Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Example VPN Scenarios
460
d On the Advanced tab: No changes needed
e Click Add to save the new VPN association.
f Click the Save icon to save your changes.
4 In the Admin Console, Services Configuration > Certificate Management.
On the Remote Certificates tab click New and create a certificate for a
client by specifying the following:
Note: You can skip this step and step 5 for those clients that have online access
to the CA. These clients can create and retrieve their own certificates.
• Certificate Name = Sales_A
• Distinguished Name: CN=Sales_A,OU=sales,O=bizco,C=US
• Submit to CA = BizcoCA
• Signature Type = RSA
• Private Key: Click Browse and specify where you want to save the
private key associated with this certificate. In this scenario it is
common to save the certificate to the same location as the exported
firewall certificate.
• Certificate: Click Browse and specify where you want to save this
certificate. In this scenario it is common to save the certificate to the
same location as the private key and the exported firewall certificate.
• Click Add.
• Click the Save icon to save your changes.
5 In the Admin Console, Services Configuration > Certificate Management.
Export the CA certificate and the firewall certificate to the same location
used in step 4.
a On the Certificate Authorities tab, select the CA certificate you created
in step 1A, then click Export and export the certificate by specifying the
following:
• Destination = File
• Generated CA Certificate File: Click Browse and specify where you
want to save the CA certificate. Add the .pem extension to the file
name.
• Click OK.
b [Optional] On the Firewall Certificates tab, select the firewall certificate
you created in step 1B, then click Export and export the certificate by
specifying the following:
• Destination = File
• Export Firewall Certificate to File: Click Browse and specify where
you want to save the firewall certificate. Add the .pem extension to
the file name.
• Click OK.
6 Repeat steps 4 and 5 for each remote client.