Netgear SSL312 SSL312 User Manual - Page 57

Defining and Editing Group Policies, In the Group Policies of the Group Settings menu - 100

Page 57 highlights

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual The maximum timeout setting is 232 or over 100,000 minutes, although setting the timeout to 0 on the Global Settings page disables the inactivity timeout (if 0 is also configured as the inactivity timeout for the user and group). 4. Click Apply to save the configuration changes. Defining and Editing Group Policies With group access policies, all traffic is allowed by default. You can create additional allow and deny policies by destination address or address range and by service type. The most specific policy will take precedence over less specific policies. For example, a policy that applies to only one IP address will have priority over a policy that applies to a range of IP addresses. If two policies apply to a single IP address, then a policy for a specific service (for example RDP) will take precedence over a policy that applies to all services. Note: User policies take precedence over all group policies and group policies take precedence over all global policies, regardless of the policy definition (A user policy that allows access to all IP addresses will take precedence over a group policy that denies access to a single IP address). To define group access policies: 1. In the Group Policies section of the Group Settings menu, click Add Policy. An Add Policy menu displays. Figure 4-8 2. From the Apply Policy To pull-down menu, select whether the policy will be applied to a predefined network resource, an individual host, a range of addresses or all addresses. Setting Up User and Group Access Policies v2.1, November 2008 4-11

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
Setting Up User and Group Access Policies
4-11
v2.1, November 2008
The maximum timeout setting is 2
32
or over 100,000 minutes, although setting the timeout to 0
on the Global Settings page disables the inactivity timeout (if 0 is also configured as the
inactivity timeout for the user and group).
4.
Click Apply to save the configuration changes.
Defining and Editing Group Policies
With group access policies, all traffic is allowed by default. You can create additional allow and
deny policies by destination address or address range and by service type.
The most specific policy will take precedence over less specific policies. For example, a policy
that applies to only one IP address will have priority over a policy that applies to a range of IP
addresses. If two policies apply to a single IP address, then a policy for a specific service (for
example RDP) will take precedence over a policy that applies to all services.
To define group access policies:
1.
In the Group Policies section of the Group Settings menu, click Add Policy. An Add Policy
menu displays.
2.
From the Apply Policy To pull-down menu, select whether the policy will be applied to a
predefined network resource, an individual host, a range of addresses or all addresses.
Note:
User policies take precedence over all group policies and group policies take
precedence over all global policies, regardless of the policy definition (A
user
policy that allows access to all IP addresses will take precedence over a
group
policy that denies access to a single IP address).
Figure 4-8