NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
4-18 Setting Up User and Group Access Policies
v2.0, May 2007
Defining and Editing User Policies
To define user access policies:
1. On the Edit User Settings screen, click Add Policy. An Add Policy menu displays.
2. In the Apply Policy To pull-down menu, select whether the policy will be applied to a
predefined network resource, an individual host, a network or all addresses.
3. In the Policy Name field, enter a name for the policy.
• If your policy applies to a predefined network resource, select the name of the resource
from the Defined Resource menu. For information about creating network resources, refer
to “Using Network Resource Objects to Simplify Policies” on page 4-20.
• If your policy applies to a specific host, enter the IP address of the local host machine in
the IP Address field.
• If your policy applies to a network, enter the network address in the Network Address
field and the subnet mask in the Subnet Mask field.
4. From the Service pull-down menu, select the service type. If you are applying a policy to a
network resource, the service type is defined in the network resource.
5. From the Status pull-down menu, select PERMIT or DENY to either permit or deny SSL VPN
connections for the specified service and host machine.
Figure 4-15
Note: SSL VPN Concentrator policies apply to the destination address(es) of the SSL
VPN connection, not the source address. You cannot permit or block a specific
IP address on the Internet from authenticating to the SSL VPN Concentrator
through the policy engine.
