Navigate to the Users > Local Users page.Ģ. To configure custom settings for individual users, perform the following steps:ġ. This user segmentation allows for granular control of access to the network-allowing users access to necessary resources while restricting access to sensitive resources to only those who require it.
Multiple range and route support for NetExtender enables network administrators to easily segment groups and users without the need of configuring firewall rules to govern access.
Select Enabled from the Tunnel All Mode drop-down list to force all traffic for this user-including traffic destined to the remote users’ local network-over the SRA NetExtender tunnel.ģ. Navigate to the NetExtender > Client Routes page. To add NetExtender client routes, perform the following steps:ġ. A user policy that allows access to all IP addresses will take precedence over a group policy that denies access to a single IP address. User policies take precedence over group policies and group policies take precedence over global policies, regardless of the policy definition.
If there are two policies that apply to a single IP address, then a policy for a specific service (for example RDP) will take precedence over a policy that applies to all services. For example, a policy that applies to only one IP address will have priority over a policy that applies to a range of IP addresses. Note The most specific policy will take precedence over less specific policies. If you do not create policies for your SRA appliance, then all NetExtender users may be able to access all resources on your internal network(s).Īdditional allow and deny policies may be created by destination address or address range and by service type. This is the opposite of the default behavior of Dell SonicWALL Unified Threat Management (UTM) appliances, where all inbound traffic is denied by default. Note With group access policies, all traffic is allowed by default. IPv4 and IPv6 routes both follow these rules. User-level NX routes must always be pushed to the NX client, and global routes must still depend on the “Add Global NetExtender Client Routes” option as they did before. Group-level NetExtender routes should be assigned from both primary and additional groups if the user-level option to “Add Group NetExtender Client Routes” is enabled. The NetExtender client routes are passed to all NetExtender clients and are used to govern which private networks and resources remote user can access via the SRA connection. The NetExtender > Client Routes page allows the administrator to add and configure client routes. This section provides an overview of the NetExtender > Client Routes page and a description of the configuration tasks available on this page.
0 kommentar(er)
