Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring Certificate Management
Adding or modifying
a Remote Identity
424
The Create New Remote Identity window enables you to add a new remote
identity. You can also modify an existing remote identity within the Remote
Identities tab. To add or modify a remote identity, follow the steps below.
Tip: An asterisk can be used as a wildcard when defining the fields on this window.
(Other special characters are not allowed.) For example; *, O=bizco, C=us
represents all users at Bizco.
1 In the Identity Name field, type a name for this Remote Identity.
2 In the Distinguished Name field, create a distinguished name. See
“Understanding Distinguished Name syntax” on page 416 for information on
the format that should be used.
Note: The order of the specified distinguished name fields must match the
order listed in the certificate.
3 [Optional] In the E-Mail Address field, enter the e-mail address(es) to which
you want to restrict access. Enter one e-mail address per identity or use a
wildcard to indicate all e-mail addresses, such as *@example.com.
4 [Optional] In the Domain Name field, type the specific domain name to
which you want to restrict access. Enter one domain name per identity or
use a wildcard to indicate all domain names, such as *.example.com.
5 [Optional] In the IP Address field, type the unique IP address or group of IP
addresses to which you want to restrict access. For example: 182.19.0.0/16
indicates that only users with IP addresses beginning with 182.19 (as
contained in the certificate) will be authorized to use the VPN.
6 Click Add to add the identity to the Identities list.
7 To define additional remote IDs, repeat step 1–step 6.
8 Click the Save icon.
Configuring and displaying firewall certificates
A firewall certificate is used to identify the Sidewinder G2 to a potential peer in
a VPN connection. When creating a certificate for the Sidewinder G2, you have
the option to submit the certificate to a CA for validation, or have the
Sidewinder G2 generate a self-signed certificate. You should create these
certificates before you begin configuring a VPN.
In the Admin Console, select Services Configuration > Certificate
Management, then select the Firewall Certificates tab. The following window
appears.