
423
Enabling remote access with clientless VPN
Using rule sets to group clientless VPN access rules
4
Click
OK
.
5
Optionally, do one of the following:
■
To save your configuration and activate later, on the toolbar, click
Save
.
■
To activate your configuration now, on the toolbar, click
Activate
.
When prompted to save your changes, click
Yes
.
6
After creating an advanced rule, you can use it in the following ways:
■
Add the rule to a rule set.
■
Add the rule to a clientless VPN role.
Related information
For further information related to this topic, see the following:
■
“Advanced Rule Properties—General tab”
■
■
“Using rule sets to group clientless VPN access rules”
■
“Assigning a rule or rule set to a role”
■
“Using portal pages to customize the user experience”
Using rule sets to group clientless VPN access rules
A rule set is a group of clientless VPN access rules. Once grouped, you can assign the entire set of rules
to a role and thereby apply multiple rules to a group of users. You can create empty rule sets and add
rules later or create individual rules and then group them in a rule set.
Creating and populating rule sets
A rule set can contain both allow and deny rules, other rule sets (including itself), contradicting allow/
deny rules (deny always overrides allow), and any number of the same rule.
Prerequisites
Complete the following tasks before beginning this procedure:
■
■
To create and populate a rule set
You can create a rule set and then create rules for it, or you can create rules and later add them to the
rule set. You can also remove individual rules or entire rule sets.
To create a rule set
1
In the SGMI, in the left pane, under Policy, click
Clientless VPN
.
2
In the right pane, on the Rule Sets tab, click
New
.
3
In the Rule Set Properties dialog box, in the Rule set name text box, type a name for the rule set.
4
Click
OK
.
Write allowed
For allow rules only, do one of the following:
■
To let the user upload files, select Yes.
■
To allow read-only access (for example, download), select No.
Summary of Contents for Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series
Page 76: ...76 Managing administrative access Enabling SSH for command line access to the appliance...
Page 242: ...242 Defining your security environment Controlling full application inspection of traffic...
Page 243: ...243 Defining your security environment Controlling full application inspection of traffic...
Page 269: ...268 Limiting user access Authenticating using Out Of Band Authentication OOBA...
Page 373: ...372 Preventing attacks Enabling protection for logical network interfaces...
Page 509: ...508 Generating reports Upgrade reports...
Page 553: ...552 Advanced system settings Configuring advanced options...
Page 557: ...556 SSL server certificate management Installing a signed certificate...
Page 861: ...860 Index...