Casio ISA550WBUN3K9 Importing Certificates for User Authentication, Configuring SSL VPN Users

VPN	8
Configuring SSL VPN

Importing Certificates for User Authentication

The SSL VPN gateway holds a CA certificate that is presented to the SSL VPN clients when the SSL VPN clients first connect to the gateway. The purpose of this certificate is to authenticate the server. You can use the default certificate or an imported certificate for authentication. For information on importing the certificates, see Managing Certificates for Authentication, page 418.

Configuring SSL VPN Users

ISA550 and ISA550W support 25 SSL VPN users. ISA570 and ISA570W support 50 SSL VPN users. To configure the users and user groups for SSL VPN access, go to the Users > Users and Groups page.

You can assign all SSL VPN users to one user group. However, if you have multiple SSL VPN group policies, you can create multiple user groups and specify different SSL VPN group policies for them. Specifying a SSL VPN group policy for a user group can enable the SSL VPN service for all members of the user group. For complete details, see Configuring Users and User Groups, page 389.

According to the user authentication settings specified on the security appliance, the SSL VPN users can be authenticated by the local database or external AAA server (such as Active Directory, LDAP, or RADIUS). For information on configuring the user authentication settings, see Configuring User Authentication Settings, page 393.

Configuring SSL VPN Gateway

Use the SSL VPN Configuration page to enable the SSL VPN feature and configure the SSL VPN gateway settings.

STEP 1 Click VPN > SSL Remote User Access > SSL VPN Configuration.

The SSL VPN Configuration window opens.

STEP 2 Click On to enable the SSL VPN feature and hence set the security appliance as a SSL VPN server, or click Off to disable it.

STEP 3 In the Mandatory Gateway area, enter the following information:

•Gateway Interface: Choose the WAN port that traffic passes through over the SSL VPN tunnels.

Cisco ISA500 Series Integrated Security Appliances Administration Guide 376