Dell SonicWall SRA 4200 Administrator's Manual page 321

Enabling Group NetExtender Client Routes
To enable global NetExtender client routes for groups that are already created, perform the
following steps:
Navigate to Users > Local Groups.
Step 1
Click the configure icon next to the group you want to configure.
Step 2
In the Edit Local Group page, select the Nx Routes tab.
Step 3
Select the Add Global NetExtender Client Routes check box.
Step 4
Click Accept.
Step 5
Enabling Tunnel All Mode for Local Groups
This feature is for external users, who will inherit the settings from their assigned group upon
login. Tunnel all mode ensures that all network communications are tunneled securely through
the SRA tunnel. To enable tunnel all mode, perform the following tasks:
Navigate to Users > Local Groups.
Step 1
Click the configure icon next to the group you want to configure.
Step 2
In the Edit Local Group page, select the Nx Routes tab.
Step 3
Select Enable from the Tunnel All Mode drop-down list.
Step 4
Click Accept.
Step 5
Note
Adding Group Policies
With group access policies, all traffic is allowed by default. Additional allow and deny policies
may be created by destination address or address range and by service type.
The most specific policy will take precedence over less specific policies. For example, a policy
that applies to only one IP address will have priority over a policy that applies to a range of IP
addresses. If there are two policies that apply to a single IP address, then a policy for a specific
service (for example RDP) will take precedence over a policy that applies to all services.
User policies take precedence over group policies and group policies take precedence over
global policies, regardless of the policy definition. A user policy that allows access to all IP
addresses will take precedence over a group policy that denies access to a single IP address.
Note Within the group policy scheme, the primary group policy is always enforced over any
additional group policies.
To define group access policies, perform the following steps:
You can optionally tunnel-all SRA client traffic through the NetExtender connection
by entering 0.0.0.0 for the Destination Network and Subnet Mask/Prefix in the Add
Client Routes window.
Users Configuration | 321