SonicWALL SMA Planning Manual page 37

2 Click Configure. The Network Tunnel Client Settings page is displayed.
3 Click Edit next to Address pools.
4 On the Address Pools page, click New.
5 In the Name field, enter a label for the IP address pool that will be used to allocate addresses to the
network tunnel clients.
6 There are several ways to specify an address pool. If you're not sure which one to choose, select
Translated address pool (Source NAT) so that the appliance will assign non‐routable IP addresses to
clients and use Source NAT to translate them to a single address. The drawback is that applications that
require reverse connections, such as VoIP or active‐mode FTP, may not function properly.
7 Click Save. The address pool appears in the Address Pools list.
8 Select the checkbox next to the address pool you just configured.
9 Click Save.
10 Click OK. You should now be back on the Configure Community ‐ Access Methods page.
11 Click Next to define the zone of trust for employees. Go to Creating Zones of Trust on page 31.
Configuring End Point Control for Employees
Configure the Employees community to use the zone of trust you configured in Creating a Standard Zone for
Trusted Users on page 32. (The conditions you set in a real deployment will of course be different—this is just a
demonstration of how EPC works.)
To specify the Trusted zone for Employees:
1 In the Standard zones list, select the checkbox next to Trusted and then click the right arrow (>>) button.
It is now in the In use list.
2 Under Zone fallback options, click Place into quarantine zone and then select Untrusted from the
drop‐down menu.
3 Click Next to select WorkPlace appearance settings for employees.
SonicWall SMA Connect Tunnel 12.0 Deployment Planning Guide
Common VPN Configurations
37