Configuring An Ssl Tunnel Server - McAfee SG310 Administration Manual

VPN menu features
Port tunnels
To create an SSL tunnel client:
From the VPN menu, click Port Tunnels. The Port Tunnels page appears.
1
Select SSL Tunnel Client from the tunnels list and click Add. The SSL Tunnel Client page appears
2
(Figure 320).
Figure 320 SSL Tunnel Client page
Enter a descriptive name for the tunnel client in the Name field. The name can be one or more characters
3
of any type.
Ensure the Enable checkbox is selected. It is enabled by default.
4
In the Data Port field, enter the TCP port on which to listen for connections from local hosts to forward
5
across the tunnel. This must match the TCP port used by the application client.
• Range: an integer value from 1-65535
Enter the publicly accessible IP address of the remote tunnel server in the Tunnel Server field.
6
Enter the TCP port on which the tunnel server is listening for connections in the Tunnel Port field.
7
• Range: an integer value from 1-65535
Select the protocol to use when negotiating the SSL connection from the Protocol list. Available options
8
are:
• Raw [Default]
• CIFS
• NNTP
• POP3
• SMTP
To connect the tunnel client directly to an SSL server other than a tunnel server, select a Protocol
value other than Raw. For example, select POP3 to configure a mail server to use POP3 over SSL.
Click Finish.
9

Configuring an SSL tunnel server

Use this procedure to create an SSL tunnel server.
Prerequisite:
Install an SSL certificate. For further information, see
To create an SSL tunnel server
From the VPN menu, click Port Tunnels. The Port Tunnels page appears.
1
Select SSL Tunnel Server from the tunnels list and click Add. The SSL Tunnel Server page appears
2
(Figure 321).
316 McAfee UTM Firewall 4.0.4 Administration Guide
Certificates for HTTPS.