentially malicious software from modifying protected files and folders on your Mac.
In OS X, the “root” user account previously had no permission restrictions and could access any system folder or application on your Mac. Software gained root-level access when you entered your administrator name and password to install it and could then modify or overwrite any system file or application.
System Integrity Protection restricts the root account and limits the actions that the root user can perform on protected parts of OS X.
So, in order to fix the issue at hand, the System Integrity Protection (SIP) must be disabled first, then NetExtender must be installed and SIP must then be enabled back again. Here is MacWorld’s article on how to do it. Basically, these are the steps :-
- Restart your Mac in recovery mode (hold CMD+R during restart)
- Go to Utilities menu and open Terminal and type in the command ‘csrutil disable’
- Restart Mac again and run the command ‘sudo chmod u+s /usr/sbin/pppd’ and then install NetExtender again. Try connecting to VPN and confirm it works this time.
- Restart Mac again in recovery mode and run command ‘csrutil enable’
SIP enabling/disabling might be needed for a lot of other reasons, however, I needed it today to install NetExtender. But the same steps could be followed for any other command that’s been restricted because of this new feature.
UPDATE: 10.9 or above users, use the Sonicwall Mobile Connect app on the Mac App Store (or learn more at Sonicwall Mobile Connect for OS X Mavericks).
Sonicwall Netextender Client For Mac Os
TL;DR: Download from https://sslvpn.demo.sonicwall.com/cgi-bin/welcome. Bobcat mf 516 manual. Follow the admin login instructions, then look for NetExtender / Client Downloads.
![Sonicwall Netextender Client For Mac Sonicwall Netextender Client For Mac](https://itgroove.net/thebeagle/wp-content/uploads/thebeagle/2013/07/SNAGHTML190cb435_thumb.png)
UPDATE: Saved a copy of the DMG at https://hiltmon.com/files/NetExtender-7.5.757.dmg as the normal login seems to be disabled. (WARNING: Link will eventually get stale).
UPDATE 2: Your company can also register and get the latest versions from MySonicwall.com.
Many of us corporate drones need SonicWall’s NetExtender for remote access to our company networks. And the way we get it is to go to the company IP address IT gives us and download it. And then install the Java plugin. And then install the java runtime.
Unfortunately, the version provided by most of these sites is out-of-date as most SonicWall VPN devices never get updated.
In my case, the version of NetExtender for Mac, 6.0.719, on my company SonicWall works on 10.8 Mountain Lion, but fails on OS X 10.9 Mavericks.
One solution is to upgrade all the company SonicWalls. I may as well pack my snowboard for a lovely eternity riding the frozen volcanoes in hell.Yes, and I am the CTO! Still not going to do it.
Sonicwall Netextender Client For Mac Free
The solution that works is to somehow install the latest copy of the NetExtender application without upgrading the SonicWall and I finally found a place that actually allows you to download it.
Sonicwall Netextender Client For Mac Windows 10
Their demo site.
Just go to https://sslvpn.demo.sonicwall.com/cgi-bin/welcome and log in using the provided demo password. Then click the big NetExtender button to install the latest client version, just like you did on your IT provided site. I got 7.0.752. Which works on OS X Mavericks.
Be aware though that once that is installed and running, you will find yourself connected to the demo site, not your company network. Simply disconnect, hit the dropdown arrow to choose your old NetExtender settings and connect happily/slavishly to your company network.
Back to work.
Follow the author as @hiltmon on Twitter and @hiltmon on App.Net. Mute
#xpost
on one.