Secure Mobile Access 12.4 Administration Guide

Table of Contents

Web-Based Configuration Using Setup Wizard

The Setup Wizard guides you through a series of required and optional steps for configuring the appliance. The AMC home page includes a Setup Checklist that indicates which items you have completed.

Running Setup Wizard requires the same system configuration as AMC (see System Requirements for details); in addition, JavaScript must be enabled in the browser.

To configure settings using the Setup Wizard

  1. License agreement: Read the terms of the End User License Agreement.

  2. Basic Settings:

    • Specify the password you will use to access the AMC. Your password must be at least eight characters long, but no longer than 20 characters.
    • (Optional) Select a time zone, and then click Change to set the current time. You can synchronize the time with an NTP server later in the AMC. For more information, see Configuring Time Settings. It is important to ensure that the appliance’s date and time settings are correct for your time zone before you import your license file.

  3. Network Settings:

    • Enter a name for the appliance (the default is SMAAppliance).

      Because this name is used only in log files, you don’t need to add it to DNS.

    • The IP address and subnet mask for the internal interface (connected to your private network) is shown. For a dual-homed configuration, enter the IP address and subnet mask for the external interface.

  4. Routing: To leverage an existing router, select the dual gateway option to reach your resources. To restrict incoming appliance traffic to just a few routes or subnets, select the single gateway option and enter the routes or subnets as static routes later in the AMC.

    If the appliance is on a different network than the computer you will use to access AMC, you must set up routing to maintain access to AMC.

  5. Name Resolution: The appliance must be able to perform name resolution to reach resources on your internal network. Enter a default domain, which is the domain in which the appliance is located (such as yourcompany.com).

  6. User access: You can give users full network access by provisioning the OnDemand Tunnel access agent. If you do, you also need to specify the Source NAT address that appears to back-end servers as the source of client traffic. This must be an IP address that is on the same subnet as the internal interface, and is not in use elsewhere.

The end of the Setup Wizard process displays your settings. Proceed to AMC, the management console, for the last steps in the configuration process. See Configuring the Appliance Using the Management Console for details.