At main menu of SSL it's possible to create two types of access policies (Figure 4.21):
- Permission policies: Making a certificate association to a permission policy will give permission only to the configured destinations;
- Restriction policies: Making a certificate association to a restriction policy will give permission to all except the configured destinations;
After clicking Insert and choosing the name, clicking on it will open a window when it's possible to choose the destinations (Figure 4.22). The destinations options include:
- Machine groups;
- Machines;
- IP Subnets;
- IP Machines;
- IP Ranges.
Figure 4.21:
VPN SSL - Access policies list
|
|
Figure 4.22:
VPN SSL - Access policy configuration
|
|
root
2009-12-23
