1 00:00:07,690 --> 00:00:15,160 So we have created an SSL VPN using tunnel mode and using a web mode. 2 00:00:15,220 --> 00:00:22,540 Now the next thing to do is to create an address object or our local area network. 3 00:00:23,080 --> 00:00:32,350 So anyone that connects using tunnel mode will be able to connect to the entire local area network and 4 00:00:32,350 --> 00:00:42,610 to configure a policy that will allow anyone to with the right credentials to enter our local area network 5 00:00:43,420 --> 00:00:53,200 any users that will connect through web mode will connect to the portal and directly to will have a 6 00:00:53,200 --> 00:00:58,590 predefined bookmark to the 40 gate admin. 7 00:00:58,660 --> 00:01:02,570 So let's move to policy and objects. 8 00:01:02,830 --> 00:01:21,220 Let's create an address for the local area network we'll use type subnet type and we'll use the 10th 9 00:01:21,220 --> 00:01:26,340 of 0 3 0 0 slash 24. 10 00:01:28,330 --> 00:01:30,070 So to 11 00:01:34,110 --> 00:01:38,330 and we will use it on our policy. 12 00:01:38,460 --> 00:01:43,950 So we have the address object of our local area network 13 00:01:46,910 --> 00:01:48,780 and there it is. 14 00:01:48,780 --> 00:01:51,440 And now let's create the policy itself. 15 00:01:54,380 --> 00:02:01,030 To SSL and now our incoming interface is not our web interface. 16 00:02:01,040 --> 00:02:11,030 It is actually our new SSL VPN tunnel interface that was created using the virtual adapter the outgoing 17 00:02:11,030 --> 00:02:16,000 interface is our LAN interface. 18 00:02:16,100 --> 00:02:24,170 This source this source is all but it is also our SSL user group. 19 00:02:24,170 --> 00:02:29,520 The destination is our local area network. 20 00:02:29,600 --> 00:02:42,020 That's where we want our SSL VPN users to be able to get into know a service is all if you wish you 21 00:02:42,020 --> 00:02:45,650 can use any security profile. 22 00:02:45,950 --> 00:02:49,370 And that's about it. 23 00:02:49,370 --> 00:02:55,960 We also have the 40 get warning that we use the built in certificate. 24 00:02:55,970 --> 00:03:02,480 Use your own certificate. 25 00:03:02,700 --> 00:03:17,000 So once we have the policy the address object for a local area network our portal settings our portal 26 00:03:17,420 --> 00:03:27,470 predefined bookmarks we can head over to our new SSL VPN and see how it looks using web mode 27 00:03:30,990 --> 00:03:40,740 so let's try to access our SSL VPN using the 10 0 4 3 28 00:03:51,670 --> 00:04:01,310 there are is we needed the H T T P s and remember that the new user is folks the end password 29 00:04:05,470 --> 00:04:06,340 are right. 30 00:04:06,420 --> 00:04:13,120 And there we are at our new SSL VPN portal and that's our bookmark. 31 00:04:13,180 --> 00:04:20,540 We can lunch or bookmark and get into the ad man interface for 48 32 00:04:24,780 --> 00:04:28,910 that was SSL on in web mode. 33 00:04:28,920 --> 00:04:31,140 Now let's use the term mode. 34 00:04:31,140 --> 00:04:42,940 And for the tunnel mode we need the fully client the 40 clanged the 48 SSL and IP SEC VPN client. 35 00:04:43,680 --> 00:04:56,320 So let's lunch for the client let's go to remote access add a new connection our connection is SSL VPN 36 00:04:57,070 --> 00:05:12,590 let's name it work VPN and the remote Gateway is a four to shoot a six nine two three four. 37 00:05:13,100 --> 00:05:26,600 Now I'm using a router that is up before my falling gate so let's use customized port and see a connection 38 00:05:27,650 --> 00:05:28,820 and let's connect. 39 00:05:28,820 --> 00:05:31,250 Now let's enter our user name already 40 00:05:40,870 --> 00:05:41,760 and let's connect. 41 00:05:41,770 --> 00:05:47,140 And when doing so we are actually connecting and that's it. 42 00:05:47,410 --> 00:05:58,060 We're actually connecting to the local area network not only to 48 admin page which is on the tendency 43 00:05:58,060 --> 00:06:03,840 or the tree 16 but to the entire local area network. 44 00:06:03,910 --> 00:06:18,120 We have created an address object for the tender 0 3 0 slash 24 subnet. 45 00:06:18,220 --> 00:06:28,270 So now we're connected and take a look at the IP address our IP address is an IP address from the SSL 46 00:06:28,390 --> 00:06:36,400 VPN tunnel address switch that was assigned to us by our a gate.