Which Types Of Resources Should Users Have Access To - SonicWALL SMA Planning Manual

Which Types of Resources Should Users Have Access
To?
The SonicWall SMA appliance manages a wide variety of corporate resources, which fall into the categories
described in Types of user resources.
Types of user resources
Resource type Examples
Web Microsoft Outlook Web
Access
Web‐based applications
Web portals
Web servers
Client/server Terminal servers (such as
Citrix or WTS)
Microsoft Outlook Lotus
Notes
File Shares Network folders
Shared folders
Network browsing
Windows domains
Topics:
• How Will Users Access Your Resources? on page 16
• Tunnel, Proxy, or Web: Which Access Method is Best? on page 16
How Will Users Access Your Resources?
Users can access VPN resources secured by the appliance using a variety of agents and clients. Your deployment
options can range anywhere from "managed" desktops controlled by your IT department, to systems outside of
your control, including employees' home computers, partner desktops, and other systems such as kiosks or
handheld devices.
How users gain access to your network resources depends on what those resources are. The Connect Tunnel
client, for example, is installed on the user's device and provides the broadest network access and support, and
greatest ease of administration. The OnDemand agent also provides broad cross‐platform support, but does not
handle bi‐directional applications like VoIP.
Tunnel, Proxy, or Web: Which Access Method is Best?
The SMA access services and clients offer a wide array of methods with different degrees of capability for
reaching your organization's resources. Use the table below to determine which ones are best for you and your
users.
Other factors to consider, aside from technical requirements, are:
• Security requirements such as the safeguards you want to put in place on the desktop.
• User profiles, including the levels of technical sophistication among your users.
Planning considerations
• When specifying URLs to Web resources, include the
http:// or https:// prefix.
• Use aliases to obscure host names on private
networks.
• Identify resources by host name, IP address or IP
range, subnet IP address, or domain name.
• A specific file system resource can be an entire server
(for example, \\ginkgo), a shared folder
(\\john\public), or a network folder
(\\ginkgo\news).
• Defining a Windows domain gives authorized users
access to all network file resources.
SonicWall SMA Connect Tunnel 12.0 Deployment Planning Guide
16
Planning Your VPN