SMA 210/410 Deployment Guide
Connecting the SMA on an Existing DMZ
13
7 On the Network > Address Objects page, click the Address Groups tab.
8 Click Add Group.
9 In the Add Address Object Group dialog box, create a group for the X0 interface IP address of your SMA
appliance and the NetExtender IP range:
• Enter a name for the group.
• In the left column, select the address objects you created and click the right arrow button.
• Click OK to create the group when both objects are in the right column.
10 On the Network > Interfaces page, verify that the assigned zone is DMZ for the interface connected to
your SMA appliance.
11 Navigate to the Firewall > Access Rules page, and select the Matrix view style.
12 Click the DMZ > LAN icon.
13 On the page that displays for DMZ to LAN, click Add.
14 In the Add Rule window, create a rule to allow access to the LAN for the address group you just created:
Starting IP address Start of the NetExtender IP
address range within your DMZ
range, such as 10.1.1.220.
Ending IP address End of the NetExtender IP
address range within your DMZ
range, for example 10.1.1.249.
From DMZ
To LAN
Service Port Any
Service Any