Manage Access Tier - SonicWall Cloud Secure Edge Documentation

Home
Documentation
Use Cases
Troubleshooting
API Guide

Get Started

Overview

How Cloud Secure Edge Works

Client & Clientless

Deployment Models

Intelligent Routing

Zero Trust Policies

Get Help from SonicWall Support

Quick Starts

Reach a Resource on Your Network

Filter Internet Content

Use Cases

Replace Your Legacy VPN

Block Malicious Internet Content

Protect SaaS Apps

Check Devices' Security Posture

Control Shadow AI and Shadow IT

Solution Guides

Integrations

Automation

Terraform on AWS

Terraform on Azure

Business Apps

Cloud Infrastructure

AWS Application Load Balancer

AWS Relational Database Service

Dev Tools

Confluence, self-hosted

Confluence, SaaS

GitLab, self-managed browser access

GitLab, self-managed Git operations

HashiCorp Vault

Identity and Security

Okta device trust

Okta SAML proxy

Server Access

Apache Guacamole

Deploy Guacamole

Configure the primary admin

Migrations

Migrate from Cisco Umbrella

Replace an SSH Bastion Host

Other

Continuous Authorization

Remote Access to a Home Lab

Learn Cloud Secure Edge

Platform Components

Edge Network

Points of Presence (PoP)

Access Tier

Netagent Key Capabilities and Features

Desktop App

Desktop App Walk-through

Desktop App Capabilities and Components

Event Hooks

Event Hooks Implementation Guide

Device Certificates

Data Privacy and Security

Mobile App

Accessing Services and Networks via the Mobile App

Chrome Extension

Command Center

Cluster and Private PKI

How CSE Manages Your Cluster

Activate Cloud Secure Edge

MySonicWall

Activate Cloud Secure Edge

Unified Management

How Unified Management Is Organized

CSE Licensing and Activation Keys

Start a CSE Free Trial

Renew, Upgrade, or Downgrade a License

Provision and Manage a Monthly Subscription

How Monthly Billing Works

Co-terminate CSE Licenses

Licenses

Editions Licenses

Deploy Cloud Secure Edge

Install a Connector

Tarball Installer

Docker Container

Windows Executable

SonicOS Firewall as a Connector

Install an Access Tier

AWS CloudFormation

Deployment Models

Simple

IaaS

Netagent Binary

VM Tuning Notes

Deploy the Desktop App

Install for Windows (MSI)

Install via Zero Touch Script (EXE)

Roll Out with a Device Manager

Intune

Jamf Pro

Kandji

Workspace ONE UEM

Pre-Installed Device Certs

Uninstall on Multiple Devices

Deploy the Mobile App

Deploy the Chrome Extension

Zero Touch Chrome Enrollment for ITP

Set Up Users and Devices

Set Up an Identity Provider

Entra ID

Manual Configuration

Configure Device Registration

Enable SCIM for Entra ID

Grant Access to 3rd-Party Contractors Using Entra ID B2B

Entra Licensing for CSE security functions

Active Directory

Enable cert-based MFA

Okta

Enable SCIM for Okta

Google Workspace

Grant Access to 3rd-Party Contractors Using Google Workspace

Authentication Methods

Passwordless Authentication

Certificate-based Multi-Factor Authentication

Silent Certificate Authentication for User Sessions

Time-based One-Time Passcode for Admins

Device Enrollment and Trust

Invite Code and Device Enrollment

Managed, Registered, and Unregistered Devices

Device Trust Verification

Desktop App Settings

App Auto Update

Event Geolocation

Allowlist the CSE App in AV and EDR Solutions

Branding and Message Customization

Service Bundles

Update and Manage CSE Desktop App Versions

Collect Remote Diagnostics

User and Device Lifecycle

Manage Users & Devices Inventory

De-register, Ban and Unban Devices

Archive and Delete Users

Manage Access Policies

Trust Scoring

Trust Calculation

Trust Score Settings

Trust Factors

Application Check

Property List Check

Registry Key Check

Disk Encryption

Chrome Version Preview!

Device Geolocation

Firewall

Regular Expression

Trust Integrations

CrowdStrike Integration

SentinelOne Integration

Capture Client Integration

Access Policies

Policy Examples

Notes on Policy Enforcement

Secure Your Resources

Networks

DNS and Routing

Publish a Service Tunnel

Network-level (Layer-4) Policies

Connect on Login

Control Remote Access Sessions

Trusted Networks

Service Tunnel Active Connections

Enable NRPT Rules

Service Tunnel Access Logs

Notes on Service Tunnels

Alternative Routing to Public Resources

Control Remote Access Sessions

Private Resources

DNS and Routing

Attribute Variables

Hosted Websites

Publish a Hosted Website to Users

Use Let's Encrypt Certificates

Service Accounts

Multi-domain (Wildcard) Web Services

Cross-origin Resources (CORS)

API-level (Layer-7) Policies

Notes on Hosted Websites

Linux Servers (SSH)

Individual SSH Server

SSH Certificate Authn

Collection of SSH Servers

Kubernetes API

Kubernetes API Server

Windows Servers (RDP)

Collection of RDP Servers

Individual RDP Server

Generic TCP Services

Publish an Generic TCP Service to Users

Collection of TCP Services

Notes on TCP Services

Multi-domain (Wildcard) TCP Services

Tokens and Certificates

SaaS Apps

IP Allowlisted SaaS Apps

Okta

Entra ID

OneLogin

Duo

IdP Federated SaaS Apps

Publish a Federated SaaS App

IdP Routed SaaS Apps

Okta

Entra ID

OneLogin

Duo

Google Workspace

Internet Traffic

Content Policies

ITP Architecture

Manage ITP Policies

Require Approved Accounts for AI Apps Preview

SWG CA Certificates for Certificate-Pinned Apps

Enable Risk-based URL Filtering

Malware Download Inspection

Require Approved Accounts for AI Apps

SWG CA Certificates for Certificate-Pinned Apps

Monitor and Maintain

Manage Network Infrastructure

Access Tier

Status Reporting

Connector

Set up High Availability

Edge Network IP Ranges

Register Custom Domains

Command Center Tokens & Certificates

Visibility and Logging

Events

Properties & Definitions

Export and Retain Events

Retrieve Events with the API

Reporting

Downloadable Reports

Private Resource Discovery

Public Application Discovery

Managing Discovered Public Resources

Create a Custom Public App

Troubleshooting

Cannot Reach a Resource on the Network

Connection Drops or Will Not Restart

Connection Fails Only on Hotel or Public Wi-Fi

Pages Load Slowly or Only Partly

Hostname Will Not Resolve but the IP Works

Trusted Network Settings Not Taking Effect

Domain Resolution Failing on a Firewall Connector

Long-Running Connections Dropping on a Firewall Connector

A Site Is Blocked That Should Not Be

Sites Blocked Only in Microsoft Edge

Private Domains Will Not Resolve in SIA-only Orgs

Desktop App Will Not Start

Add Organization Option Is Missing

Service Tunnel Will Not Connect on a Restrictive Network

Registration Email or Passcode Not Received

"Error Registering Your Device" on macOS

"Ran Into an Issue Starting One or More Autorun Services"

Device Stuck in a Registration Loop

Access Tier Not Passing Traffic to the Backend

Access Tier Installation Failing

Access Tier Services or Events Missing from the Command Center

Cannot Resolve or Connect to a Service Domain

Access Tier Not Intercepting Traffic

Connector Cannot Reach a Backend Resource

Connector Stuck in SafeMode

Logs and Diagnostics

Where to Find Desktop App Log Files

Send Mobile App Logs to Support

Check Connector Health and WireGuard Status

All OVA Appliance CLI Commands

Resources

Release Process

Important Notices

API Guide

Manage API Keys

Terraform Provider

Terraform Import Tool

Python Library and CLI

API Specifications

API Objects

Registered Service

SaaS Application

Role

Policy

Access Tier Advanced Config

Cloud Secure Edge Labs

Certificate Authentication for Databases

MySQL

Advanced SSH Capabilities

Okta SAML Proxy

Home
Manage Network Infrastructure
Access Tier

Manage Access Tier

Last validated: Aug 3, 2026

Sections

Was this page helpful?

What can we improve on this page?

Thank you for your feedback.

← Previous Manage Network Infrastructure Next → Status Reporting

© 2026. All rights reserved.
Site generated at 2026-10-02-17:32:50 from master-c66b4352

Documentation

Concepts
Components
Release Notes

Resources

Quick Start Guides
Use Cases
Feature Guides
API Guide

Support

SonicWall Support
Community
Send Docs Feedback

Esc