Improve SSLVPN Access Security with Geolocations
Hi,
Recently an update to our Zywall310, ATP500 and for all of our customers' systems started to display a message access was enabled through the WAN interface. Sounds legit because we use the SecuExtender.
I am keen to improve the security and found only three geolocations can be provided. (Both in version firmware 4.70 as well as 5.10) However by selecting i.e. Netherlands I will provide the possibilty to all of The Netherlands. That is not the idea.
So i created a custom host in geolocation Netherlands which ended up to become Netherlands-All. Nice!
But I cannot select it in the trusted geolocations in the SSL VPN Security settings. How can I accomplish this?
Jeroen
Recently an update to our Zywall310, ATP500 and for all of our customers' systems started to display a message access was enabled through the WAN interface. Sounds legit because we use the SecuExtender.
I am keen to improve the security and found only three geolocations can be provided. (Both in version firmware 4.70 as well as 5.10) However by selecting i.e. Netherlands I will provide the possibilty to all of The Netherlands. That is not the idea.
So i created a custom host in geolocation Netherlands which ended up to become Netherlands-All. Nice!
But I cannot select it in the trusted geolocations in the SSL VPN Security settings. How can I accomplish this?
Jeroen
0
Answers
-
I think you can configure the below settings on the security policy page.
0
Freshman MemberCategories
- 6K All Categories
- 1.2K Nebula
- 16 Nebula Ideas
- 12 Nebula Status and Incidents
- 3.4K Security
- 186 Security Ideas
- 594 Switch
- 24 Switch Ideas
- 425 WirelessLAN
- 6 WLAN Ideas
- 4.2K Consumer Product
- 56 Service & License
- 191 New and Release
- 24 Security Advisories
- 452 FAQ
- 209 Nebula FAQ
- 99 Security FAQ
- 65 Switch FAQ
- 63 WirelessLAN FAQ
- Documents
- 20 Nebula Monthly Express
- 32 About Community
- 20 Security Highlight
