NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 205

The domain determines the authentication method that is used and the portal layout that is
presented, which in turn determines the network resources to which the users are granted
access. Because you must assign a portal layout when creating a domain, the domain is
created after you have created the portal layout.
b. Create one or more groups for your SSL VPN users.
When you define the SSL VPN policies that determine network resource access for your
SSL VPN users, you can define global policies, group policies, or individual policies.
Because you must assign an authentication domain when creating a group, the group is
created after you have created the domain.
c. Create one or more SSL VPN user accounts.
Because you must assign a group when creating a SSL VPN user account, the user account
is created after you have created the group.
3. For port forwarding, define the servers and services
Forwarding" on page
Create a list of servers and services that can be made available through user, group, or global
policies. You can also associate fully qualified domain names (FQDNs) with these servers.
The VPN firewall resolves the names to the servers using the list you have created.
4. For SSL VPN tunnel service, configure the virtual network adapter (see
VPN Client" on page
For the SSL VPN tunnel option, the VPN firewall creates a virtual network adapter on the
remote PC that then functions as if it were on the local network. Configure the portal's SSL
VPN client to define a pool of local IP addresses to be issued to remote clients, as well as DNS
addresses. Declare static routes or grant full access to the local network, subject to additional
policies.
5. To simplify policies, define network resource objects (see
to Simplify Policies" on page
Network resource objects are groups of IP addresses, IP address ranges, and services. By
defining resource objects, you can more quickly create and configure network policies.
6. Configure the SSL VPN policies (see
page 6-17).
Policies determine access to network resources and addresses for individual users, groups, or
everyone.
Virtual Private Networking Using SSL Connections
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
6-8).
6-10).
6-14).
"Configuring User, Group, and Global Policies" on
v1.0, April 2010
("Configuring Applications for Port
"Configuring the SSL
"Using Network Resource Objects
6-3