Configure Clavister OneConnect for macOS, iOS and iPadOS towards NetWall

Last modified on 28 Apr, 2023. Revision 16
This is a quick start guide for how to configure the Clavister OneConnect Version 3 (or later) client towards a Clavister NetWall firewall for e.g. iPhone.
Up to date for
OneConnect 3.0 for macOS, iOS and iPadOS
Supported since
OneConnect 3.0 for macOS, iOS and iPadOS
Status OK
Mattias Nordlund

What is Clavister OneConnect?

Clavister OneConnect provides users full network-level access to corporate resources over encrypted SSL VPN connections. Using Apple’s Packet Tunnel Provider Network Extension, the OneConnect client provides anytime, anywhere access to critical applications such as email, virtual desktop sessions and other applications protected by a NetWall Firewall. Combined with Clavister OneTouch, it also offers a simple way to use two factor authentication (2FA).


The Clavister OneConnect client is a free app and is intended to connect to a Clavister NetWall Next-Generation Firewall (NGFW) running Clavister cOS Core 13.00.09 or later in order to function properly.

Installing the Clavister OneConnect Client

The OneConnect Version 3 client can be downloaded from the Apple App Store and is available for macOS, iOS and iPadOS.

Connecting using the Clavister OneConnect client

Start the client. The example below shows the client running on macOS. Click VPN Configurations to create a new configuration.

Give your VPN Configuration a name, then enter the hostname and credentials needed to connect.

Note: The hostname entered must be the same as the Subject Alternative Name (SANoptions in the certificate used by the OneConnect Interface in the cOS Core configuration on the firewall.

When that is done, save the configuration and allow OneConnect to add a VPN Configuration to the system.

The new VPN Configuration will be selected as the the default. To establish the VPN tunnel just click Connect.

When a VPN tunnel is successfully established, the logo will turn green. To see more information about the connection click the icon.

How to use Widgets

Clavister OneConnect includes widgets for macOS, iOS and iPadOS. The example below is from macOS.

Se the following guides from Apple on how to add and remove widgets on macOS, iOS and iPadOS:

Related articles

Brian Smart Search (Beta)
15 Jan, 2024 dictionary troubleshoot core stream incontrol incenter oneconnect cloudservice
Configure Clavister OneConnect using deep links
13 Jun, 2022 oneconnect macos ios windows android
Configuring public certificates in NetWall firewalls
18 Mar, 2024 core certificate oneconnect ipsec vpn
Configure the Android OpenConnect client towards Clavister NetWall
23 Aug, 2022 sslvpn openconnect oneconnect android core
Configure Clavister OneConnect for Windows towards Clavister NetWall
29 Oct, 2021 sslvpn openconnect oneconnect windows
Lets Encrypt - error 9814 - chain had an expired certs
13 Oct, 2021 oneconnect macos openconnect ios
Certificate update in InControl global domain on certificate that is used on firewall(s)
18 Mar, 2024 core incontrol certificate oneconnect ipsec vpn
Configure Linux OpenConnect towards Clavister NetWall
5 Mar, 2021 sslvpn openconnect oneconnect linux core
Configuring SSL-VPN / OneConnect server on secondary Firewall IP address
8 Apr, 2021 core sslvpn oneconnect interfaces arp
OneConnect VPN certificate not trusted
18 Mar, 2024 onetouch sslvpn oneconnect troubleshoot certificate
Install OneConnect without Microsoft store
25 Feb, 2022 oneconnect windows howto
Howto - Userbased rules
27 Feb, 2024 oneconnect userbased core
Changing the certificate used by the OneConnect client/server
28 Nov, 2022 core configuration oneconnect
Clavister OneConnect server using cOS Core as CA Server
11 May, 2023 oneconnect certificate howto
Configure the OpenConnect-GUI client towards Clavister NetWall
23 Aug, 2022 sslvpn openconnect oneconnect macos windows linux core