SonicWALL SMA - Establishing an Authentication Realm

SonicWallSMAConnectTunnel12.0DeploymentPlanningGuide
CommonVPNConfigurations
26
Thenextstepistoputitalltogether,usingtheVPNbuildingblocksyoucreated,andconfiguretwo
communities,anemployee communityandapartnercommunity.Thestepsforconfiguringeithercommunity
arethesame:
Throughouttheseprocedures,remembertoclickPendingChangesintheupper‐rightcornerinAMC,
andthen
clickApplyChangestosaveyourconfigurationchanges.
Topics:
• EstablishinganAuthenticationRealmonpage26
• IdentifyingUsersonpage30
• AddingResourcesonpage31
• CreatingZonesofTrustonpage31
EstablishinganAuthenticationRealm
Toauthenticateyourusers,youmustfirstdefineanauthenticationrealm,whichisthecombinationofan
existingcompanydirectoryandanauthenticationmethod.
VPNbuildingblocksandtheirdescriptions
VPNBuildingBlocks Description
Createanauthenticationrealm SetupaMicrosoftActiveDirectory(AD)authenticationserver.
SeeEstablishinganAuthenticationRealmonpage
26.
Identifyusers AddafewtestuserswithnamesthatmatchonesonyourADserver.Forthis
testscenario,wewillidentifytwoofthemasemployees,andtwoofthemas
partners.
SeeIdentifyingUsersonpage30.
Addresources Definejustafewresources.
SeeAddingResourcesonpage31
.
EndPointControl CreatetwoStandardzonesoftrust:atrustedoneformembersofthe
Employeescommunity,andalesstrustedoneforPartners.Also,createa
quarantinezonefordevicesthatdon’tfitintoeithercommunity.
CreateWorkPlacestylesand
layouts
ChangehowWorkPlacelooksonaper‐communitybasis.
Thoughoptional,
thisproducesamorepolishedandcustomizedlook.Wewi llmodifythe
defaultstyleandlayoutanduseitfortheemployeescommunity,andthen
createadifferentlookforthepartnercommunity.
SeeCustomizingWorkPlaceonpage33.
Settingupcommunitiesandtheirdescription
SettingUpCommunities Description
Members Identifythe
membersforeachcommunity.
Accessmethods Definewhataccessmethodsareavailable.
EndPointControl Createzonesoftrust:atrustedoneformembersoftheEmployees
community,andalesstrustedoneforPartners.
WorkPlaceappearance UsedifferentWorkPlacestylesandlayoutsforthetwocommunities.
Accesscontrolrule Createrulesforwhatresources
canbeaccessedbywhichusers.
SeeAccessControlListsonpage39.