SonicWALL SSL-VPN 2000 Administrator's Manual page 224

•
•
•
•
Select the service type in the Service drop-down list. If you are applying a policy to a network
Step 3
object, the service type is defined in the network object.
Select PERMIT or DENY from the Status drop-down list to either permit or deny SonicWALL
Step 4
SSL VPN connections for the specified service and host machine.
When using Citrix bookmarks, in order to restrict proxy access to a host, a DENY rule must
Tip
be configured for both Citrix and HTTP services.
Click Add to update the configuration. Once the configuration has been updated, the new policy
Step 5
will be displayed in the Edit User Settings window.
The user policies are displayed in the Current User Policies table in the order of priority, from
the highest priority policy to the lowest priority policy.
Adding a Policy for an IP Address
Navigate to Users > Local Users.
Step 1
Click the configure icon next to the user you want to configure.
Step 2
Select the Policies tab.
Step 3
Click Add Policy...
Step 4
In the Apply Policy to field, click the IP Address option.
Step 5
Define a name for the policy in the Policy Name field.
Step 6
Type an IP address in the IP Address field.
Step 7
In the Port Range/Port Number field, optionally enter a port range or an individual port.
Step 8
In the Service drop-down list, click on a service object.
Step 9
In the Status drop-down list, click on an access action, either PERMIT or DENY.
Step 10
Click Add.
Step 11
Adding a Policy for an IP Address Range
In the Apply Policy to field, click the IP Address Range option.
Step 1
Define a name for the policy in the Policy Name field.
Step 2
Type a starting IP address in the IP Network Address field.
Step 3
See "Setting File Shares Access Policies" section on page
URL Object - If your policy applies to a predefined URL object, type the URL into the URL
field. See "Adding a Policy for a URL Object" section on page
IPv6 Address - On SonicWALL SSL-VPN models 2000 and higher, if your policy applies to
a specific host, enter the IPv6 address of the local host machine in the IPv6 Address field.
Optionally enter a port range (for example, 4100-4200) or a single port number into the Port
Range/Port Number field. See
IPv6 Address Range - If your policy applies to a range of addresses, enter the beginning
IPv6 address in the IPv6 Network Address field and the prefix that defines the IPv6
address range in the IPv6 Prefix field. Optionally enter a port range (for example, 4100-
4200) or a single port number into the Port Range/Port Number field. See
for an IPv6 Address Range" section on page
All IPv6 Address - If your policy applies to all IPv6 addresses, you do not need to enter
any IP address information. See
page 215.
"Adding a Policy for an IPv6 Address" section on page
215.
"Adding a Policy for All IPv6 Addresses" section on
SonicWALL SSL VPN 4.0 Administrator's Guide
Users > Local Users
212.
213.
"Adding a Policy
211
215.