Connecting to the corporate network
Applies to: SimpleTwo 0.9.x · Checked: 24.10.2026
SimpleTwo Connect is not only messaging and calls: the same app raises a secure tunnel to corporate resources and, when configured that way, sends part of your traffic out in a chosen country.
1. What the screen shows
Protected — the tunnel is up and traffic follows the organisation's rules. VPN off — traffic goes directly, without the corporate tunnel. This is not a fault: it is what a disabled connection looks like.
Below it are two status lines, and they are different things:
| Line | What it means |
|---|---|
| Coordinator | the link to the management server: ready, checking for changes…, or unavailable, running on the previous plan |
| Tunnel | the channel itself: up, off, starting…, restarting in place |
An unavailable coordinator does not drop the connection: the app keeps working from the last plan it received. That is a normal mode, not an emergency.
Beside it you see how long you have been connected, how many locations are active, the ping, and upload and download counters for the session.
2. Your organisation's VPN gateway
If your organisation runs a VPN gateway of its own — a FortiGate, for one — the app connects to it
itself, beside the other locations. FortiClient is not needed. In the "Active locations" card the
gateway has a row of its own: "Corporate network · gateway name".
| State | What it means |
|---|---|
| "Opens with the first connection" | the tunnel to the gateway comes up when you open something behind it |
| "Connecting…" | signing in to the gateway |
| "Connected" | the tunnel is up; under the row, the address the gateway assigned |
| "Password needed" | the app has nothing to sign in to the gateway with — see below |
| "The password was not accepted" | the gateway refused the sign-in — see below |
| "Not connected" | the gateway is unavailable, with its answer under the row. What is behind it does not open until it is back: the app does not send it around the secure channel |
The password. You sign in to the gateway with your work login and password — the same as for signing in to SimpleTwo. If you signed in to the app with a password, it remembered it, and there is nothing to type. The password is kept on this device only and deleted when you sign out of the app.
If you signed in through the browser (single sign-on) or with a passkey, the app never saw your password: "Password for the corporate network" appears above the card. Enter the password once and press "Save and connect".
Changed your work password? Enter the new one on the same card as soon as the row says "The password was not accepted". The app does not try the old password again, so as not to lock your account — which is why what is behind the gateway does not open until you enter the new one.
3. The organisation's rules
The Routing section shows exactly what the app applies:
- Profile — which ruleset you were issued, and its version.
- Rules — the list; the first match wins.
- Default — what happens to traffic that matched nothing.
A rule's action is one of four:
| Action | What it does |
|---|---|
| tunnel → location | send it through that location |
| prefer → location | try that location, but not at any cost |
| direct | bypass the tunnel |
| block | do not let it through at all |
Matching is by lists: domains, address ranges, or whole lists such as "Corporate resources", "Ads and trackers", "Domestic services".
They cannot be changed in the app — they arrive from the server and are applied on connect. If an administrator changes them while you are connected, the app says so: the new rules apply after reconnecting.
4. The ruleset signature
Next to the ruleset version there is a signature: verified, not checked or
NOT VERIFIED.
A verified signature means the ruleset came from your coordinator and was not altered on the way. If it does not match, the app keeps working but says so plainly and reports it to the administrator — this is not something to ignore.
5. Guests
From the same screen you can invite a guest — an external person who needs access to your conversations or meetings. The guest gets a QR invitation and enters the app with it; the details are in the guests article.
6. If it does not connect
| What you see | What it means |
|---|---|
| "No session on this device. Sign in again" | the session expired or was revoked |
| "The server address cannot be read" | the installation address in settings is wrong |
| "not responding" next to a location | that node is unavailable; the others keep working |
| "The chat service did not answer. Working from the last copy" | messages are being read from the local cache for now |
| "Password needed" for the corporate network | the app does not know your work password — enter it on the "Password for the corporate network" card |
| "The password was not accepted" for the corporate network | the password changed — enter the new one on the card. If the new one is refused too, ask your administrator: the gateway's setup is the cause |