Configuring a Policy Server

The Policy Server functionality in a Security Gateway is the Desktop Security Policy management. If you do not enable a Policy Server, the Desktop rule base and the SCV checks will not be applied.

For SecuRemote, you do not need a Policy server.

To define a gateway as the Policy Server:

  1. In SmartConsole, open the Security Gateway that will serve as the Policy Server.

  2. Enable Policy Server functionality: In General Properties > Network Security tab, select IPsec VPN and Policy Server.

  3. From the Security Gateway Properties, select Other > Legacy Authentication.

  4. In the Policy Server area, from the Users list, select an existing user group of remote access clients.

  5. Users that authenticate to the Security Gateway must belong to this group.

  6. Click OK.