SonicWALL ex9000 Getting Started page 22

Deploying the Same Agents to All Users
When you create an authentication realm in AMC, a default
community associated with the realm is also automatically
created. This single community may be sufficient if you have a
homogenous group of users whose resource needs and access
methods are identical.
To configure a single community:
1. Create a realm on the General section of the Configure
Realm page that references an external authentication
server. AMC automatically creates a default community
that is referenced by the realm. The default community
settings are global and apply to any realms that reference
it.
2. Configure the community by selecting the users or groups
who belong to it, the access methods they will use to
connect to the VPN, and optionally any End Point Control
options.
Deploying Different Agents to Different Users
Multiple communities give you the flexibility to provision
different access agents to different populations of users, and to
deploy different End Point Control configurations. Even if your
users are stored on a single external authentication server, you
may want to segment them by function in your organization, by
the types of resources to which they need access, or for
security reasons.
Page 20 Access Component Provisioning
For example, you may want to create a community for those
employees who use IT-managed laptops for remote access,
and provision them with the Connect Tunnel client to allow them
extensive access to your network resources. For your business
partners, you may want to create a community that restricts
them to Web access and assigns them to an End Point Control
zone that provisions a data protection tool to remove all session
data after they log off.
The configuration steps involved in creating multiple
communities are described in
Employees and Partners on page 21.
Configuring Access for