Watchguard SSL 1000, Руководство пользователя

Страница: 142 / 198

Supporting Secure Access Client
132 Firebox SSL VPN Gateway
To use Gaim
1 From the portal page, choose A public computer and log on.
2 In the Web browser, double-click the Gaim icon.
3 If messenging services were not added, an Accounts window opens. Click Add .
4 In the Add Account dialog box, in Protocol , select the instant messenging service to add.
5 Complete the rest of the information and click Save .
6 Repeat, adding instant messenging services for each product.
7 To log on to an instant messenging service, in the Gaim Login dialog box, in Account , select the
service, type the password, and then click Sign on .
Supporting Secure Access Client
To enable users to connect to and use the Firebox SSL VPN Gateway, you need to provide them with the
following information:
• Firebox SSL VPN Gateway Web address
, such as https:// AccessGatewayFQDN /
If a user needs access from a computer that is not running Windows 2000 or above or Linux, but is
running a Java Virtual Machine (JVM) 1.4.2 or higher, the user can use the Java applet version of
the kiosk. The Web address for connecting to the Java applet version of the kiosk is:
https:// AccessGateway /vpn_portal-javaonly.html
• The authentication realm name required for logon (if you use realms other than the realm named
Default).
• Path to any network drives that the users can access, which is done by mapping a network drive
on their computer.
• Any system requirements for running the Firebox SSL VPN Gateway Clients if you configured end
point resources and policies.
Depending on the configuration of a remote user’s system, you might also need to provide additional
information:
• To start the Secure Access Client , Windows 2000 users must be an administrator to install
programs on their computer. This restriction applies to Windows XP for first-time installation only,
not for upgrades.
• If a user runs a firewall on the remote computer, the user might need to change the firewall
settings so that it does not block traffic to or from the IP addresses to which you granted access.
The Secure Access Client automatically handles Internet Connection Firewall in Windows XP and
Windows Firewall in Windows XP Service Pack 2. For information about configuring a variety of
popular firewalls, see “Using Firewalls with Firebox SSL VPN Gateway” on page 149.
• Users who want to FTP over the Firebox SSL VPN Gateway connection must set their FTP
application to perform passive transfers. A passive transfer means that the remote computer
establishes the data connection to your FTP server, rather than your FTP server establishing the
data connection to the remote computer.
• Users who want to run X client applications across the connection must run an X server, such as
XManager, on their computer.
Because users work with files and applications just as if they were local to the organization’s network, no
retraining of users or configuration of applications is needed.