New features and enhancements in version 5.1.1 EA

New graphical user interface and enhanced user experience

The Stormshield VPN SSL client version 5 graphical interface has been redesigned, and user experience has been enhanced:

"Automatic mode" is now known as "Stormshield mode". This mode allows the Stormshield SSL VPN client to automatically retrieve a connection's SSL VPN configuration over the SNS firewall, and to send information that enables the firewall to verify the client workstation's compliance (ZTNA).
The "Address book" is now named "Saved connections".
- You can save connections here, either by entering information of the SNS firewall in "Stormshield Mode", or by importing an OVPN file.
- You can mark each connection as a favorite. The list of favorite connections is accessible via the Stormshield SSL VPN client graphical interface, and through the pop-up menu of the Stormshield SSL VPN client icon.
- You can enable an option to automatically set up the SSL VPN connection of your choice each time the Stormshield SSL VPN Client is opened. However, a manual action is still required if the access to saved connections is password-protected, or if an OTP code must be entered.
A new menu named "Direct connection" makes it possible to connect via SSL VPN without having to save a connection in the Stormshield SSL VPN client. In this menu, "Stormshield mode" and the OVPN file import feature can be used.
A new menu named "Connection logs" makes it possible to look up connection events on the Stormshield SSL VPN client, such as "Connection established", "Connection lost", "Server unreachable", etc.
The pop-up menu of the Stormshield SSL VPN client icon has been redesigned. In this menu, you can display the last connection used, or the list of favorite connections, and set up SSL VPN connections by clicking on the desired connection.

For more information, refer to the Stormshield SSL VPN client v5 user and configuration guide.

Extended compatibility

The Stormshield SSL VPN client in version 5.1.1 EA can be installed on the following operating systems:

Windows: Windows 10 (x64) and Windows 11 (x64).
Linux:
- Ubuntu Desktop 22.04 LTS (amd64) and Ubuntu Desktop 24.04 LTS (amd64),
- RHEL 8 (amd64) and RHEL 9 (amd64). The Stormshield SSL VPN client in RHEL 8 requires the installation of an OpenVPN package in at least version 2.5.
macOS: macOS Sonoma 14 (arm64) M1 and later models, and macOS Sequoia 15 (arm64) M1 and later models.

This list may change over time, depending on the life cycle of the above operating systems, and the versions mentioned. Always refer to the SSL VPN Client section of the Network Security & Tools product life cycle document, which is the reference page for compatibility with the Stormshield SSL VPN client.

Single sign-on support

Single sign-on is supported as of version 5 of the Stormshield SSL VPN client. This allows users to authenticate over an authentication portal, and allows them to set up SSL VPN connections with a compatible SNS firewall.

Users can authenticate:

Either over the SNS firewall’s captive portal, for example with their Active Directory identity and password,
Or over the authentication portal of an identity-as-a-service (IDaaS) platform like Microsoft Entra ID solution.

For single sign-on to function:

The Stormshield SSL VPN client must be configured to use this connection mode by selecting the Connect with single sign-on checkbox in a connection's settings or in the Direct connection menu. For more information, refer to the Stormshield SSL VPN client v5 user and configuration guide.
The SNS firewall used for the connection must be version 5.0.1 or higher.
For authentication using the OIDC/Microsoft Entra ID method, the method must be enabled and configured on the SNS firewall.

New organization of Stormshield SSL VPN client documentation

Stormshield SSL VPN client documentation is now split up into two guides:

Previously, a single document explaining installation, configuration and the use of the Stormshield SSL VPN Client was available.