Zone
Assignment
DMZ
Type
Range
Starting IP
address
Start of the NetExtender IP address range within your DMZ range, such as
10.1.1.220
.
Ending IP
address
End of the NetExtender IP address range within your DMZ range, for
example
10.1.1.249
.
7. On the
OBJECT | Match Objects > Addresses
page, click the
Address Groups
tab.
8. Click
+Add
.
9. In the
Add Address Groups
dialog box, create a group for the X0 interface IP address of your SMA
appliance and the NetExtender IP range:
l
Enter a name for the group.
l
In the left column, select the address objects you created and click the right arrow button.
l
Click
Save
to create the group when both objects are in the right column.
10. Navigate to the
POLICY | Rules and Policies > Access Rules
page, and select the
Matrix
view
style.
11. Click the
DMZ > LAN
icon.
12. On the page that displays for SMA to LAN, click
+Add
.
13. In the
Add Rule
window, create a rule to allow access to the LAN for the address group you just
created:
Source Zone/Interface
SMA
Source Destination
LAN
Source Port
Any
Service
Any
SMA 10.2 Deployment Guide for the SMA 100 Series
Connecting the SMA on an Existing DMZ
11
