Sangfor M5100 User Manual page 190

If Verify user by analyzing packet is selected, the SSL VPN account will bind to the account for resource
access; in the way, that packet is obtained as specified according to Packet Format and the others settings.
If Resource is accessible to user using the designated SSO user account is selected, end user have to use
the corresponding SSL VPN account and designated SSO user account to access this L3VPN resource, other
user accounts being unable to match the credential.
Web application, TCP application and L3VPN support accounts binding.

To enable end users to single sign in to a resource, enable SSO for that resource (under SSL
VPN>Resources>Resource Management>Edit L3VPN>SSO tab) and bind the SSL VPN account to
the SSO user account (to configure SSO user account, refer to the Configuring SSO User Account section
in Chapter 4).

Applying Verify user by analyzing packet does not require SSO to be enabled.
14. Configure URL Access Control tab.
This achieves the control over users' access to certain directory of a server, user being able or unable to access
the specified directory.
URL access control feature is only available while the selected L3VPN type is HTTP. The other types of
L3VPN do not support this feature.
15. Click the Save button and Apply button to save and apply the settings.
SANGFOR SSL M6.8EN User Manual
189