Configuring Groups For Vpn Policies - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
6. If you change local authentication, click Apply in the Domain screen to save your settings.
To delete one or more domains:
1. In the List of Domains table, select the check box to the left of the domain that you want to
delete, or click the Select All table button to select all domains. You cannot delete a default
domain.
2. Click the Delete table button.

Configuring Groups for VPN Policies

The use of groups simplifies the configuration of VPN policies when different sets of users have
different restrictions and access controls. Like the default domain of the VPN firewall, the default
group is also named geardomain. The default group geardomain is assigned to the default domain
geardomain. You cannot delete the default domain geardomain, nor its associated default group
geardomain.
When you create a new domain, a default group with the same name as the new domain is created
automatically. You cannot delete this default group either. However, when you delete the domain
with which it is associated, the default group is deleted automatically.
Note: IPsec VPN users always belong to the default domain (geardomain) and are not
assigned to groups.
Note: Groups that are defined on the User screen are used for setting SSL VPN policies.
These groups should not be confused with LAN groups that are defined on the
LAN Groups screen and that are used to simplify firewall policies. For information
about LAN groups, see
page 3-14.
Creating and Deleting Groups
To create a VPN group:
1. Select Users > Groups from the menu. The Groups screen displays.
shows the VPN firewall's default group—geardomain—and, as an example, several other
groups in the List of Groups table.
7-6
"Managing Groups and Hosts (LAN Groups)" on
Managing Users, Authentication, and Certificates
v1.0, April 2010
Figure 7-3 on page 7-7