Cisco WS-CE500-24TT Administration Guide - Page 163

Configuring VPN Configuring SSL VPN for Browser-Based Remote Access 7 Specifying the Network Resources for SSL VPN Network resources are services or groups of LAN IP addresses that are used to easily create and configure SSL VPN policies. This shortcut saves time when creating similar policies for multiple remote SSL VPN users. STEP 1 Click VPN > SSL VPN Server > Resources. The Resources window opens. STEP 2 To add a network resource, click Add. Other options: Click the Edit button to edit an entry. To delete an entry, check the box and then click Delete. To select all entries, check the box in the first column of the table heading. STEP 3 Enter the following information: • Resource Name: Enter a unique name to identify this resource. • Service: Choose one of the supported SSL VPN services to associate with this resource. STEP 4 Click Apply to save your settings. Configuring SSL VPN Port Forwarding Port Forwarding is used when you want to allow access only to a limited set of resources. For example, you may want the SSL VPN users to access the email service only. Port forwarding is different from split and full tunnel modes, which allow access to all ports for a give subnet. The following table lists some common applications and corresponding TCP port numbers: TCP Application FTP Data (usually not needed) FTP Control Protocol SMTP (send mail) Port Number 20 21 25 Cisco SA500 Series Security Appliances Administration Guide 163