Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

Firebox SSL Overvieware specific to your site, such as the Firebox SSL IP address, netmask,default gateway IP address, and DNS addresses. After youcomplete the basic connection, you then configure the settingsspecific to VPN operation, such as the options for authentication,authorization, and group-based access control, kiosk operation,host checking, portal pages, and IP pools.All Firebox SSL administration and monitoring is performedthrough the Firebox SSL Remote Admin Terminal window,which provides access to the Administration Tool and a varietyof standard network monitoring tools, including Ethereal NetworkMonitor, xNetTools, Traceroute, fnetload, and SystemMonitor. The Firebox SSL Remote Admin Terminal window alsoprovides access to the Real-time Monitor, where you can view alist of current VPN users and groups and close the VPN connectionfor any user or groupYou will need to provide remote VPN users with the URL of theFirebox SSL and a list of the resources that they can access.Remote users can log in with their usual credentials and do notneed to perform any configuration of the Secure Access client orany application clients, resulting in minimal user support.Firebox SSL OperationThe Firebox SSL performs the following functions:• Authentication• Termination of encrypted sessions• Access control (based on permissions)• Data traffic relay (when the first three functions are met)The Firebox SSL operates as follows:1 A remote user obtains the Secure Access client by accessinga secure web URL and providing authentication credentials.2 After a successful login, the Firebox SSL establishes a securetunnel.3 As the remote user attempts to access network resourcesacross the VPN tunnel, the Firebox SSL encrypts all networktraffic destined for the organization’s intranet and forwards8 Firebox SSL VPN Gateway Administration Guide