Netgear SRX5308 User Manual download pdf (Page 284)

Virtual Private Networking Using SSL Connections

284

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

5. Click Apply to save your settings. The new configuration is added to the Defined Resource

Addresses table.

To delete a configuration from the Defined Resource Addresse

s table, click the Delete table

button to the right of the configuration that you want to delete.

Configure User, Group, and Global Policies

• View Policies

• Add an IPv4 or IPv6 SSL VPN Policy

You can define and apply user, group, and global policies to

predefined network resource

objects, IP addresses, address ranges, or all IP addresses, and to different SSL VPN

services. A specific hierarchy is invoked over which policies take precedence. The VPN

firewall policy hierarchy is defined as follows:

• User p

olicies take precedence over group policies.

• Gro

up policies take precedence over global policies.

• If two or more user

, group, or global policies are configured, the most specific policy takes

precedence.

For example, a policy that is configured for a single IP add

ress takes precedence over a

policy that is configured for a range of addresses. And a policy that applies to a range of IP

addresses takes precedence over a policy that is applied to all IP addresses. If two or more

IP address ranges are configured, then the smallest address range takes precedence. Host

names are treated the same as individual IP addresses.

Network resources are prioritized just like other address range

s. However, the prioritization is

based on the individual address or address range, not the entire network resource.

For example, assume the followin

g global policy configuration:

• Policy

1. A Deny rule has been configured to block all services to the IP address range

10.0.0.0–10.0.0.255.

• Policy

2. A Deny rule has been configured to block FTP access to 10.0.1.2–10.0.1.10.

• Policy

3. A Permit rule has been configured to allow FTP access to the predefined

network resource with the name FTP Servers. The FTP Servers network resource

includes the following addresses: 10.0.0.5–10.0.0.20 and the FQDN ftp.company.com,

which resolves to 10.0.1.3.

Object Type

(continued)

IPv6 screen only:

Prefix Length

Enter the prefix length for the locations that are permitted

to use this resource.

Port Range / Port Number A port or a range of ports (0–65535) to apply the policy to. The policy is applied

all TCP and UDP traffic that passes on those ports. Leave the fields blank to

apply the policy to all traffic.

Table 72. Resources screen settings to edit a resource (continued)

Setting Description

1 2 ... 279 280 281 282 283 284 285 286 287 288 289 ... 459 460

Comments to this Manuals

No comments

Netgear SRX5308 User Manual Page 284

Comments to this Manuals

Related products and manuals for Routers Netgear SRX5308