(v12.0.9267.40529 started 2025-05-16 20:35:37 on VM2)
VPN Client policy for ClickOnce and local deployment
Following parameters can be managed centrally: - browser - defcmd - server - servercheck - title - update ... only for local deployment, ignored for network deployment (ClickOnce) and one authentication option can be defined (optionally): - sslcc ... optional arguments do not override the definition at the client - radius .. optional arguments do not override the definition at the client - otp ... without arguments - totp ... without arguments - fido2 ... without arguments - oa2 ... optional arguments do not override the definition at the client - sslcc2:sesam ... optional arguments do not override the definition at the client Selection of authentication options at the client can be disabled: - nosslcc - noradius - nootp - nototp - nofido2 - nooa2 - nosesam Addionally following parameter can be defined within ApplicGate.policy: - allowedhosts ... list (separated by ',') of hosts (* as wildcard is allowed), to extend the list of allowed hosts in ApplicGateWebView
The text file ApplicGate.policy must exist. Location of this file for: - ClickOnce (network deployment): Download directory (where the file ApplicGate.application and the directory "Application Files" are located). - Local deployment: Directory where ApplicGate.exe or ApplicGateClient.exe are located. Lines starting with # are treated as comments.
Sample content of ApplicGate.policy: # Policy for ClickOnce deployment server=rsp.mycomp.com:442 servercheck=* ... server certificate must be checked, all issuers are allowed browser=applicgatewebview allowedhosts=*.orf.at,*.hp.com
Remark: The file ApplicGate.policy is cached locally and used in case it cannot be retrieved via the network.
