Advanced Networking Services Guide

Select To
Randomize keys of virtual keyboard
Make the virtual keyboard keys random.
Enable forced timeout
Disconnect remote users after the specified timeout period is over. Type
the timeout period in minutes.
Session idle timeout
When there is no activity on a user's session for the specified period, end
the user session after that period is over.
User notification
Type a message to be displayed to remote users after they log in.
Enable public URL access
Allow remote users to access any site which is not configured (and not
listed on Web portal) by the administrator.
5 Click OK.
Customize the Portal Design
You can edit the client banner bound to the SSL VPN client.
Procedure
1 Log in to vCloud Air and navigate to the vCloud Edge Gateway Services UI.
See “Log In and Navigate to Advanced Networking Services,” on page 9 for information.
2 Click the SSL VPN-Plus tab and Portal Customization.
3 Next to Web Portal Design, click Change.
The Change Web Portal Design dialog box appears.
4 To customize the banner that appears when a user logs in to the SSL VPN client, modify the following
options:
Option Description
Portal Title
Type the portal title.
Company Name
Type the remote user's company name.
Logo
In Logo, click Change and select the image file for the remote user's logo.
Colors
In Colors, click the color box next to numbered item for which you want to
change the color, and select the desired color.
5 Click OK.
6 To change the client banner, click Change next to Full Access Client Design.
The Change Full Access Client Design dialog box appears.
7 Change the image for the banner and images for the status icons as desired and click OK.
IPsec VPN Overview
Internet Protocol Security (IPsec) is a protocol suite for securing the IP packets of a communication session.
vCloud Air supports using IPsec to create a secure VPN connection between your vCloud Air service and a
remote site, such as your on-premises data center.
The edge gateway supports site-to-site IPsec VPN between an edge gateway instance and remote sites.
Additionally, the edge gateway supports certificate authentication, preshared key mode, and IP unicast
traffic between itself and remote VPN routers.
Using an IPsec tunnel, you can configure multiple subnets to connect to the internal network behind an edge
gateway. These subnets and the internal network behind an edge gateway must have address ranges that do
not overlap.
Chapter 6 Secure Access Using Virtual Private Networks
VMware, Inc. 61