Unified Services Router    User Manual 
139 
Figure 99: List of SSL VPN polices (Global filter) 
 
To add a SSL VPN policy, you must first assign it to a user, group, or make it global 
(i.e.  applicable to all SSL VPN users).  If the policy is for a group, the available 
configured groups are shown in a drop down menu  and one must be selected. 
Similarly, for a user defined policy  a SSL VPN user must be chosen from the 
available list of configured users.  
The next step is to define the policy details. The policy name is a unique identifier for 
this rule. The policy can be assigned to a specific Network Resource (details follow in 
the subsequent section), IP address, IP network, or all devices on the LAN of the 
router.  Based on the selection of one of these four options, the appropriate 
configuration fields are required (i.e. choosing the network resources from a list of 
defined resources, or defining the IP addresses). For applying the policy to addresses 
the port range/port number can be defined.  
The final steps require the policy permission to be set to either permit or deny access 
to the selected addresses or network resources. As well the policy can be specified for 
one or all of the supported SSL VPN services (i.e. VPN tunnel) 
Once defined, the policy goes into effect immediately. The policy name, SSL service 
it applies to, destination (network resource or IP addresses) and permission 
(deny/permit) is outlined in a list of configured policies for the router.