Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 449 / 861

448 Enabling remote access with clientless VPN
Advanced mail actions
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Managing clientless VPN users” on page 411
Use the security gateway as a mail proxy
To use the security gateway as a mail proxy for clientless VPN users, you must do the following:
■
Configure the security gateway as a mail proxy.
■
Configure the end-user mail client to use the proxy for receiving email.
To configure the security gateway as a mail proxy
1 In the SGMI, in the left pane, under Assets, click Remote Mail .
2
In the right pane, on the Secure Desktop Mail Access tab, select the mail server type for which you
want to proxy mail.
3 In the Secure Desktop Mail Access Properties dialog box, on the General tab, do the following:
4 Click OK.
5 Optionally, do one of the following:
■
To save your configuration and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
To configure a user’s mail client to use the mail proxy
1 On the client computer, specify the fully qualified domain name of the security gateway as the
incoming mail server.
2
Select the mail protocol that corresponds with the appropriate proxy that the administrator
configured.
3 Check the box asking if this connection requires an SSL connection.
This should automatically change the port mapping to the standard port of the secure version of
the mail protocol.
4 Specify the user’s ISP’s SMTP server for outgoing mail.
The authentication credentials are those of clientless VPN, not the email server. If these
credentials are different, you need to create a mapping of the accounts on the email server.
Mail protocol The email protocol (POP3 or IMAP) is displayed.
Enable secure
desktop mail access Check to enable the mail proxy.
Remote IP Type the IP or fully qualified domain name of the mail server.
Remote port Type the port number that the appliance should use to connect
■
25 for SMTP
■
110 for POP3
■
143 for IMAP
Scheme Select the scheme associated with the authentication server that hosts the appropriate
credentials for users using this feature. You can click
New to create a new scheme or
Properties to modify an existing scheme.
Enable SSL
encryption If the mail server requires an SSL connection, check this option.