MotionPro is the SSL VPN client for Array Networks AG and vxAG gateways, giving remote and mobile users encrypted access to internal applications, desktops, file shares, and networks under the policies their administrator sets.
MotionPro is the client software that connects a device to an Array Networks secure access gateway, delivering TLS-encrypted access to the resources behind it rather than to the open internet. You install it, add a profile that points at the gateway address, sign in with whatever credentials the organisation requires, and MotionPro establishes the tunnel. From that point the machine can open internal web applications, client-server tools, file shares, and network ranges, all filtered through policies the administrator defined for that user. The same client is used by staff on corporate laptops, by contractors on their own machines, and by mobile users connecting from tablets and phones.
What separates this style of remote access from a consumer VPN is where policy lives. Address pools, split-tunnel behaviour, the resource list each person may reach, and the strength of authentication are all decided on the gateway, not on the endpoint, so a lost laptop does not leak configuration and an update takes effect the next time someone connects. Sessions can be narrowed to a single application or widened to a full network tunnel, which matters when a contractor should reach one inventory system and nothing else. Pre-authentication checks such as device certificates and hardware identifiers are also part of the picture, and comparable products such as Global VPN Client solve the same corporate-access problem with an IPsec tunnel instead.
The payoff of MotionPro is that remote work stops being a separate workflow. Internal sites open in the same browser, ERP and inventory clients behave as they do in the office, and shared drives keep their usual letters, because the tunnel is transparent to the applications above it. Administrators keep the upper hand: authentication can combine a directory password with a certificate, hardware identifier, or one-time code, and resource policies decide what each account may touch after login. Sessions can be limited to a single application when that is all someone needs, which reduces the blast radius if a device is compromised. Because profiles and client distributions are staged on the gateway, onboarding a new starter is a download and a login rather than a support call, and the same approach scales from a handful of contractors to a large remote workforce.
Key capabilities and highlights.
MotionPro keeps each gateway as a named profile, so a user with access to several sites can switch without retyping an address. Profiles store the server details and connection preferences, and administrators can stage a prepared client for distribution, which shortens setup to a login.
Layer-3 VPN mode gives the whole device a route into the private network, so any application can reach internal systems by their real addresses. That is the mode most office workers want, because bookmarks, mapped drives, and desktop shortcuts keep working exactly as they do on site.
Per-application tunneling narrows access to a single program rather than the whole machine, which suits contractors who need one inventory or ERP client and nothing else. Combined with gateway-side resource policies, this keeps access proportionate to the job at hand.
Authentication is decided by the gateway and enforced by MotionPro, from directory passwords through client certificates, hardware identifiers, and multi-factor or one-time codes. Support for standard identity providers means the same client works whether an organisation relies on LDAP, SAML, or OAuth.
Traffic to web portals and HTML5 applications can be reached through a browser-based path, while desktop applications use the tunnel. Having both options means users are not forced into a heavy client session simply to check a single internal page.
Sessions established by MotionPro are encrypted with modern TLS, and administrators can require pre-authentication checks on device certificates or hardware identifiers before credentials are even accepted. That blocks connections from machines that do not belong to the organisation or that fail the client security policy.
Policies are applied per user, per resource, and per portal, so a guest, a contractor, and a full-time employee can all connect to the same gateway with different reachable resources. Logging and session statistics on the gateway show who connected and what they touched.
MotionPro is available across the device types organisations actually issue, from desktop and laptop systems to tablets and phones, and the gateway doubles as a distribution point for the correct client package. Users get one familiar connection method instead of a different tool per device.
Browse historical releases and previous builds.
No old versions have been added yet.
Common questions about MotionPro.
It connects a device to an Array Networks secure access gateway so remote users can reach internal applications, file shares, desktops, and network ranges over an encrypted tunnel. Access is limited to the resources the administrator has assigned to that account.
No. MotionPro is built for Array AG and vxAG secure access gateways and the policies configured on them. It is not a general-purpose VPN client for arbitrary servers, and other gateway products supply their own client software.
Install the client, then add a profile containing the gateway address and any connection preferences, and sign in when prompted. Many organisations publish a pre-configured package from the gateway instead, in which case the profile is already present and only credentials are needed.
L3 mode routes traffic for the whole device into the private network, which suits everyday remote work. Per-application tunneling sends only a chosen program through the gateway, which is useful when someone needs one internal system and should not have broader network reach.
Yes, when the gateway is configured for it. Depending on the environment, sign-in can require a directory password plus a client certificate, a hardware identifier, an identity provider assertion, or a one-time code, and device checks can run before credentials are submitted.
Most rejections are identity or policy related rather than client faults: an expired or mistyped password, an untrusted certificate, a device that fails the pre-authentication check, or an account without a matching resource policy. Because those decisions happen on the gateway, the administrator can see the reason there.
MotionPro is the SSL VPN client for Array Networks AG and vxAG gateways, giving remote and mobile users encrypted access to internal applications, desktops, file shares, and networks under the policies their administrator sets.
Remote Desktop is the Microsoft client for connecting to remote PCs, cloud desktops, and published applications over the Remote Desktop Protocol. It lets people work in a full desktop environment from another device, with local printers, drives, and audio available during the session.
Pritunl Client is a VPN client that connects computers to OpenVPN and WireGuard servers, giving administrators and remote workers one interface for importing profiles, switching organizations, and keeping encrypted tunnels reliably connected.
The Microsoft App Control Wizard is Microsoft's open-source desktop tool for building, editing and merging Application Control for Business policies, giving administrators a guided way to define exactly which applications and drivers may run on managed Windows devices.
Windows App is Microsoft's unified client for reaching Windows 365 Cloud PCs, Azure Virtual Desktop, Microsoft Dev Box, Remote Desktop Services, and remote PCs. It brings cloud and remote desktop access from Windows, macOS, mobile, and the browser into one secure workspace.
Comments