Manage Access Tier - SonicWall Cloud Secure Edge Documentation

Home
Docs
Solutions
API Guide

SonicWall Cloud Secure Edge

How Cloud Secure Edge Works

Client & Clientless

Deployment Models

Intelligent Routing

Zero Trust Policies

Getting Started Guide

Set Up Remote Access

Block Malicious Internet Content

Protect SaaS Apps

Check Devices' Security Posture

Solutions

Components

Desktop App

Register the Desktop App & Supported OSs

Desktop App Walk-through

Desktop App Capabilities and Components

Troubleshooting the Desktop App

Uninstall desktop app on multiple devices

Device Certificates

Data Privacy and Security

Mobile App

Register the Mobile App & Supported OSs

Accessing Services and Networks via the Mobile App

Mobile App Troubleshooting

Chrome Extension

Access Tier

Install

AWS CloudFormation

Deploy

Manage

Status Reporting

Troubleshooting

Netagent Binary

Key Capabilities and Features

VM Tuning Notes

Connector

Install

Tarball Installer

Docker Container

Windows Executable

Manage

Monitoring and Troubleshooting the OVA Connector

Set up High Availability

Edge Network

Points of Presence (PoP)

Command Center

Tokens & Certificates

Cluster

Secure Connectivity

Networks

DNS and Routing

Publish a Service Tunnel

Network-level (Layer-4) Policies

Connect on Login

Trusted Networks

Service Tunnel Active Connections

Enable NRPT Rules

Service Tunnel Access Logs

Notes on Service Tunnels

Alternative Routing to Public Resources

Service Tunnel Troubleshooting

Loss of Connectivity on a Restrictive Public Network

Loss of Connectivity and Trouble Restarting the Connection

Slow performance or requests timing out due to MTU value

Domain Resolution Failing on Firewall Connector

Hostname Searches Not Resolving

Private Resources

DNS and Routing

Attribute Variables

Hosted Websites

Publish a Hosted Website to Users

Use Let's Encrypt Certificates

Service Accounts

Multi-domain (Wildcard) Web Services

Cross-origin Resources (CORS)

API-level (Layer-7) Policies

Notes on Hosted Websites

Linux Servers (SSH)

Individual SSH Server

SSH Certificate Authn

Collection of SSH Servers

Kubernetes API

Kubernetes API Server

Windows Servers (RDP)

Collection of RDP Servers

Individual RDP Server

Generic TCP Services

Publish an Generic TCP Service to Users

Collection of TCP Services

Notes on TCP Services

Multi-domain (Wildcard) TCP Services

Tokens and Certificates

Public Applications

IP Allowlisted SaaS Apps

Federated SaaS Apps

Publish a Federated SaaS App

Okta

Okta IDP Federation

Okta IP Allowlisting

Entra ID

Entra ID IDP Federation

Entra ID IP Allowlisting

OneLogin

OneLogin IDP Federation

Internet Traffic

ITP Architecture

Manage ITP Policies

Enable Risk-based URL Filtering

Zero Touch Chrome Enrollment for ITP

ITP Troubleshooting

Blocked access to websites when using Microsoft Edge and URL Filtering

Private domains failing to resolve in SIA-only orgs

Policy Controls

Trust Calculation

Trust Score Settings

Trust Factors

Application Check

Property List Check

Registry Key Check

Disk Encryption

Chrome Version Preview!

Device Geolocation

Firewall

Regular Expression

Trust Integrations

CrowdStrike Integration

SentinelOne Integration

Capture Client Integration

Access Policies

Policy Examples

Notes on Policy Enforcement

Content Policies

Internet Threat Protection

Administer Cloud Secure Edge

Manage Users and Devices

Entra ID

Manual Configuration

Configure Device Registration

Enable SCIM for Entra ID

Grant Access to 3rd-Party Contractors Using Entra ID B2B

Entra Licensing for CSE security functions

Active Directory

Enable cert-based MFA

Okta

Enable SCIM for Okta

Google Workspace

Other IDPs

OneLogin

Device Managers

Distribute Desktop App

Distribute Chrome Extension

Intune

Jamf Pro

Kandji

Workspace ONE UEM - Device Identity & Enhanced Trust Scoring

Device Identity Using Pre-Installed Device Certs

Registered & Unregistered Devices

Device Trust Verification

Silent Certificate Authentication for User Sessions

Enable Event Geolocation

Allowlist CSE app in AV/EDR Solutions

Customization and Support Messaging

Remote Diagnostics

Service Bundles

De-register and Ban Devices

Archive and Delete Users

Passwordless Authentication

One-Time Passcode

Manage API Keys

SAML Single Sign On

Generic SAML2.0

Okta

GSuite

Azure AD

Visibility and Logging

Events

Properties & Definitions

Reporting

Downloadable Reports

Private Resource Discovery

More Resources

Client Changelog

Server Changelog

Release Process

Important Notices

Release Notes Archive

API Guide

Terraform Provider

Terraform Import Tool

Python Library and CLI

API Specifications

API Objects

Registered Service

SaaS Application

Role

Policy

Access Tier Advanced Config

Cloud Secure Edge Labs

Certificate Authentication for Databases

MySQL

Advanced SSH Capabilities

Okta SAML Proxy

Licenses

Editions Licenses

Home
Components
Access Tier

Manage Access Tier

Updated on

Sections

Status Reporting

Troubleshooting

© 2026. All rights reserved.
Site generated at 2026-04-02-20:37:32 from master-8cdfe762

Links

Concepts
Components
Release Notes

Guides

Quick Start Guides
Solutions
Feature Guides
API Guide