Operation: | Configure SSLVPN Tunnel Access
Description: | To configure SSL VPN Tunnel Access mode for providing remote access to the users.

Sample Configuration
    	<SSLTunnelAccessSettings>
    		<Protocol>UDP/TCP</Protocol>
    		<SSLServerCertificate>ApplianceCertificate</SSLServerCertificate>
    		<OverrideHostName>Text</OverrideHostName>
    		<IPLeaseRange>
    			<StartIP>ip</StartIP>
    			<EndIP>ip</EndIP>
    		</IPLeaseRange>
    		<SubnetMask>255.255.255.0</SubnetMask>
    		<IPv6Lease />
    		<IPv6Prefix />
    		<LeaseMode>IPv4/IPv4 and IPv6</LeaseMode>
    		<PrimaryDNSIPv4>ip</PrimaryDNSIPv4>
    		<SecondaryDNSIPv4>ip</SecondaryDNSIPv4>
    		<PrimaryWINSIPv4>ip</PrimaryWINSIPv4>
    		<SecondaryWINSIPv4>ip</SecondaryWINSIPv4>
    		<DomainName>Text</DomainName>
    		<DisconnectDeadPeerAfter>180</DisconnectDeadPeerAfter>
    		<DisconnectIdlePeerAfter>15</DisconnectIdlePeerAfter>
    		<EncryptionAlgorithm>DES-EDE3-CBC/AES-128-CBC/AES-192-CBC/AES-256-CBC/BF-CBC</EncryptionAlgorithm>
    		<AuthenticationAlgorithm>SHA1/SHA256/SHA384/SHA512/MD5</AuthenticationAlgorithm>
    		<Keysize>1024bit/2048bit</Keysize>
    		<KeyLifetime>Number</KeyLifetime>
    		<CompressSSLVPNTraffic>Enable/Disable</CompressSSLVPNTraffic>
    		<DebugMode>Enable/Disable</DebugMode>
    	</SSLTunnelAccessSettings>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
Protocol | Yes |  | Description: Select protocol to be used for SSL VPN connection from the available options: TCP or UDP. Protocol confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only '1', '2' are allowed.
SSLServerCertificate | Yes |  | Description: Select SSL Server Certificate to be used for Authentication. SSLServerCertificate confines to: Type is 'SCALAR'. Datatype is 'STRING'.
StartIP | Yes |  | Description: Specify starting IP Address of the range from which IP Address is leased to SSL VPN Clients. StartIP confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
EndIP | Yes |  | Description: Specify ending IP Address of the range from which IP Address is leased to SSL VPN Clients. EndIP confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
SubnetMask | Yes |  | Description: Specify Subnet mask. SubnetMask confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15.
IPv6Lease | Yes |  | Description: Used to set IPv6 address for interface in IPv6 Configuration. IPv6Lease confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS6'. Maximum characters allowed are 45.
IPv6Prefix | Yes |  | Description: Used to set Prefix for IPv6 Configuration. IPv6Prefix confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 64 to 112 is allowed. Maximum digits allowed are 3.
LeaseMode | Yes |  | Description: Select Lease Mode. LeaseMode confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only '0', '1' are allowed.
PrimaryDNSIPv4 | No |  | Description: Specify Primary DNS Server IP Address. PrimaryDNSIPv4 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
SecondaryDNSIPv4 | No |  | Description: Specify Secondary DNS Server IP Address. SecondaryDNSIPv4 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
PrimaryWINSIPv4 | No |  | Description: Specify Primary WINS Server IP Address. PrimaryWINSIPv4 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15.
SecondaryWINSIPv4 | No |  | Description: Specify Secondary WINS Server IP Address. SecondaryWINSIPv4 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15.
DisconnectDeadPeerAfter | No | 300 | Description: Specify time in seconds after which connection must be disconnected, if peer is not live. DisconnectDeadPeerAfter confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 60 to 1800 is allowed.
DisconnectIdlePeerAfter | No | 15 | Description: Specify user inactivity time in minutes after which the connection will be dropped. DisconnectIdlePeerAfter confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 15 to 60 is allowed.
EncryptionAlgorithm | No |  | Description: Select Encryption Algorithm to be userd for Authentication. EncryptionAlgorithm confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'DES-EDE3-CBC', 'AES-128-CBC', 'AES-192-CBC', 'AES-256-CBC', 'BF-CBC' are allowed.
AuthenticationAlgorithm | No |  | Description: Select Authentication Algorithm to be userd for Authentication. AuthenticationAlgorithm confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'SHA1', 'SHA256', 'SHA384', 'SHA512', 'MD5' are allowed.
Keysize | No |  | Description: Specify the key size from the dropdown list. Keysize confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '1024', '2048' are allowed.
KeyLifetime | No |  | Description: Specify the key life time. KeyLifetime confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 60 to 86400 is allowed.
CompressSSLVPNTraffic | No |  | Description: Enable/Disable Compress Traffic. CompressSSLVPNTraffic confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
DebugMode | No |  | Description: Enable/Disable Debugging mode. DebugMode confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
OverrideHostName | No |  | Description: Specify the override hostname. OverrideHostName confines to: Type is 'SCALAR'. Datatype is 'STRING'.
DomainName | No |  | Description: Specify the domain name. DomainName confines to: Type is 'SCALAR'. Datatype is 'STRING'.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Configure SSLVPN Tunnel Access | 200 |
Configure SSLVPN Tunnel Access | 500 |
Configure SSLVPN Tunnel Access | 541 |
Configure SSLVPN Tunnel Access | 542 |
Configure SSLVPN Tunnel Access | 543 |
Configure SSLVPN Tunnel Access | 544 |

) Copyright 2017 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.