Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 443 / 861

442 Enabling remote access with clientless VPN
Using the Remote Access Tunnel Wizard to set up clientless VPN connections
To enable reverse proxy translation for URLs
1 In the SGMI, in the left pane, under Policy, click Clientless VPN .
2 In the right pane, on the Translation Rules tab, click New > URL Translation Rule .
3 In the URL Translation Rule Properties dialog box, on the General tab, in the URL field, type a URL
or range of URLs for which you want to allow or deny reverse proxy translation.
4 In the Translation area, do one of the following:
■
To allow reverse proxy translation, click Allow .
■
To deny reverse proxy translation, click Deny .
Related information
For further information related to this topic, see the following:
■
“Host Translation Rule Properties—General tab” on page 629
■
“URL Translation Rule Properties—General tab” on page 629
■
“Advanced mail actions” on page 446
Using the Remote Access Tunnel Wizard to set up clientless
VPN connections
The security gateway provides the Remote Access Tunnel Wizard, which you can use to simplify
setting up clientless VPN connections. The Remote Access Tunnel Wizard builds connections in a who-
what-how methodology: who is being provided access, to what resource are they provided access, and
how they may access the resource. The who is defined by a rule, the what is defined by resource links,
and the how is defined by a simple rule.
You can use the Remote Access Tunnel Wizard to set up:
■
A Web VPN connection
■
A port forwarder connection
■
A secure network connection
Clientless VPN connection types
The type of connection you need is determined by the type of traffic you are controlling and the
resources that need to be accessed as shown in the following table.
The Remote Access Tunnel Wizard can also be used to build tunnels for Symantec Client VPN users.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Configuring users for internal authentication” on page 243
Table 11-5
Clientless access methods
Access method Protocols Resource types
Web VPN HTTP, HTTPS, HTTP/HTTPS,
File, FTP, Mail Servers, paths, files (wild cards supported)
Port forwarder Telnet, TCP, UDP, Outlook, MAPI Servers, paths, files (wild cards supported)
Secure Network
Connection VPN Hosts on the inside interface