Avaya 3.7, Configuration Manual

Page: 108 / 326

Configuring remote access users
108 Avaya VPNmanager Configuration Guide Release 3.7
VPN configuration files on remote user’s computer
●
None. The VPN session parameter information is stored locally on the remote users
computer. No password is required when VPNremote is subsequently launched.
●
Download configuration when remote starts. VPN session parameter data is
downloaded over the network to the remote computer at the beginning of every session,
and purged when the session is terminated (most secure method).
●
Secure Dyna-Policy with a user defined key (password). VPN session parameter data
resides on the remote users hard disk and are activated by a password at the start of a
VPN session. The remote user is responsible for password protecting this data.
Disable split tunneling
Split tunneling allows the VPNremote Client to simultaneously maintain both a VPN (secure)
connection and a clear connection. This is the default. You must check the Disable Split
Tunneling check box to turn the default off. When the default is off, only secure VPN traffic from
the VPNremote client computer is allowed.
How you configure this function depends on your corporate security policy. With the default
setting to allow split tunneling, a typical application might be when the client wishes to explore a
public website while maintaining an email connection on the (private) corporate network. In a
security-conscious organization where there is a perceived risk of intrusion into the private
network through a remote client’s public connection, split tunneling would be disabled.
When split tunneling is disabled, the remote users see a message on their VPNremote Client
console indicating Connected - Private access only.
Dyna-Policy Defaults (Global) tab
The Preferences Dyna-Policy Defaults (Global) tab is used to define the dyna-policy defaults for
the number of times a user can enter an incorrect password before log on fails and the number
of minutes that a user is locked out after the password fails.