Ip Firewall Policy Support Of Domain Names; Vmware Pcoip And Citrix Ica - Black Box SmartPath LWN602A User Manual

Upload and activate configuration: (select)
Upload and activate CWP pages and Server key: (select)
Upload and activate certificate for RADIUS and VPN services: (clear)
Upload and activate employee, guests, and contractor credentials: (clear)
List of all SmartPath APs selected on the Monitor > Access Points > SmartPath APs page: (select)
Because the WLAN policy for the selected SmartPath APs contains an SSID using captive Web portal files, upload and
activate the files required for the captive Web portal to function and also the configuration. SmartPath EMS VMA
uploads the captive web portal files first followed by the configuration.
The SmartPath AP Update Results page appears so that you can monitor the progress of the upload procedure. When complete,
"100%" appears in the Upload Rate column and "Successful" appears in the Update Result column.
NOTE: If a managed SmartPath AP already has the maximum number of captive Web portal directories (8), you must remove at
least one of them before you can add a new one. To see how many directories are already on a SmartPath AP and remove
a directory if necessary, do the following:
1. Click Monitor > Access Points > SmartPath APs > (select a SmartPath AP) > Update > Remove Captive Web Page
Directory > Remove Specific Web Page Directory.
2. Select the checkbox of the directory that you want to remove, and then click Submit.
To test the captive Web portal:
1. Take a wireless client near one of the SmartPath APs, and form an association with the guest SSID, entering guest123 when
prompted for the preshared key.
2. After the client has formed an association, open a Web browser.
The SmartPath AP intercepts the HTTP or HTTPS traffic from your browser to the URL of its home page and redirects it to the
login page (registration.html) on the captive Web portal.
3. Complete the registration form, and then click Submit.
After a successful registration, the "Login Successful" page appears.
4. Close the Web page and open a new browser window.
The browser successfully opens to its home page, and you can visit other sites on the public network. If there is any Web server
on the local network, try to browse to it and you will find that it is not possible. Similarly, if you try to ping the default gateway
or a remote website (www.blackbox.com, for example), you will find that you do not receive any responses because the fire-
wall does not permit ICMP traffic to either the internal or external network. On the other hand, if there is a remote IKE peer to
which you can build a VPN tunnel, you will find that you will be able to do so.

9.3.5 IP Firewall Policy Support of Domain Names

IP firewall policies now support domain name as the source and destination in their rules.
9.3.6 VMware PCoIP and Citrix UCA
With both PCoIP (PC-over-IP) and CItrix ICA (Independent Computing Architecture) desktop virtualization protocols now pre-
defined as services, you can quickly create firewall rules to allow or block these two services.
Chapter 9: Common Configuration Examples
724-746-5500 | blackbox.com
Page 133