Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual page 96

Secure: Specifies the software categories that must be present on a client machine for the client
to be secure. When a client is at a secure, the traffic policies can be configured so that the client
has access to all or most of the protected resources, depending on the role of the client.
None: If a client does not have any of the software such as firewall or antivirus specified in the
client integrity check policy, then the security level of that client is None. When a client is at
this level, the SSL VPN connection is established, but the client is given access to only a
minimal set of resources.
In some circumstances you cannot configure a custom security level of a client.
If, during the client integrity check, a client is found to have a certain level of security, then all
the policies under that level as well as the policies under the lower security levels are imposed
on the client. For example, if the client passes the security level check as Moderately Secure,
then all the policies for this level as well as policies for Least Secure and None are imposed on
the client.
If you change the requirements for a particular security level, the changes are applied only to
new user connections. For example, a client that has established the SSL VPN connection is
currently at the Secure level. You now add a new the requirement for the Secure level, so the
client that is already connected at the Secure level now does not meet the requirements for the
new Secure level. In this scenario, the client that is already connected continues to be
connected to the server. The new policies are applicable only to new connections.
NOTE: If you want to impose the new policies for clients that are already connected, you must
force the clients to reconnect by restarting the SSL VPN server.
To configure a client security level:
1 In the Administration Console, click Devices > SSL VPNs > Edit.
2 Select Client Security Levels from the Policies section. The Client Security Levels page is
displayed.
The following security levels can be configured:
Least Secure: You can configure this level for a client that has met the minimal requirement
for the client integrity check.
Moderately Secure: You can configure this level for a client that has met the moderate
requirements for the client integrity check.
Secure: You can configure this level for a client that has met all the requirements for the client
integrity check.
None: You can configure this level to provide minimal access to resources for a client, who that
has failed the client integrity check.
96 Novell Access Manager 3.1 SP1 SSL VPN Server Guide