Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 414 / 861

413 Enabling remote access with clientless VPN
Defining VPN profiles to allow communication between the security gateway and clientless users
4
Optionally, do one of the following:
■
To save your configuration and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Features tab” on page 743
■
“Advanced mail actions” on page 446
■
“Using the security gateway as a mail proxy” on page 447
Defining VPN profiles to allow communication between the
security gateway and clientless users
A VPN profile specifies a range of assignable IP addresses that are used by the clientless VPN users
when they log on to clientless VPN.
A VPN profile contains the network definitions that are automatically downloaded to the remote user’s
system when they authenticate and access clientless VPN. Secure Network Connection (SNC) allows bi-
directional communication between internal systems and the remote user system.
SNC resembles IPsec VPN in that communication is routed over the secure channel based on the
destination network. SNC is the most flexible mode from an application perspective since it is
application agnostic. SNC is only supported on Microsoft Windows XP/ Microsoft Windows 2000 client
systems.
SNC can use an external DHCP server or a range of IP addresses to assign addresses. If an address pool
is used, when a user connects, the gateway automatically assigns and downloads an IP address from
the address pool to the client system. The security gateway also downloads internal routes and DNS
information. Finally, the security gateway proxy uses address resolution protocol to resolve the IP
addresses assigned to the clients, enabling bi-directional communication.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Configuring users for internal authentication” on page 243
■
“Configuring user groups for internal and external authentication” on page 247
To create a VPN Profile
1 In the SGMI, in the left pane, under Policy, click Clientless VPN.
2
In the right pane, on the Clientless VPN Profiles tab, click New .
3 In the VPN Profile Properties dialog box, on the General tab, do the following:
Profile name Type a name for the VPN profile. Do not use spaces.
IDS/IPS policy Optionally, in the drop-down list, select an intrusion detection/intrusion prevention
policy to apply to traffic.
Apply firewall rules Optionally, check to enable full application inspection of VPN traffic.