Configure Groups For Vpn Policies - NETGEAR ProSafe SRX5308 Reference Manual

Configure Groups for VPN Policies

The use of groups simplifies the configuration of VPN policies when different sets of users
have different restrictions and access controls. Like the default domain of the VPN firewall,
the default group is also named geardomain. The default group geardomain is assigned to
the default domain geardomain. You cannot delete the default domain geardomain, nor its
associated default group geardomain.
IMPORTANT:
When you create a new domain on the Domains screen (see the
previous section), a default group with the same name as the new
domain is created automatically. The name of a default group is
appended by an asterisk, and you cannot delete a default group.
However, when you delete the domain with which it is associated,
the default group is deleted automatically.
Note: IPSec VPN users always belong to the default domain (geardomain)
and are not assigned to groups.
Note: Groups that are defined on the User screen are used for setting SSL
VPN policies. These groups should not be confused with LAN
groups that are defined on the LAN Groups screen and that are used
to simplify firewall policies. For information about LAN groups, see
Manage Groups and Hosts (LAN Groups)
Create and Delete Groups

To create a VPN group:
1. Select Users > Groups. The Groups screen displays. The following figure shows the
VPN firewall's default group—geardomain—and, as an example, several other groups in
the List of Groups table.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Managing Users, Authentication, and Certificates
on page 67.
224