Watchguard SSL 1000, User Manual

Page: 160 / 198

BlackICE PC Protection
150 Firebox SSL VPN Gateway
To view Secure Access Client status properties
Double-click the Secure Access Client connection icon in the notification area. Alternatively, right-click
the icon and choose
Properties from the menu.
The Secure Access Client dialog box appears.
The properties of the connection provide information that is helpful for troubleshooting. The proper-
ties include:
•
The General tab displays connection information.
• The Details tab displays server information and a list of the secured networks clients are allowed to
access.
•
The Access Lists tab displays the access control lists (ACLs) that are configured for the user
connection. This tab does not appear for users who are not in a group or if an ACL is not configured for
a group.
The following are suggestions for using some popular firewalls with the Firebox SSL VPN Gateway.
BlackICE PC Protection
The following BlackICE settings enable the Secure Access Client to reach the Internet and the resources
allowed by the Firebox SSL VPN Gateway. To configure the settings, open the BlackICE window and
choose the following commands.
McAfee Personal Firewall Plus
The following McAfee Personal Firewall Plus settings enable the Secure Access Client to reach the Inter-
net and the resources allowed by the Firebox SSL VPN Gateway. To configure the settings, open the
McAfee Security Center window, click the
Personal F tab, and choose the following commands.
The following settings assume that you are using the Standard security level. To check your security
level, go to the
Personal F tab, click Utilities , and then click Security Settings .
Note
By default, when the Secure Access Client is installed, Personal Firewall Plus prompts you to grant or
block access for the application. Select
Grant Access .
Tools > Edit
BlackICE
Settings
On the Firewall tab, make sure that the Protection Level is lower than
“Paranoid,” which prevents you from running applications, such as email,
over the connection.
On the
Intrusion Detection tab, add the IP address of the Firebox SSL VPN
Gateway as a trusted zone. Also add the IP address or range of allowed
resources as trusted zones. When you add an IP address, be sure to select
the
Add Firewall Entry check box.