WatchGuard Technologies SSL VPN Benutzerhandbuch

Seite von 195
BlackICE PC Protection
150
Firebox SSL VPN Gateway
To view Secure Access Client status properties 
Double-click the Secure Access Client connection icon in the notification area. Alternatively, right-click 
the icon and choose Properties from the menu. 
The Secure Access Client dialog box appears.
 The properties of the connection provide information that is helpful for troubleshooting. The proper-
ties include: 
• The General tab displays connection information. 
• The Details tab displays server information and a list of the secured networks clients are allowed to 
access. 
• The Access Lists tab displays the access control lists (ACLs) that are configured for the user 
connection. This tab does not appear for users who are not in a group or if an ACL is not configured for 
a group. 
The following are suggestions for using some popular firewalls with the Firebox SSL VPN Gateway. 
BlackICE PC Protection
The following BlackICE settings enable the Secure Access Client to reach the Internet and the resources 
allowed by the Firebox SSL VPN Gateway. To configure the settings, open the BlackICE window and 
choose the following commands.
McAfee Personal Firewall Plus
The following McAfee Personal Firewall Plus settings enable the Secure Access Client to reach the Inter-
net and the resources allowed by the Firebox SSL VPN Gateway. To configure the settings, open the 
McAfee Security Center window, click the Personal Firewall+ tab, and choose the following commands. 
The following settings assume that you are using the Standard security level. To check your security 
level, go to the Personal Firewall+ tab, click Utilities, and then click Security Settings.
  
Note
By default, when the Secure Access Client is installed, Personal Firewall Plus prompts you to grant or 
block access for the application. Select Grant Access.
Tools Edit 
BlackICE 
Settings
On the Firewall tab, make sure that the Protection Level is lower than 
“Paranoid,” which prevents you from running applications, such as email, 
over the connection.
On the Intrusion Detection tab, add the IP address of the Firebox SSL VPN 
Gateway as a trusted zone. Also add the IP address or range of allowed 
resources as trusted zones. When you add an IP address, be sure to select 
the Add Firewall Entry check box.