Dell SMA 200, Administration Manual

Page: 350 / 514

Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
350
• IP Address - If your policy applies to a specific host, enter the IP address of the local host
machine in the IP Address field. Optionally enter a port range (for example, 4100-4200) or a
single port number into the Port Range/Port Number field. See Adding a Policy for an IP Address
on page 350 .
• IP Address Range - If your policy applies to a range of addresses, enter the beginning IP address
in the IP Network Address field and the subnet mask that defines the IP address range in the
Subnet Mask field. Optionally enter a port range (for example, 4100-4200) or a single port
number into the Port Range/Port Number field. See Adding a Policy for an IP Address Range on
page 351 .
• All Addresses - If your policy applies to all IPv4 addresses, you do not need to enter any IP
address information. See Adding a Policy for All Addresses on page 351 .
• Network Object - If your policy applies to a predefined network object, select the name of the
object from the Network Object drop-down list. A port or port range can be specified when
defining a Network Object. See Adding Network Objects on page 130
• Server Path - If your policy applies to a server path, select one of the following radio buttons in
the Resource field:
• Share (Server path) - When you select this option, type the path into the Server Path field.
• Network (Domain list)
• Servers (Computer list)
See Setting File Shares Access Policies on page 351 .
• URL Object - If your policy applies to a predefined URL object, type the URL into the URL field.
See Adding a Policy for a URL Object on page 352 .
• IPv6 Address - If your policy applies to a specific host, enter the IPv6 address of the local host
machine in the IPv6 Address field. Optionally enter a port range (for example, 4100-4200) or a
single port number into the Port Range/Port Number field. See Adding a Policy for an IPv6
Address on page 354 .
• IPv6 Address Range - If your policy applies to a range of addresses, enter the beginning IPv6
address in the IPv6 Network Address field and the prefix that defines the IPv6 address range in
the IPv6 Prefix field. Optionally enter a port range (for example, 4100-4200) or a single port
number into the Port Range/Port Number field. See Adding a Policy for an IPv6 Address Range
on page 354 .
• All IPv6 Address - If your policy applies to all IPv6 addresses, you do not need to enter any IP
address information. See Adding a Policy for All IPv6 Addresses on page 354 .
3 Select the service type in the Service drop-down list. If you are applying a policy to a network object,
the service type is defined in the network object.
4 Select Allow or Deny from the Status drop-down list to either permit or deny SMA/SRA connections for
the specified service and host machine.
5 Click Accept to update the configuration. After the configuration has been updated, the new policy is
displayed in the Edit Local User page.
The user policies are displayed in the Current User Policies table in the order of priority, from the
highest priority policy to the lowest priority policy.
Adding a Policy for an IP Address
1 Navigate to Users > Local Users .
2 Click the configure icon next to the user you want to configure.
3 Select the Policies tab.
4 Click Add Policy...
TIP: When using Citrix bookmarks, in order to restrict proxy access to a host, a Deny rule must be
configured for both Citrix and HTTP services.