ZyXEL Vantage CNM User Guide - Page 350

Chapter 12 SSL VPN The following table describes the labels in this screen. Table 137 Device Operation > Device Configuration > VPN > SSL VPN > Access Privilege > Add/Edit LABEL DESCRIPTION Configuration Enable Select this option to activate this SSL access policy. Name Enter a descriptive name to identify this policy. You can enter up to 15 characters ("a-z", A-Z", "0-9") with no spaces allowed. Description Enter additional information about this SSL access policy. You can enter up to 31 characters ("0-9", "a-z", "A-Z", "-" and "_"). User/Group (Optional) The Available list displays the name(s) of the user account and/or user group(s) to which you have not applied an SSL access policy yet. To associate a user or user group to this SSL access policy, select a user account or user group and click the select arrow to add to the Member list. You can select more than one name. SSL Application List (Optional) To remove a user or user group, select the name(s) in the Member list and click the deselect arrow. The Available list displays the name(s) of the SSL application(s) you can select for this SSL access policy. To associate an SSL application to this SSL access policy, select a name and click the select arrow to add to the Member list. You can select more than one application. To remove an SSL application, select the name(s) in the Member list and click the deselect arrow. Network Extension (Optional) Enable Network Select this option to create a VPN tunnel between the authenticated Extension users and the internal network. This allows the users to access the resources on the network as if they were on the same local network. Assign IP Pool Clear this option to disable this feature. Users can only access the applications as defined by the selected SSL application settings and the remote user computers are not made to be a part of the local network. Define a separate pool of IP addresses to assign to the SSL users. Select it here. DNS/WINS Server 1..2 Network List The SSL VPN IP pool cannot overlap with IP addresses on the ZyWALL's local networks (LAN and DMZ for example), the SSL user's network, or the networks you specify in the SSL VPN Network List. Select the name of the DNS or WINS server whose information the ZyWALL sends to the remote users. This allows them to access devices on the local network using domain names instead of IP addresses. To allow user access to local network(s), select a network name in the Available list and click the select arrow to add to the Member list. You can select more than one network. To block access to a network, select the network name in the Member list and click the deselect arrow. 350 Vantage CNM User's Guide