Virtual Private Networking Using SSL Connections
282
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
5. Click Apply to save your settings. The new configuration is added to the Defined Resource
Addresses table.
To delete a configuration from the Defined Resource Addresse
s table, click the Delete table
button to the right of the configuration that you want to delete.
Configure User, Group, and Global Policies
• View Policies
• Add an IPv4 or IPv6 SSL VPN Policy
You can define and apply user, group, and global policies to
predefined network resource
objects, IP addresses, address ranges, or all IP addresses, and to different SSL VPN
services. A specific hierarchy is invoked over which policies take precedence. The wireless
VPN firewall policy hierarchy is defined as follows:
• User p
olicies take precedence over group policies.
• Gro
up policies take precedence over global policies.
• If two or more user
, group, or global policies are configured, the most specific policy takes
precedence.
Object Type From the drop-down list, select one of the following options:
• IP Address. The object is an IPv4 or IPv6 address. You need to enter the IP
address or the FQDN in the IP Address / Name field.
• IP Netwo
rk. The object is an IPv4 or IPv6 network. You need to enter the
network IP and the network mask length (for IPv4) or prefix length (for IPv6)
in the Mask Length field.
IP Address / Name Applicable only when you select IP Address as the object
type
. Enter the IP address or FQDN for the location that is
permitted to use this resource.
Network Address Applicable only when you select IP Network as the object
type
. Enter the network IP address for the locations that
are permitted to use this resource. You also need to enter
the mask length (IPv4 only) or prefix length (IPv6 only):
IPv4 screen only:
Mask Length
Enter the network mask (0–31) for the locations that are
permitt
ed to use this resource.
IPv6 screen only:
Prefix Length
Enter the prefix length for the lo
cations that are permitted
to use this resource.
Port Range / Port Number A port or a range of ports (0–65535) to apply the policy to. The policy is applied
to
all TCP and UDP traffic that passes on those ports. Leave the fields blank to
apply the policy to all traffic.
Table 69. Resources screen settings to edit a resource (continued)
Setting Description