Kerio Tech Firewall6 User Manual

Page 69

Advertising
background image

7.1 Network Rules Wizard

69

Step 4 — Internet access limitations

Select which Internet services will be available for LAN users:

Figure 7.2

Network Policy Wizard — enabling access to Internet services

Allow access to all services

Internet access from the local network will not be limited. Users can access any Internet

service.

Allow access to the following services only

Only selected services will be available from the local network.

Note:

1.

Defined restrictions will be applied also to the firewall itself.

2.

In this dialog, only basic services are listed (it does not depend on what services

were defined in WinRoute — see chapter

14.3

). Other services can be allowed by

modification of NAT traffic rules (for LAN hosts) or Firewall traffic rules (for the

firewall) or by adding custom rules. For details, see chapter

7.3

.

Step 5 — enabling Kerio VPN traffic

To use WinRoute’s proprietary VPN solution in order to connect remote clients or to create

tunnels between remote networks, keep the Create rules for Kerio VPN server selected. Specific

services and address groups for Kerio VPN will be added. For detailed information on the

proprietary VPN solution, refer to chapter

23

.

If you intend not to use the solution or to use a third-party solution (e.g. Microsoft PPTP, Nortel

IPSec, etc.), disable the Create rules for Kerio VPN option.

To enable remote access to shared items in the local network via a web browser, keep the

Create rules for Kerio Clientless SSL-VPN option enabled. This interface is independent from

Advertising