Navigate to MANAGE | Objects > Address Objects.The below resolution is for customers using SonicOS 6.5 firmware. This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. Now only the Public IPs mentioned in the Source of Access rule can access SSLVPN services using Netextender and Virtual Office Portal. Modify source address from ANY to Address Object / Address Group created in step 3/step 5.Click on Configure icon for default WAN to WAN access rule for SSLVPN service.ĬAUTION: Default rules can only be modified when "Enable the ability to remove and fully edit auto-added access rules " is checked in the internal settings page.Click on Zone Matrix and select WAN to WAN radio button as shown below :.Navigate to Policy | Rules and Policy > Access Rules.Select all the WAN IP address objects created in step 4 and Add them to the Address Group.If you want to allow access from multiple IPs, create Address Objects for all Public IPs as in step 3.NOTE: Zone should be "WAN" and "IP Address" should be Public IP of PC from which you want to allow access to SSLVPN.
Navigate to Objects | Match objects | Addresses > Address Objects.The below resolution is for customers using SonicOS 7.X firmware. This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. This article describes how we can restrict SSLVPN access to limited source IP address. However, we can secure the network by using SSL certificates, domain account integration (LDAP, RADIUS, etc), or by restricting access for SSLVPN services to limited source IP addresses.
So either we can enable client and web access both or disable both. Since both the access methods i.e client - NetExtender, SonicWALL Mobile Connect and web browser - Virtual Office portal, function on the same port and IP, it is not possible to just disable the Virtual Office portal access and keep the client access available. Both access methods require valid credentials (username, password and domain name). When we enable SSLVPN services for WAN zone, we open default port 4433 on the firewall IP for SSLVPN services, which includes access either via client - NetExtender and SonicWALL Mobile Connect or via web browser - Virtual Office portal. The Virtual Office portal is the website access of SSLVPN Services where users log in to launch NetExtender or access internal resources via Bookmarks.
0 kommentar(er)
