NETGEAR FVS336Gv3 Reference Manual page 450

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3
selection. The domain determines both the authentication method and the portal layout
that are used.
For an SSL portal, you must create authentication domains, user groups, and user accounts
as follows:
a. Create one or more authentication domains for authentication of SSL VPN users (see
Manage Authentication Domains
When remote users log in to the VPN firewall, they must specify a domain to which
their login account belongs. The domain determines the authentication method that is
used and the portal layout that is presented, which in turn determines the network
resources to which the users are granted access. Because you must assign a portal
layout when creating a domain, you create the domain after you create the portal
layout.
b. Create one or more groups for your SSL VPN users
on page 498).
When you define the SSL VPN policies that determine network resource access for
your SSL VPN users, you can define global policies, group policies, or individual
policies. Because you must assign an authentication domain when creating a group,
you create the group after you create the domain.
c. Create one or more SSL VPN user accounts (see
page 502).
Because you must assign a group when creating an SSL VPN user account, you first
must create a group and then a user account.
3. For port forwarding, define the servers and services (see
VPN Port Forwarding
Create a list of servers and services that can be made available through user, group, or
global policies. You can also associate fully qualified domain names (FQDNs) with these
servers. The VPN firewall resolves the names to the servers using the list you create.
4. For SSL VPN tunnel service, configure the virtual network adapter (see
VPN Client on page 462).
For the SSL VPN tunnel option, the VPN firewall creates a virtual network adapter on the
remote computer that then functions as if it were on the local network. Configure the
portal's SSL VPN client to define a pool of local IP addresses to be issued to remote
clients, as well as DNS addresses. Declare static routes or grant full access to the local
network, subject to additional policies.
5. To simplify policies, define network resource objects (see
Objects to Simplify Policies
Network resource objects are groups of IP addresses, IP address ranges, and services.
By defining resource objects, you can more quickly create and configure network policies.
6. Configure the SSL VPN policies (see
page 476).
Set Up Virtual Private Networking with SSL Connections
on page 492).
on page 456).
on page 470).
Configure User, Group, and Global Policies
450
(Manage Authentication Groups
Manage User Accounts
Configure Applications for SSL
Configure the SSL
Manage Network Resource
on
on