Kerio Tech Firewall6 Network Router User Manual


 
Chapter 6 Traffic Policy
90
Allow access to the following services only
Only selected services will be available from the local network.
Note: In this dialog, only basic services are listed (it does not depend on what ser-
vices were defined in WinRoute see chapter 12.3). Other services can be allowed
by definition of separate traffic policy rules— see chapter 6.3.
Step 5 enabling Kerio VPN traffic
To use WinRoute’s proprietary VPN solution in order to connect remote clients or to
create tunnels between remote networks, keep the Create rules for Kerio VPN server
selected. Specific services and address groups for Kerio VPN will be added. For detailed
information on the proprietary VPN solution, refer to chapter 21.
If you intend not to use the solution or to use a third-party solution (e.g. Microsoft PPTP,
Nortel IPSec, etc.), disable the Create rules for Kerio VPN option.
To enable remote access to shared items in the local network via a web browser, keep the
Create rules for Kerio Clientless SSL-VPN option enabled. This interface is independent
from Kerio VPN and it can be used along with a third-party VPN solution. For detailed
information, see chapter 22.
Figure 6.6 Network Policy Wizard — Kerio VPN
Step 6 specification of servers that will be available within the local network
If any service (e.g. WWW server, FTP server, etc. which is intended be available from
the Internet) is running on the WinRoute host or another host within the local network,
define it in this dialog.
Note: If creating of rules for Kerio VPN was required in the previous step, the Kerio VPN
and HTTPS firewall services will be automatically added to the list of local servers. If
these services are removed or their parameters are modified, VPN services will not be
available via the Internet!