This article applies to:

• WebMarshal 3.X and above

Question:

Procedure:

To allow VPN users to authenticate with the WebMarshal Server, refer to the following:

1. Verify that the IP address range, that the Firewall will assign to VPN connected hosts, is within the ranges specified in the WebMarshal Local Address Table (LAT). If necessary, add the range to the LAT.
   
   • The LAT is accessible in the WebMarshal Console under Tools | Server Properties, and can be edited in the Modify Proxy Settings wizard.
     
2. If VPN users are authenticated in the Windows environment, normally no further action is required. WebMarshal policy for these users will apply as normal.
   
3. If VPN users are not authenticated in the Windows environment, you may need to enable WebMarshal IP address authentication, and create an IP address range group to permit and control access for these users. For details of these procedures, see the documentation for your version of WebMarshal.
   

This article was previously published as:

NETIQKB35431