SonicWALL SMA - Which Types of Resources Should Users Have Access To?

SonicWallSMAConnectTunnel12.0DeploymentPlanningGuide
PlanningYourVPN
16
WhichTypesof ResourcesShouldUsersHaveAccess
To?
TheSonicWallSMAappliancemanagesawidevarietyofcorporateresources,whichfallintothecategories
describedinTypesofuserresources.
Topics:
• HowWillUsersAccessYourResources?onpage16
• Tunnel,Proxy,orWeb:WhichAccessMethodisBest?onpage16
HowWillUsersAccessYourResources?
UserscanaccessVPNresourcessecuredbytheapplianceusingavarietyofagentsandclients.Yourdeployment
optionscanrangeanywherefrom“managed”desktopscontrolledbyyourITdepartment,tosystemsoutsideof
yourcontrol,includingemployees’homecomputers,partnerdesktops,andothersystemssuchaskiosksor
handhelddevices.

Howusersgainaccesstoyournetworkresourcesdependsonwhatthoseresourcesare.TheConnectTunnel
client,forexample,isinstalledontheuser’sdeviceandprovidesthebroadestnetworkaccessandsupport,and
greatesteaseofadministration.TheOnDemandagentalsoprovidesbroadcross‐platformsupport,butdoes
not
handlebi‐directionalapplicationslikeVoIP.
Tunnel,Proxy,orWeb:WhichAccessMethodisBest?
TheSMAaccessservicesandclientsofferawidearrayofmethodswithdifferentdegreesofcapabilityfor
reachingyourorganization’sresources.Usethetablebelowtodeterminewhichonesarebestforyouandyour
users.
Otherfactorstoconsider, asidefromtechnicalrequirements,are:
•Securityrequirementssuchasthe
safeguardsyouwanttoputinplaceonthedesktop.
•Userprofi les,includingthelevelsoftechnicalsophisticationamongyourusers.
Typesofuserresources
Resourcetype Examples Planningconsiderations
Web MicrosoftOutlookWeb
Access
Web‐basedapplications
Webportals
Webservers
• WhenspecifyingURLstoWebresources,includethe
http://orhttps://prefix.
• Usealiasesto
obscurehostnamesonprivate
networks.
Client/server Terminalservers(suchas
CitrixorWTS)
MicrosoftOutlookLotus
Notes
• Identifyresourcesbyhostname,IPaddressorIP
range,subnetIPaddress,ordomainname.
FileShares Networkfolders
Sharedfolders
Networkbrowsing
Windowsdomains
• Aspecificfilesystemresourcecanbeanentireserver
(forex ample,\\ginkgo),asharedfolder
(\\john\public),oranetworkfolder
(\\ginkgo\news).
• DefiningaWindowsdomaingivesauthorizedusers
accesstoallnetworkfileresources.