SonicWALL SMA - End Point Control Scenarios; Quarantining Employees on Untrusted Systems

SonicWallSMAConnectTunnel12.0DeploymentPlanningGuide
CommonVPNConfigurations
43
AccesstoaSpecificWebResourceUsinganAlias
Toprovideaccesstoasp ecificWebresource,usinganaliastopreventusersfromseeingitsinternal
hostname:
1DefineaURLresourceontheAdd/EditResourcepage.
2Specifyanaliasfortheresourceinthepage’sAdvancedsection.
3CreatearulereferencingtheURLontheAdd/EditAccessRulepage.
4AddaWebshortcuttoWorkPlaceontheWorkPlaceShortcutspage.
Web‐BasedAccesstoaClient/ServerApplication
ToprovideWebaccesstoaclient/serverapplicationsuchasaCRMsystem:
1DefineanetworkresourceontheAdd/EditResourcepage,referencingtheapplication’s hostnameorIP
address.
2CreatearuleontheAdd/EditAccessRulepagereferencingthenetworkresource.
3ConfiguretheOnDemandandTunnelclient.
4AddaWebshortcutontheWorkPlaceShortcutspage.
EndPointControlScenarios
HerearesomebasicexamplesofhowtodeployEndPointControltoprotec tsensitivedataand ensurethatyour
networkisnotcompromisedwhenaccessedfromdevicesinuntrustedenvironments.
Topics:
• QuarantiningEmployeesonUntrustedSystemsonpage43
• DenyingAccessonpage44
QuarantiningEmployeesonUntrustedSystems
Followtheseconfigurationstepstoquarantineanemployeewhologsinusingadevicethatdoesn’tmatchany
ofyourdeviceprofiles.Theonlyresourcesavailablewillbethosethatyousetup.Youcould,forexample,
displayacustomizedpagewithlinkstoWebresourcesforbringingtheuser’ssystem
intocompliancewithyour
securitypolicies:
ToquarantineanemployeeonUntrustedsystems:
1DefineadeviceprofileontheDeviceProfileDefinitionpagewithanattributereferencinganapplication
orotherattributethatisuniquetoyourorganization.
2ConfigureaStandardzonethatreferencesthedeviceprofileinstep1.
3ConfigureaQuarantinezonethatdisplaysacustomWebpagewithlinkstoresourcesfor
bringinga
user’ssystemintocompliance.