F5 FirePass, Administrator'S Manual

Page: 113 / 182

Configuring the FirePass Webifyers
FirePass
™
Server Administrator Guide 4 - 29
12. To compress all traffic between the SSL VPN client and the
FirePass server using the GZip deflate method, select the Use GZIP
Compression option.
Configuring group packet filter rules
If you have first enabled global SSL VPN packet filter rules (see
Configuring global SSL VPN packet filter rules, on page 4-25), you can then
specify a set of optional group rules that are activated whenever a user starts
the SSL VPN client. Each packet coming from a VPN client is first checked
against the group rule set, and if no group rule is matched, the packet is
checked against the global rules. If there is no match, the packet is rejected.
If the matching rule is found, the packet is accepted or rejected depending
on the action you assigned to the rule. The rules are applied top to bottom in
the order you create them on the SSL VPN Settings screen.
To configure the group packet filter rules
1. If you have not already done so, select the Use Packet Filter to
Access LAN option on SSL VPN Settings screen (under the Server
tab, click the Security link, then click the SSL VPN option). (See
Configuring global SSL VPN packet filter rules, on page 4-25.)
2. In the Group Packet Filter section of the SSL VPN Webifyer screen,
click the Add new rule link.
3. From the Proto drop-down list, select a single protocol or all
protocols.
4. In the Port box, enter a port number or a port range in the first:last
format. To specify any port, enter 0:65535.
5. In the Address/Masks box, enter a destination IP address for a host
(such as 192.168.2.1), a subnet/mask (such as 192.168.2.0/24 or
192.168.2.0/255.255.255.0). To specify any address and mask, enter
0/0.
6. From the Action drop-down list, select an action for the rule
(Accept or Reject).
7. Click the Save button to save the rule.
8. Click the Apply these rules now button to apply the rules.
Configuring drive mappings for the SSL VPN Webifyer
You can preconfigure the network shares that are automatically mapped at
the access point computer after the SSL VPN connection is established.
To configure drive mappings
1. In the Name box in the Drive Mappings section of the SSL VPN
Webifyer screen, enter a name for the mapping.