SonicWallSMAConnectTunnel12.0DeploymentPlanningGuide
CommonVPNConfigurations
31
2Inoursampledeployment,we’r egoingtoaddjustfourusers(lateryou’llseehowtocontrolaccessto
resourcesbasedontheuserontheAccessControlpage).Click New,andthenselectManualentry.
3Createfourusermappings:
aFromtheRealmnamelist,selectCompanyXYZ.
bIntheUsername
field,enterausernameasitappearsinyourADserver.
c ClickSaveandaddanother.
dContinuetoaddthreemoreusers.
e ClickSave.
AddingResources
TheSonicWallappliancecanmanageawidevarietyofcorporateresources,whicharedescribedinDefining
Resourcesonpage18.Foroursamplescenariowewilljustdefineafew:
• Anetworksharewithmarketingmaterials(intendedforbusinesspartnersandvisibletoemployees).
• AccesstoMicrosoftOutlookonthe
Web(intendedsolelyforemployees).
Todefinetwocorporateresources:
1 ClickResourcesinthemainnavigationmenuinAMC.
2 ClickNew,andselectNetworkshare.
3EnteranamefortheresourceintheNamefield.Thisistheonlyresourceinoursampledeploymentto
whichpartnerswillhaveaccess.NameitVAR marketing collateral.
4UsingUNCsyntax,enterthepathfor
theresourceintheNetworksharefield.Forexample,
\\company_xyz\var\marketing.
5 SelectCreateshortcutonWorkPlacesothatalinktotheresourcewillbevisibletousers.
6 ClickSave.VARmarketingcollateralisnowaddedtoyourdefaultresources.
7Addasecondresource:
a ClickNew.
b SelectURL.
8IntheNamefield,
enterOutlook Web Access.Thisresourceisintendedforemployeesonly.
9IntheURLfield,enterhttps://mail.company_xyz.com.
10 SelectCreateshortcutonWorkPlace.
11 ClickSave.Youshouldnowseetwonewitemsinyourresourcelist.
Therearesomebuilt‐inresources,tomakesettingupaWorkPlaceportaleasier;theycannotbe
deleted.The
Usedcolumnindicateswhetheraresourceisinuse(aspartofaWorkPlaceshortcutorlayout,forexample).To
seewherearesourceisused,expanditsicon.Aresourcecannotbedeleteduntilitisnolongerusedbyother
configurationelements.
CreatingZonesofTrust
EndPointControl(EPC)providesextensiveprotectiontoensurethatyourusers’accessdevicesaresecure.To
keepthingssimpleinthisexample,wewillassumethatyourappliancehasalicenseforAdvancedEPC,andwe
willcreatetwoStandardzones:atrustedoneformembersoftheEmployeescommunity,
andalesstrustedone