SonicWall๎SMA๎Connect๎Tunnel๎12.0๎Deployment๎Planning๎Guide
Common๎VPN๎Configurations
46
Providing๎Access๎to๎Windows๎Terminal๎Services๎or๎
Citrix๎Resources
To๎give๎users๎access๎to๎an๎individual๎Windows๎Terminal๎Services๎or๎Citrix๎host,๎or๎a๎Citrix๎server๎
farm:
1Install๎or๎update๎the๎Windows๎Terminal๎Services๎agent๎or๎the๎Citrix๎agent๎on๎the๎Configure๎Graphical๎
Terminal๎Agents๎page.
2Define๎a๎resource๎on๎the๎Add/Edit๎Resource๎page๎for๎the๎Windows๎Terminal๎Services๎or๎Citrix๎host,๎or๎
the๎Citrix๎server๎farm.๎
3Create๎a๎rule๎on๎the๎Add/Edit๎Access๎Rule๎page๎referencing๎the๎
terminalโserver๎resource.
4Create๎a๎WorkPlace๎shortcut๎for๎accessing๎the๎Windows๎Terminal๎Services๎host๎or๎Citrix๎resource๎on๎the๎
Add/Edit๎Terminal๎Shortcut๎page.
Authentication๎Scenarios
Realms๎are๎used๎by๎the๎appliance๎for๎the๎following๎key๎purposes:
โข Referencing๎external๎authentication๎servers
โข Provisioning๎access๎agents๎to๎VPN๎users,๎based๎on๎community๎membership
โข Determining๎which๎End๎Point๎Control๎restrictions๎are๎imposed๎on๎usersโ๎devices
โข Controlling๎the๎userโs๎login๎experience๎at๎a๎WorkPlace๎portal
Using๎Multiple๎Realms๎vs.๎a๎Single๎Realm
If๎your๎organization๎uses๎only๎one๎authentication๎server,๎youโll๎probably๎need๎to๎configure๎only๎one๎realm๎in๎
AMC.๎There๎are๎other๎situations๎in๎which๎multiple ๎authentication๎servers๎are๎required:
โขMultiple๎user๎repositoriesโIf๎your๎users๎are๎stored๎in๎multiple๎directories,๎you๎must๎create๎a๎separate๎
realm๎for๎each๎one.๎For๎example,๎if
๎your๎employees๎are๎stored๎on๎an๎LDAP๎server,๎while๎your๎business๎
partners๎are๎stored๎on๎an๎Active๎Directory๎server,๎create๎a๎separate๎realm๎for๎each๎directory๎server.
โขChained๎authenticationโFor๎increased๎security,๎you๎can๎require๎users๎to๎authenticate๎to๎a๎single๎realm๎
using๎two๎different๎authentication๎methods.๎For๎example,๎you๎set๎
up๎RADIUS๎or๎a๎digital๎certificate๎as๎the๎
first๎authentication๎method,๎and๎LDAP๎or๎Active๎Directory๎as๎the๎second๎one.๎To๎make๎the๎login๎
experience๎for๎your๎users๎a๎oneโstep๎process,๎configure๎AMC๎such๎that๎users๎see๎only๎one๎set๎of๎
prompts.
Access๎Component๎Provisioning
All๎of๎the๎user๎access๎components๎are๎provisioned๎or๎activated๎through๎the๎WorkPlace๎portal.๎
Optionally,๎you๎can๎make๎the๎Connect๎Tunnel๎client๎components๎available๎for๎users๎to๎download๎and๎install๎from๎
another๎network๎location๎(such๎as๎a๎Web๎server,๎FTP๎server,๎or๎file๎server),๎without๎requiring๎them๎to๎log๎in๎to
๎
WorkPlace.
To Next Page
Loading...
