vi

v1.1, November 2006

Chapter 3

Authenticating Users

Authentication Domains

..................................................................................................

3-1

Local User Database Authentication

..............................................................................

3-2

RADIUS and NT Domain Authentication

........................................................................

3-3

Configuring for RADIUS Domain Authentication

......................................................

3-3

Configuring for NT Domain Authentication

...............................................................

3-5

LDAP Authentication

......................................................................................................

3-6

Sample LDAP Attributes

..........................................................................................

3-6

LDAP Attribute Rules

...............................................................................................

3-7

Sample LDAP Users and Attributes Settings

...........................................................

3-7

Querying an LDAP Server

........................................................................................

3-8

Configuring for LDAP Authentication

.......................................................................

3-8

Active Directory Authentication

.....................................................................................

3-10

Configuring for Windows Active Directory Authentication

......................................

3-10

Troubleshooting Active Directory Authentication

...................................................

3-12

Deleting a Domain

........................................................................................................

3-12

Chapter 4

Setting Up User and Group Access Policies

Determine Your Requirements

.......................................................................................

4-1

Users, Groups and Global Policies

.................................................................................

4-2

Global Policies

................................................................................................................

4-3

Editing Global Policy Settings

..................................................................................

4-3

Adding and Editing Global Policies

..........................................................................

4-4

Defining and Editing Global Bookmarks

...................................................................

4-6

Groups Configuration

.....................................................................................................

4-6

Adding a New Group

................................................................................................

4-7

Editing Group Settings

.............................................................................................

4-8

Defining and Editing Group Policies

.........................................................................

4-9

Defining and Editing Group Bookmarks

.................................................................

4-11

Deleting a Group

....................................................................................................

4-12

Users Configuration

......................................................................................................

4-14

Adding a New User

................................................................................................

4-14

Editing a User

.........................................................................................................

4-16

Defining and Editing User Policies

.........................................................................

4-18

vii

v1.1, November 2006

Defining and Editing a User Bookmarks

................................................................

4-19

Deleting a User

......................................................................................................

4-19

Using Network Resource Objects to Simplify Policies

..................................................

4-20

Chapter 5

Configuring the Remote Access Web Portal

Portal Layouts

.................................................................................................................

5-1

Portal Options

..........................................................................................................

5-2

Adding Portal Layouts

..............................................................................................

5-2

Adding Terminal Services Applications to the Portal

................................................

5-6

Customizing the Banner

...........................................................................................

5-7

Duplicating and Editing Portal Layouts

....................................................................

5-8

Advanced Portal Page Layout Specifications

.................................................................

5-9

Chapter 6

Configuring the SSL VPN Tunnel Client and Port Forwarding

Two Approaches for VPN

...............................................................................................

6-1

SSL VPN Client Configuration

........................................................................................

6-2

Adding IP Address Ranges

......................................................................................

6-3

Adding Routes for VPN Tunnel Clients

....................................................................

6-4

Configuring Applications for Port Forwarding

.................................................................

6-6

Configuring Host Name Resolution

..........................................................................

6-7

Chapter 7

Additional System Configuration

Configuring Network Settings

.........................................................................................

7-1

Sample SSL VPN Concentrator Configuration

.........................................................

7-1

Network Interface Configuration

...............................................................................

7-2

Network Route Configuration

...................................................................................

7-4

Network Host Table Settings

....................................................................................

7-6

Configuring DNS Settings

........................................................................................

7-7

Setting Date and Time

....................................................................................................

7-8

System Configuration Utilities

.......................................................................................

7-10

Encrypting the Configuration File

...........................................................................

7-11

Exporting and Saving a Backup Configuration File

................................................

7-11

Importing a Configuration File

................................................................................

7-12

Erasing the Configuration and Restoring the Default Settings

...............................

7-13

Upgrading the SSL VPN Concentrator Firmware

..................................................

7-13

viii

v1.1, November 2006

Additional Notes on the Management Interface

...........................................................

7-14

Chapter 8

Monitoring and Logging

SSL VPN Concentrator Status

........................................................................................

8-1

Active Users

...................................................................................................................

8-3

Event Log

.......................................................................................................................

8-4

Log Settings

....................................................................................................................

8-5

Diagnostics

.....................................................................................................................

8-8

Appendix A

Default Settings and Technical Specifications

Factory Default Settings

................................................................................................

A-1

Technical Specifications

.................................................................................................

A-2

Appendix B

Related Documents

Index

-ix

v1.1, November 2006

About This Manual

The

NETGEAR

®

Prosafe™ SSL VPN Concentrator 25 SSL312 Reference Manual

describes how

to install and configure the SSL312. The information in this manual is intended for administrators

who will configure the SSL312. You should have intermediate computer and Internet skills.

Conventions, Formats and Scope

The conventions, formats, and scope of this manual are described in the following paragraphs:

•

Typographical Conventions.

This manual uses the following typographical conventions:

•

Formats.

This manual uses the following formats to highlight special messages:

Italics

Emphasis, books, CDs, URL names

Bold

User input

Fixed

Screen text, file and server names, extensions, commands, IP addresses

Note:

This format is used to highlight information of importance or special interest.

Tip:

This format is used to highlight a procedure that will save time or resources.

Warning:

Ignoring this type of note could result in a malfunction or damage to the

equipment.

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

-x

v1.1, November 2006

•

Scope.

This manual is written for the SSL VPN Concentrator according to these

specifications:

For more information about network, Internet, firewall, and VPN technologies, see the links to the

NETGEAR website in

Appendix B, “Related Documents”

.

Using This Manual

The HTML version of this manual includes the following:

•

Buttons,

and

, for browsing forwards or backwards through the manual one page

at a time

•

A

button that displays the table of contents and an

button. Double-click on a

link in the table of contents or index to navigate directly to where the topic is described in the

manual.

•

A

button to access the full NETGEAR, Inc. online knowledge base for the product

model.

•

Links to PDF versions of the full manual and individual chapters.

Printing this Manual

To print this manual you can choose one of the following several options, according to your needs.

•

Printing a Page in the HTML View

.

Danger:

This is a safety warning. Failure to take heed of this notice could result in

personal injury or death.

Product Version

ProSafe SSL VPN Concentrator 25 SSL312

Manual Publication Date

November 2006

Note:

Product updates are available on the NETGEAR, Inc. website at

.