Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 167 / 861

167 Defining your security environment
Defining traffic endpoints with network entities
Related information
For further information related to this topic, see the following:
■
“Network Entity Group Properties—General tab” on page 659
■
“Network Entity Group Properties—Network Entity tab” on page 660
■
“Creating basic rules” on page 273
■
“Creating a packet filter” on page 290
■
“Configuring tunnels” on page 385
■
“Controlling IP addresses with address transforms” on page 359
Defining an entity and security gateway pair with a VPN security entity
A VPN security network entity defines a network entity/security gateway pairing or a user account/
security gateway pairing that you can select as a local or remote endpoint when you create a VPN
tunnel. You can also use network entity groups to specify the source and destination of traffic
controlled by rules and packet filters.
Using VPN security entities when you define a tunnel lets you create fewer tunnels. Rather than
creating a separate tunnel on the security gateway for every entity that needs one, you can group
several entities, together with the appropriate security gateway, into VPN security network entities.
Based on the VPN security pairings that you configure, tunnel traffic is routed to the appropriate
entities within the VPN security network entity.
Prerequisites
Complete the following task before beginning this procedure:
■
“Creating security gateway network entities for use in tunnels” on page 164
■
“Configuring users for internal authentication” on page 243
■
“Configuring user groups for internal and external authentication” on page 247
To define an entity and security gateway pair with a VPN security entity
1 In the SGMI, in the left pane, under Assets, click Network .
2 In the right pane, on the Network Entities tab, click New > VPN Security Entity .
3 In the VPN Security Entity Properties dialog box, on the General tab, do the following:
4
On the Tunnel Endpoints tab, in the Network entity drop-down list, select a network entity, user
account, or user group.
5 In the Security gateway drop-down list, select a security gateway entity.
6 To add the selections from step 4 and step 5 to the VPN security network entity, click Add .
7 To add another network entity/security gateway pairing to the table, repeat steps 4 through 6.
8
To remove a pairing from the table, highlight it, and then click Remove .
9 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
10
Click OK .
Entity name Type a name for the VPN Security entity.
Caption Type a brief description of the VPN security entity.