Netgear FVS336G-300NAS Specifications download pdf (Page 450)

100

101

Set Up Virtual Private Networking with SSL Connections

450

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

selection. The domain determines both the authentication method and the portal layout

that are used.

For an SSL portal, you must create authentication domains, user groups, and user accounts

as follows:

a. Create one or more authentication domains for authentication of SSL VPN users (see

Manage Authentication Domains on page 492).

When remote users log in to the VPN firewall, they must specify a domain to which

their login account belongs. The domain determines the authentication method that is

used and the portal layout that is presented, which in turn determines the network

resources to which the users are granted access. Because you must assign a portal

layout when creating a domain, you create the domain after you create the portal

layout.

b. Create one or more groups for your SSL VPN users (Manage Authentication Groups

on page 498).

When you define the SSL VPN policies that determine network resource access for

your SSL VPN users, you can define global policies, group policies, or individual

policies. Because you must assign an authentication domain when creating a group,

you create the group after you create the domain.

c. Create one or more SSL VPN user accounts (see Manage User Accounts on

page 502).

Because you must assign a group when creating an SSL VPN user account, you first

must create a group and then a user account.

3. For port forwarding, define the servers and services (see Configure Applications for SSL

VPN Port Forwarding on page 456).

Create a list of servers and services that can be made available through user, group, or

global policies. You can also associate fully qualified domain names (FQDNs) with these

servers. The VPN firewall resolves the names to the servers using the list you create.

4. For SSL VPN tunnel service, configure the virtual network adapter (see Configure the SSL

VPN Client on page 462).

For the SSL VPN tunnel option, the VPN firewall creates a virtual network adapter on the

remote computer that then functions as if it were on the local network. Configure the

portal’s SSL VPN client to define a pool of local IP addresses to be issued to remote

clients, as well as DNS addresses. Declare static routes or grant full access to the local

network, subject to additional policies.

5. To simplify policies, define network resource objects (see Manage Network Resource

Objects to Simplify Policies on page 470).

Network resource objects are groups of IP addresses, IP address ranges, and services.

By defining resource objects, you can more quickly create and configure network policies.

6. Configure the SSL VPN policies (see Configure User, Group, and Global Policies on

page 476).

1 2 ... 445 446 447 448 449 450 451 452 453 454 455 ... 692 693

Comments to this Manuals

No comments

Netgear FVS336G-300NAS Specifications Page 450

Comments to this Manuals