Netgear FVS336G-300NAS Specifications download pdf (Page 476)

100

101

Set Up Virtual Private Networking with SSL Connections

476

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

9. In the Defined Resource Addresses table, click the Delete button to the right of the resource

address configuration that you want to remove.

The resource address configuration is removed from the Defined Resource Addresses

table.

Configure User, Group, and Global Policies

The following sections provide information about configuring user, group, and global policies

for SSL port forwarding:

• SSL Policies Overview

• View SSL VPN Policies

• Add an IPv4 or IPv6 SSL VPN Policy for a Network Resource

• Add an IPv4 or IPv6 SSL VPN Policy for a Single IP Address

• Add an IPv4 or IPv6 SSL VPN Policy for an IP Network

• Add an IPv4 or IPv6 SSL VPN Policy for All Addresses

• Change an IPv4 or IPv6 SSL VPN Policy

• Remove One or More IPv4 or IPV6 SSL VPN Policies

SSL Policies Overview

You can define and apply user, group, and global policies to predefined network resource

objects, IP addresses, address ranges, or all IP addresses, and to different SSL VPN

services (VPN tunnels and port forwarding configurations). A specific hierarchy is invoked

over which policies take precedence. The VPN firewall SSL policy hierarchy is as follows:

• User policies take precedence over group policies.

• Group policies take precedence over global policies.

• If two or more user, group, or global policies are configured, the most specific policy takes

precedence.

For example, a policy that is configured for a single IP address takes precedence over a

policy that is configured for a range of addresses. And a policy that applies to a range of IP

addresses takes precedence over a policy that applies to all IP addresses. If two or more IP

address ranges are configured, the smallest address range takes precedence. Host names

are treated the same as individual IP addresses.

Network resources are prioritized just like other address ranges. However, the prioritization is

based on the individual address or address range, not the entire network resource.

For example, assume the following global policy configuration:

• Policy 1. A Deny rule blocks all services to the IP address range 10.0.0.0–10.0.0.255.

• Policy 2. A Deny rule blocks FTP access to 10.0.1.2–10.0.1.10.

• Policy 3. A Permit rule allows FTP access to the predefined network resource with the

name FTP Servers. The FTP Servers network resource includes the following addresses:

10.0.0.5–10.0.0.20 and the FQDN ftp.company.com, which resolves to 10.0.1.3.

1 2 ... 471 472 473 474 475 476 477 478 479 480 481 ... 692 693

Comments to this Manuals

No comments

Netgear FVS336G-300NAS Specifications Page 476

Comments to this Manuals