Sonicwall Aventail SSL VPN Policy Management
Sonicwall Aventail E Class SSL VPN remote access servers deliver a robust, extensible policy model that is recognized as the most mature, flexible, and easy to use on the market. Aventail® Unified Policy™ significantly reduces work for administrators by providing centralized administration with just a single rule set for all resources and access methods.
How Sonicwall's object-based policy management works
In our model, you can define objects as users and groups to which access is extended, or as the various types of resources that are available for remote access. In addition, Policy Zones, which classify end points into a level of trust—each with its own associated level of access such as trusted, semi-trusted, and non-trusted—are also objects. The Aventail® Management Console (AMC) helps administrators quickly define and view the policy rules for all access options.
Aventail Unified Policy integrates End Point Control™ and policy management in a streamlined model, as shown in the Access Control graphic below. With an easy-to-use setup wizard and one rule set for all access methods and resource types, policy setup and management is at least three times faster than with other SSL VPNs, often taking less than 15 minutes.
Administrators can gain highly efficient and granular access control by:
- Defining a resource once, and then leveraging it with multiple rules.
- Allowing users to reside in multiple groups with overlapping rules, if that's how the directory is structured.
- Enabling different access privileges based on the security level of particular end-point devices.
- Enabling groups of users to access applications based on time of day, cryptography strength, and the source network used for access.
Sonicwall Aventail SSL VPN remote access servers employ the same security and management principles as those found in leading firewalls. Unlike one-size-fits-all approaches, Sonicwall's object-based policy model enables you to define and maintain resources, users, groups, and zones independently of access control rules—making future policy changes much easier.
Sophisticated access control increases security
Only Sonicwall's best-of-breed SSL VPNs can accommodate a variety of access
requirements and offer the intelligent access control you need. Aventail's
hierarchical, object-based policy model is ideal for supporting
End
Point Control, which enables you to enforce policy and determine access
based not only on the level of trust that IT has for the user, but also on
trust for his or her access environment. Sonicwall offers cross-platform
protection for users at Macintosh, Windows, Linux, and Windows Mobile-based
computers.