Manage Access Tier - SonicWall Cloud Secure Edge Documentation

Home
Documentation
API Guide

Get Started

Set Up Remote Access

Block Malicious Internet Content

Protect SaaS Apps

Check Devices' Security Posture

Learn Cloud Secure Edge

What is Cloud Secure Edge?

How Cloud Secure Edge Works

Deployment Models

Connection Methods

How Traffic Is Routed

Zero Trust Policies

Platform Components

Desktop App

Register the Desktop App & Supported OSs

Desktop App Walk-through

Desktop App Capabilities and Components

Troubleshooting the Desktop App

Uninstall desktop app on multiple devices

Event Hooks

Event Hooks Implementation Guide

Device Certificates

Data Privacy and Security

Mobile App

Register the Mobile App & Supported OSs

Accessing Services and Networks via the Mobile App

Mobile App Troubleshooting

Chrome Extension

Access Tier

Install

AWS CloudFormation

Deploy

Manage

Status Reporting

Troubleshooting

Netagent Binary

Key Capabilities and Features

VM Tuning Notes

Connector

Install

Tarball Installer

Docker Container

Windows Executable

SonicOS Firewall as a Connector

Manage

Monitoring and Troubleshooting the OVA Connector

Set up High Availability

Edge Network

Points of Presence (PoP)

Command Center

Tokens & Certificates

Cluster

Activate Cloud Secure Edge

MySonicWall

Activation Steps

Unified Management

Secure Resources

Networks

DNS and Routing for Service Tunnels

Publish a Service Tunnel

Network-level (Layer-4) Policies

Connect on Login

Trusted Networks

Service Tunnel Active Connections

Enable NRPT Rules

Service Tunnel Access Logs

Notes on Service Tunnels

Alternative Routing to Public Resources

Service Tunnel Troubleshooting

Loss of Connectivity on a Restrictive Public Network

Loss of Connectivity and Trouble Restarting the Connection

Slow performance or requests timing out due to MTU value

Domain Resolution Failing on Firewall Connector

Hostname Searches Not Resolving

Private Resources

DNS and Routing for Published Services

Attribute Variables

Hosted Websites

Publish a Hosted Website to Users

Use Let's Encrypt Certificates

Service Accounts

Multi-domain (Wildcard) Web Services

Cross-origin Resources (CORS)

API-level (Layer-7) Policies

Notes on Hosted Websites

Linux Servers (SSH)

Individual SSH Server

SSH Certificate Authn

Collection of SSH Servers

Kubernetes API

Kubernetes API Server

Windows Servers (RDP)

Collection of RDP Servers

Individual RDP Server

Generic TCP Services

Publish a Generic TCP Service to Users

Collection of TCP Services

Notes on TCP Services

Multi-domain (Wildcard) TCP Services

Public Applications

IP Allowlisted SaaS Apps

Okta

Entra ID

OneLogin

Duo

IdP Federated SaaS Apps

Publish a Federated SaaS App

Okta

Entra ID

OneLogin

Duo

Google Workspace

Internet Traffic

ITP Architecture

ITP Policy Concepts

Manage ITP Policies

Enable Risk-based URL Filtering

Malware Download Inspection

Zero Touch Chrome Enrollment for ITP

ITP Troubleshooting

Blocked access to websites when using Microsoft Edge and URL Filtering

Private domains failing to resolve in SIA-only orgs

Manage Access Policies

Access Policies

Policy Examples

Notes on Policy Enforcement

Content Policies

Trust Scoring

Trust Calculation

Trust Score Settings

Trust Factors

Application Check

Property List Check

Registry Key Check

Disk Encryption

Chrome Version Preview!

Device Geolocation

Firewall

Regular Expression

Trust Integrations

CrowdStrike Integration

SentinelOne Integration

Capture Client Integration

Manage and Monitor Your Org

Manage Users and Devices

Entra ID

Manual Configuration

Configure Device Registration

Enable SCIM for Entra ID

Grant Access to 3rd-Party Contractors Using Entra ID B2B

Entra Licensing for CSE security functions

Active Directory

Enable cert-based MFA

Okta

Enable SCIM for Okta

Google Workspace

Grant Access to 3rd-Party Contractors Using Google Workspace

Other IDPs

OneLogin

Device Managers

Install the Desktop App for Windows (MSI)

Install the Desktop App via Zero Touch Script (EXE)

Distribute Chrome Extension

Intune

Jamf Pro

Kandji

Workspace ONE UEM - Device Identity & Enhanced Trust Scoring

Device Identity Using Pre-Installed Device Certs

Invite Code and Device Enrollment

Registered & Unregistered Devices

Device Trust Verification

Certificate-based Multi-Factor Authentication

Silent Certificate Authentication for User Sessions

Passwordless Authentication

Enable App Auto Update

Enable Event Geolocation

Allowlist CSE app in AV/EDR Solutions

Customization and Support Messaging

Remote Diagnostics

Service Bundles

De-register and Ban Devices

Archive and Delete Users

Manage Admins

One-Time Passcode

Manage API Keys

SAML Single Sign On

Generic SAML2.0

Okta

GSuite

Azure AD

Visibility and Logging

Events

Properties & Definitions

Reporting

Downloadable Reports

Private Resource Discovery

Public Application Discovery

Managing Discovered Public Resources

Create a Custom Public App

More Resources

Changelog

Release Process

Important Notices

API Guide

Terraform Provider

Terraform Import Tool

Python Library and CLI

API Specifications

API Objects

Registered Service

SaaS Application

Role

Policy

Access Tier Advanced Config

Cloud Secure Edge Labs

Certificate Authentication for Databases

MySQL

Advanced SSH Capabilities

Okta SAML Proxy

Licenses

Editions Licenses

Solutions

Home
Platform Components
Access Tier
Manage

Manage Access Tier

Last validated: Jul 24, 2026

Sections

Status Reporting

Troubleshooting

Was this page helpful?

What can we improve on this page?

Thank you for your feedback.

← Previous Datacenter Next → Status Reporting

© 2026. All rights reserved.
Site generated at 2026-07-24-14:03:46 from master-0e0f37a2

Documentation

Concepts
Components
Release Notes

Resources

Quick Start Guides
Solutions
API Guide

Support

SonicWall Support
Community

Esc