Installing the Stormshield SSL VPN client

This section explains how to install the Stormshield SSL VPN client for Linux in command line interface.

Installing in Ubuntu

  1. Install the Stormshield SSL VPN client:

    sudo apt install ./<filename>

    • Replace <filename> with the name of the .deb package downloaded earlier.
    • With the apt tool, you have to provide the file path of the package to be installed. In the example, ./ indicates that the package is available in the current folder.

  2. Ensure that the Icon of the Stormshield SSL VPN client version 5 icon of the Stormshield SSL VPN client appears in the system tray. With the default desktop environment, the icon automatically appears once the Stormshield SSL VPN client is running.

    If you have changed the configuration of the default desktop environment, or if you are using a different environment, you will need to enable certain options or install an additional package to display the icon. For more information, refer to the documentation on the selected desktop environment.

  3. If the OpenVPN gateway on the SNS firewall provides a specific DNS configuration to use, the configuration is not natively applied by OpenVPN under Linux. You will need a local solution that can apply it.

    For example, if you use the default DNS resolution manager systemd-resolved:

    1. Install the package openvpn-systemd-resolved:

      sudo apt install openvpn-systemd-resolved

    2. Create symbolic links so that the Stormshield SSL VPN client can use the script contained in this package when opening and closing SSL VPN connections. Comply with the location and script names specified in the commands below.

      sudo ln -s /etc/openvpn/update-systemd-resolved /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_connect.sh
      sudo ln -s /etc/openvpn/update-systemd-resolved /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_disconnect.sh

Installing in Red Hat Enterprise Linux (RHEL)

  1. Manually add a repository to provide the openvpn dependency, which is not available by default in RHEL. For example, you can add the EPEL (Extra Packages for Enterprise Linux) repository:

    sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
    sudo dnf update -y

  2. Install the Stormshield SSL VPN client:

    sudo dnf install ./<filename>

    • Replace <filename> with the name of the .rpm package downloaded earlier.
    • With the dnf tool, you have to provide the file path of the package to be installed. In the example, ./ indicates that the package is available in the current folder.

  3. Ensure that the Icon of the Stormshield SSL VPN client version 5 icon of the Stormshield SSL VPN client appears in the system tray. With the default desktop environment, you need to install and configure a package that allows the icon to be displayed, such as the gnome-shell-extension-appindicator package.

    If you are using a different desktop environment, refer to its documentation on how to display the icon.

  4. If the OpenVPN gateway on the SNS firewall provides a specific DNS configuration to use, the configuration is not natively applied by OpenVPN under Linux. You will need a local solution that can apply it.

    You can, for example, use a script equivalent to the one in the openvpn-systemd-resolved package on Ubuntu.

    Once you have the script, you need to create symbolic links so that the Stormshield SSL VPN client can use it when opening and closing SSL VPN connections. Stormshield SSL VPN client scripts have to be placed in the location below and named as follows:

    /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_connect.sh
    /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_disconnect.sh