Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual page 72

Policy Container: Select a policy container from the list.
Policy: Select Create SSL VPN Default Policy from the drop-down list. A policy pop-up
appears. Click Apply Changes in the pop-up, then click Close.
The default SSL VPN policy injects both the username and password in the authentication
header. If you do not want the password to be pushed to the authentication header, configure a
policy with a username and a string constant. For more information on configuring policies, see
"Creating Identity Injection
Management Guide
You can also configure the SSL VPN policy to inject the client IP address, so that the IP
address can then be included in log entries. For more information, see
"Configuring the Default Identity Injection Policy," on page
Name: Select Create SSL VPN Default Protected Resource from the drop-down list.
9 Click OK to close the Enable SSL VPN pop-up.
10 Click the Web Servers tab.
11 Specify 8080 in the Connect Port field, then click OK.
12 In the Proxy Service List section, click the name of the parent proxy service of the newly
created SSL VPN proxy service. This host does not have a multi-homing value.
13 Select the Protected Resources tab.
14 Select SSLVPN_Default from Protected Resources List.
15 Select an authentication contract from the Contract drop-down list. Make sure you select
Name/Password - Form as the authentication contract.
16 In the URL Path List section, ensure that the URL is /sslvpn/*.
IMPORTANT: Make sure that you configure the URL as given above. Any variation leads to
the failure of SSL VPN service.
17 Click Configuration Panel, then click OK.
18 On the Configuration page, click OK.
19 On the Access Gateways page, click Update.
20 To update the Identity Server, click Identity Servers > Update.
72 Novell Access Manager 3.1 SP1 SSL VPN Server Guide
Policies"in the Novell Access Manager 3.1 SP1 Policy
Section 10.1,
69.