Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 627 / 861

626 Field descriptions
Policy field descriptions
Clientless VPN Role Properties—Rule/Rule Set Selection dialog box
The Rule/Rule Set Selection dialog box lets you select rules or rule sets to associate with a role.
Associated tasks
The task that you can perform with this dialog box is:
“Assigning a rule or rule set to a role” on page 430
Clientless VPN Role Properties—Logon Policy tab
You use the Logon Policy tab to specify how user accounts are affected by logon failures.
Associated tasks
The task that you can perform with this tab is:
■
“Configuring clientless VPN logon policy” on page 430
Table D-63
Clientless VPN Role Properties—Rule/Rule Set Selection dialog box
Field Description
Rule Rule to associate with the role.
Rule Set Rule set to associate with the role.
Table D-64
Clientless VPN Role Properties—Logon Policy tab
Field Description
Apply additional
logon policy Lets you create a logon policy specific to the role.
This option is unchecked by default.
Allow user to log on
to the appliance Allows remote users to log on to the security gateway.
This option is checked by default.
Lock user accounts
automatically Automatically locks user accounts in accordance with the parameters set in the Failed logon
attempts allowed and Failed logon time frame fields.
This option is checked by default.
Failed logon
attempts allowed If Lock user accounts automatically is checked, set this field to the number of failed logon
attempts you will allow users to make.
The default is three.
Failed logon time
frame If Lock user accounts automatically is checked, set this field to the timeframe in which the
failed logon attempts must take place for the user account to be locked.
The default is 1 day.
Unlock user
accounts
automatically Automatically unlocks user accounts that have previously been locked after a specified
period of time.
This option is checked by default.
Time since account
was automatically
locked If Unlock user accounts automatically is checked, set this field to the time period after the
lock that you want to unlock user accounts.
Allow password
change Allows users to change their passwords.
The default is Yes.
Display manual
navigation Allows users to use manual navigation.
The default is Yes.