Fortinet FORTIOS V3.0 MR7, Руководство пользователя

Страница: 43 / 90

Configuring a FortiGate SSL VPN Configuring firewall policies
FortiOS v3.0 MR7 SSL VPN User Guide
01-30007-0348-20080718
43
Require Virtual Desktop Connection prevents a user from establishing a SSL VPN
session without using the SSL VPN Virtual Desktop application. For more
information, see the SSL VPN User Guide.
11 To enable the FortiGate unit to remove residual information from the remote client
computer (for example, from the web browser cache) just before the SSL VPN
session ends, select Enable Cache Clean. When this feature is enabled, if the
client’s browser cannot install and run the cache cleaner, the user is not allowed to
access the SSL-VPN portal.
12 To allow the SSL VPN user group to use a pre-configured bookmark group,
enable Bookmarks and select the bookmark group from the drop-down list.
13 To have the FortiGate unit display a second HTML page in a popup window when
the web portal home page is displayed, type the URL of the web page into the
Redirect URL field.
14 To display a custom web portal home page caption for this group, enter the
message in the Customize portal message for this group field.
Note : This custom message overrides the portal message configured in
VPN >
SSL > Config .
15 Select OK.
Configuring firewall policies
This section contains the procedures needed to configure firewall policies for web-
only mode operation and tunnel-mode operation. These procedures assume that
you have already completed the procedures outlined in
“Configuring user
accounts and SSL VPN user groups” on page 42 .
A firewall policy specifies the originating (source) IP address of a packet and the
destination address defines the IP address of the intended recipient or network.
In general, configuring a firewall policy involves:
• specifying the IP source and destination addresses
Table 1: AV/Firewall supported product detection
Product AV Firewall
Norton Internet Security 2006 Y Y
Trend Micro PC-cillin Y Y
McAfee Y Y
Sophos Anti-Virus Y N
Panda Platinum 2006 Internet Security Y Y
F-Secure Y Y
Secure Resolutions Y Y
Cat Computer Services Y Y
AhnLab Y Y
Kaspersky Y Y
ZoneAlarm Y Y