NETGEAR SSL312 manual 10.0.0.0

Page 52

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

3.If two or more user, group or global policies are configured, the most specific policy takes precedence.

For example, a policy configured for a single IP address takes precedence over a policy configured for a range of addresses. And a policy that applies to a range of IP addresses takes precedence over a policy applied to all IP addresses. If two or more IP address ranges are configured, then the smallest address range takes precedence. Hostnames are treated the same as individual IP addresses

Network Resources are prioritized just like other address ranges. However, the prioritization is based on the individual address or address range, not the entire Network Resource.

For example, let’s assume the following global policy configuration:

Policy 1: A Deny rule has been configured to block all services to the IP address range

10.0.0.0- 10.0.0.255.

Policy 2: A Deny rule has been configured to block FTP access to 10.0.1.2 -

Policy 3: A Permit rule has been configured to allow FTP access to the predefined network resource, FTP Servers. The FTP Servers network resource includes the following addresses:10.0.0.5 - 10.0.0.20 and ftp.company.com, which resolves to

Assuming that no conflicting user or group policies have been configured, if a user attempted to access:

An FTP server at 10.0.0.1, the user would be blocked by Policy 1.

An FTP server at 10.0.1.5, the user would be blocked by Policy 2.

An FTP server at 10.0.0.10, the user would be granted access by Policy 3. The IP address range 10.0.0.5 - 10.0.0.20 is more specific than the IP address range defined in Policy 1.

An FTP server at ftp.company.com, the user would be granted access by Policy 3. A single host name is more specific than the IP address range configured in Policy 2.

Note: The user would not be able to access ftp.company.com using its IP address 10.0.1.3. The SSL VPN Concentrator policy engine does not perform reverse

DNS lookups.

6-2

Group and User Access Policies

v1.0, August 2006

Image 52
Contents Netgear ProSafe SSL VPN Concentrator SSL312 Reference Manual Technical Support EU Regulatory Compliance Statement V1.0, August Contents Chapter Network Settings Chapter Port Forwarding Appendix B Related Documents Index About This Manual Conventions, Formats and ScopeHow to Use This Manual How to Print this ManualPrinting a Chapter Xii Chapter Introduction Key FeaturesAbout the ProSafe SSL VPN Concentrator Web Browser Requirements Microsoft WindowsHardware Description What’s in the BoxFront Panel Back Panel Chapter Basic Installation and Configuration Installing the SSL VPN ConcentratorConfiguring the ProSafe SSL VPN Concentrator Https//192.168.1.1V1.0, August Logging in to the Management Interface User Name admin Password password V1.0, August Chapter Status and Logging SSL VPN Concentrator StatusStatus and Logging Event Log Priority of Log Messages Value Definition Active Users Log Settings E-mail Settings section Alerts Error Click Apply to confirm your settings Chapter General Settings System Configuration UtilitiesEncrypting the Configuration File Exporting and Saving a Backup Configuration FileImporting a Configuration File Erasing and Restoring the Default Settings Upgrading the SSL VPN Concentrator FirmwareTime and Date Settings V1.0, August Certificate Management V1.0, August V1.0, August V1.0, August V1.0, August V1.0, August Configuring Network Settings Chapter Network SettingsSample SSL VPN Concentrator Configuration Network Interface Configuration V1.0, August Network Route Configuration Click Apply to save your settingsV1.0, August Network Host Table Settings Configuring DNS Settings V1.0, August Chapter Group and User Access Policies Users, Groups and Global Policies10.0.0.0 Editing Global Policy Settings Global PoliciesAdding and Editing Global Policies V1.0, August Groups Configuration Defining and Editing Global BookmarksAdding a New Group Editing Group Settings Defining and Editing Group Policies V1.0, August Defining and Editing Group Bookmarks Deleting a Group You can also delete a group by clicking its Delete linkUsers Configuration Adding a New User Editing a User V1.0, August Defining and Editing User Policies Defining and Editing a User Bookmarks Deleting a User Ldap Authentication Domains for Group Policies and Bookmarks Sample Ldap AttributesLdap Attribute Rules Sample Ldap Users and Attributes SettingsQuerying an Ldap Server V1.0, August Authentication Domains Chapter Domains and LayoutsLocal User Database Authentication Radius Authentication NT Domain Authentication Ldap Authentication CN=Users,DC=yourdomain,DC=com Active Directory Authentication V1.0, August SSL VPN Concentrator Portal Layouts Deleting a DomainAdding Portal Layouts Portal Layout and Theme Name sectionV1.0, August V1.0, August Customizing the Banner Duplicating and Editing Portal Layouts V1.0, August Advanced Portal Page Layout Specifications Chapter Network Resources Network Resources V1.0, August V1.0, August SSL VPN Client Configuration Chapter VPN Tunnel ClientAdding IP Address Ranges Adding Routes for VPN Tunnel Clients V1.0, August V1.0, August V1.0, August Configuring Applications for Port Forwarding Chapter Port ForwardingPort Forwarding Applications/TCP Port Numbers Configuring Host Name Resolution 10-4 Port Forwarding Appendix a Default Settings and Technical Specifications Factory Default SettingsTechnical Specifications GMTAppendix B Related Documents Document LinkV1.0, August Index NumericsIndex-2 Index-3 Index-4 Index-5 Index-6
Related manuals
Manual 122 pages 23.62 Kb