Cisco VPN 3000

13 Policy Management
13-2
VPN 3000 Concentrator Series User Guide
Configuration | Policy Management
This section of the Manager lets you configure policies that apply to groups, users, and VPN
Concentrator Ethernet interfaces.
Policies govern:
•
Access Hours: when remote users can access the VPN Concentrator.
• Traffic Management: what data traffic can flow through the VPN Concentrator, as governed by:
– Network Lists: lists of networks grouped as single objects.
– Rules: detailed parameters that govern the handling of data packets.
– SAs: IPSec Security Associations.
– Filters: structures for applying aggregated rules.
– NAT: Network Address Translation.
Figure 13-1: Configuration | Policy Management screen
Configuration | Policy Management | Access Hours
This section of the Manager lets you configure access times, to control when remote-access groups and
users can access the VPN Concentrator. You assign access hours to groups and users under
Configuration
| User Management
. Access hours don’t apply to LAN-to-LAN connections.
Figure 13-2: Configuration | Policy Management | Access Hours screen