NETGEAR ProSafe SSL312 Reference Manual page 55

Figure 6-3
2. From the Apply Policy To pull-down menu, select whether the policy will be applied to a
predefined network resource, an individual host, a network or all addresses.
3. Enter a name for the policy in the Policy Name field.
Note: SSL VPN Concentrator policies apply to the destination address(es) of the SSL
VPN connection, not the source address. You cannot permit or block a specific
IP address on the Internet from authenticating to the SSL VPN Concentrator
through the policy engine.
• If your policy applies to a predefined network resource, select the name of the resource
from the Defined Resource menu. For information about creating network resources,
refer to Chapter 8, "Network
• If your policy applies to a specific host, enter the IP address of the local host machine in
the IP Address field.
• If your policy applies to a network, enter the network address in the Network Address
field and the subnet mask in the Subnet Mask field.
4. Select the service type from the Service pull-down menu. If you are applying a policy to a
network resource, the service type is defined in the network resource.
5. Select PERMIT or DENY from the Status pull-down menu to either permit or deny SSL
VPN connections for the specified service and host machine.
6. Click Apply to update the configuration. Once the configuration has been updated, the new
policy will be displayed in the Global Policies table on the Global Settings screen.
The Global Policies will be displayed in the order of priority, from the highest priority policy
to the lowest priority policy.
Group and User Access Policies
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
Resources".
v1.0, August 2006
6-5