Barracuda Networks SSL VPN, Руководство администратора

Страница: 17 / 124

VPN Concepts 17
SSL VPN Concepts
Security Policy and Resource Management
An important feature of the Barracuda SSL VPN is the granularity that can be achieved for secure
access. The System Administrator, who is responsible for configuration of security policy and
management of resources, is able to create users and delegate to them a varying degree of
responsibility.
This section is intended to give the reader an overview of how this is achieved within the SSL VPN
and to introduce the terminology used; each of the specific areas is discussed in more detail in later
chapters. The following example shows a simplified deployment scenario to help explain how the
SSL VPN may be configured.
A company has a number of different departments (e.g. Engineering, Sales & Support) and each
department has a manager. The company allows home working for all of these employees and as a
result, each department requires secure access to relevant shared areas and resources on the company
network. In addition, the managers have a level of responsibility which requires access to planning
information and personal details for their department. Each manager is also required to act as an
administrator for their own department. All employees have access to email and the company intranet.
As can be seen from the above description, it is necessary to group employees differently because they
need to be treated differently when it comes to accessing areas of the company network. The
following diagram shows how these employees could be organized by the System Administrator on
the SSL VPN:
With reference to the diagram, each of the 4 categories (Managers, Sales & Support, Engineering,
Everyone) are Policies. A Policy can be seen to consist of individual users or groups of users (e.g.
Contractors) known as Accounts and Groups respectively. The Policy is a single entity and any