SonicWALL VPN Page 181
Configure TabAdd/Modify IPSec Security Associations
The Configure tab settings change depending o n the Sec urity Associa tion (SA ) and IPSec Keying
options you choose in the Add/Modify IPSec Security Associations. You can choose eit her Group
VPN (default) or Add New SA fro m th e Security Association list. If you select Add New SA, a Name
field is displayed that allows you to create a name for the SA, such as Boston Office, Corporate Site,
etc. Select the type of security policy for the SA from the IPSec Keying Mode menu. You can select
IKE using Preshared Secret, Manual Key, or IKE using Certificates.
The IPSec Gateway Addre ss field is used to configure the gateway for the security association.

Disabling Security Associations

You can choose to disable certain se curity associations and still allow access by remote VPN cli ents.
The feature is useful if it is suspected that a remote VPN user connection has become unstable or
insecure. It can also temporarily block access to the SonicWALL appliance if necessary. D isable the
Security Association by checking the Disable this SA check box. Click Update to enable the change
to take place.