Improve SSLVPN Access Security with Geolocations
Hi,
Recently an update to our Zywall310, ATP500 and for all of our customers' systems started to display a message access was enabled through the WAN interface. Sounds legit because we use the SecuExtender.
I am keen to improve the security and found only three geolocations can be provided. (Both in version firmware 4.70 as well as 5.10) However by selecting i.e. Netherlands I will provide the possibilty to all of The Netherlands. That is not the idea.
So i created a custom host in geolocation Netherlands which ended up to become Netherlands-All. Nice!
But I cannot select it in the trusted geolocations in the SSL VPN Security settings. How can I accomplish this?
Jeroen
Recently an update to our Zywall310, ATP500 and for all of our customers' systems started to display a message access was enabled through the WAN interface. Sounds legit because we use the SecuExtender.
I am keen to improve the security and found only three geolocations can be provided. (Both in version firmware 4.70 as well as 5.10) However by selecting i.e. Netherlands I will provide the possibilty to all of The Netherlands. That is not the idea.
So i created a custom host in geolocation Netherlands which ended up to become Netherlands-All. Nice!
But I cannot select it in the trusted geolocations in the SSL VPN Security settings. How can I accomplish this?
Jeroen
0
All Replies
-
I think you can configure the below settings on the security policy page.
0
Freshman Member
Categories
- 6.8K All Categories
- 1.3K Nebula
- 26 Nebula Ideas
- 28 Nebula Status and Incidents
- 3.8K Security
- 199 Security Ideas
- 691 Switch
- 25 Switch Ideas
- 572 WirelessLAN
- 8 WLAN Ideas
- 4.5K Consumer Product
- 95 Service & License
- 213 New and Release
- 35 Security Advisories
- 479 FAQ
- 216 Nebula FAQ
- 109 Security FAQ
- 72 Switch FAQ
- 66 WirelessLAN FAQ
- Documents
- 20 Nebula Monthly Express
- 42 About Community
- 31 Security Highlight
