User Guide

Welcome aboard, and thank you for choosing SafeConnect!

INFO: This is where we tell you what we're going to tell you.

On this page you will learn how to:

  • Download and install your VM

  • Run through some initial configurations steps

  • Understand how to get help and support

  • Get started on your deployment

  • OPTIONAL: Access training guides and other resources that might be useful

Download and Install Your SafeConnect VM

CRITICAL: Please follow these instructions to download and configure the SafeConnect VM.

  1. Download the SafeConnect image that matches chosen license count:

  2. Follow the instructions in the VM Deployment Guide to install and configure SafeConnect in the admin's virtual environment.

Initial Configuration

CRITICAL: Make sure you have ALL these boxes checked before you go live!

Email safeconnect@opswat.com to get help with any of these steps!
Subject: Initial Configuration Help

  1. DHCP syslog

    • If you use BlueCat or another Linux-based DHCP server(s), you can usually point standard syslog output to port 514 on the SafeConnect VM’s internal IP.

    • If you use Windows DHCP, please follow the step-by-step instructions here: DHCP Syslog Service Installation and Configuration

    • Note: Without DHCP syslog for all managed devices, users may need to authenticate more often than you’d like!

  2. DHCP requests

    • For each VLAN you will manage with SafeConnect, please add a NEW ip-helper statement pointed to the SafeConnect VM’s internal IP.

    • This will be in addition to any existing ip-helper statements. Users will continue to get DHCP from your usual server(s), but SafeConnect will now also see a copy of each request.

    • Note: Without DHCP requests, SafeConnect will not be able to identify mobile devices or other BYOD endpoints connecting to your network!

  3. Authentication

    • Use the following link to get SafeConnect talking to your AD or LDAP directory server(s): DHCP Syslog Service Installation and Configuration

    • This step is critical when setting up captive portal authentication for your internal BYOD users!

    • This will also provide Single Sign On for your dot1x and secure wireless users.

OPTIONAL: You could get a jump on these if you like, but but feel free to skip them if they don't make sense.

Email safeconnect@opswat.com to get help with any of these steps!
Subject: Network Configuration Help

  1. Set up the SafeConnect RADIUS Server:

  2. Check out our Network Integration Guides for Layer 2 and Layer 3 enforcement

Register for Support

CRITICAL: Do these steps before you do anything else!

1. Support Process

Get Your Deployment Calls Started

Email safeconnect@opswat.com to schedule your first deployment call.
Subject: Deployment Kickoff Call

Explore other resources

OPTIONAL: Check out our Admin and UI Guides, Troubleshooting Resources, and other helpful tools.

3. Training Guides and Knowledge Base