14
Access Manager 3.1 SP2 Beta 1 Scenarios
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
3
In the
Client Cleanup Options
section, configure default values and configure whether the user
can modify the default.
By default
Java Cache Cleanup
and
Clear Browser Private Data
options are enabled and the
Allow User to Override
option is enabled for all options.
For this beta scenario, allow the user to override the default setting for some of the options. For
more information on the options, click the help (?) icon.
4
Click
OK
.
5
Update the SSL VPN server.
6
Log in as an SSL VPN client.
7
Click
Logout
.
Based on the configuration in the Administration Console, you can select some cleanup
options, but others are disabled.
4.2.4 Test Results
Your selection for the cleanup options should be available when you log out as an SSL VPN client.
4.3 Configuring for HMAC (Hash-Based Message
Authentication Code)
HMAC is an option provided by OpenVPN* to authenticate the client before OpenVPN negotiation
is initiated. It means that the first packet from the OpenVPN client to the OpenVPN server contains
the HMAC signature. This beta scenario verifies that the client gets the HMAC key from the server
and uses it to authenticate.
You generate the HMAC key by using the Administration Console. This beta scenario verifies that
any ongoing client connections are torn down with an OpenVPN error and that subsequent
connections are successful.
4.3.1 Assumptions
The HMAC key is applicable only for Enterprise mode clients.
4.3.2 Known Issues
None.
4.3.3 Procedure
1
Log in to the Administration Console.
2
Click
Devices > SSL VPNs > Edit > Basic Configuration
.
3
In the Other Configuration section, set the
Authentication Hardening
option to
On
.
The
Re-generate
button appears beside the option with the current time stamp.
4
Click
OK
.
5
Update the SSL VPN server.
6
As an Enterprise client, connect to SSL VPN server by using the published SSL VPN URL.
7
In the Administration Console, click
Devices > SSL VPNs > Basic Configuration
.
