Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual page 17

Ability to Order Rules
If you have configured more than one rule for a user's role, the rule that is placed first is applied
first. Novell SSL VPN allows you to change the order of rules by dragging and dropping them,
based on their priority. For more information on rule ordering in SSL VPN, see Section 14.3.2,
"Rule Ordering," on page 99.
Ability to Import and Export Policies
Novell SSL VPN allows you to export the existing configuration into an XML file through the
Administration Console. You can reimport this configuration later. This is a very useful feature
when you upgrade your servers from one version to another. For more information, see
Section 14.3.3, "Exporting and Importing Traffic Policies," on page 100
Desktop Cleanup Feature
When a user accesses the protected resource from outside by using SSL VPN, it also means that the
sites that the user visited are stored in the browser history, or some sensitive information is stored in
the cache or cookies. This is a potential security threat if it is not properly dealt with. The Novell
SSL VPN client comes with the desktop cleanup feature, so the user has the option to delete all the
browser history, cache, cookies, and files from the system, before logging out of the SSL VPN
connection.
If the user uses Firefox* to connect to SSL VPN, the browsing data that was stored after the SSL
VPN connection was made is deleted. In Internet Explorer*, all the browser data is deleted including
the data that was stored before the SSL VPN session was established.
Sandbox Feature
When you connect to SSL VPN in either Kiosk mode or Enterprise mode, a folder named VPN-
SANDBOX is created on your desktops can manually copy any files that you download from your
corporate network or any other files into this folder. This folder is automatically deleted along with
its contents when the user logs out of the SSL VPN connection. For more information on the
sandbox feature of SSL VPN, see "Sandbox Feature" in the Novell Access Manager 3.1 SSL VPN
User Guide.
Custom Login Policy
When custom login policy is configured, SSL VPN redirects the custom login requests to different
URLs based on the policy. This is a very useful feature if users want to access applications such as
those on the Citrix* application servers. For more information on how to configure a custom login
policy, see Section 15.4, "Configuring a Custom Login Policy for SSL VPN," on page 103.
SSL VPN Features 17