Configuring Group-Level NetExtender Settings

Multiple range and route support for NetExtender enables network administrators to easily segment groups and users without the need of configuring firewall rules to govern access. This user segmentation allows for granular control of access to the network—allowing users access to necessary resources while restricting access to sensitive resources to only those who require it.

To configure custom settings for groups:
1
Navigate to the Users > Local Groups page.
2
Click on the configure icon for the group you want to edit. The Edit Group Settings window is launched.
3
Click on the Nx Settings tab.

Configuring Group Client IP Address Range

To configure group-level NetExtender address ranges:
1
To configure an IPv4 address range for this group, enter the beginning of the range in the Client Address Range Begin field and the end of the range in the Client Address Range End field.
2
To configure an IPv6 address range for this group, enter the beginning of the range in the Client IPv6 Address Range Begin field and the end of the range in the Client IPv6 Address Range End field. IPv6 configuration is optional.
3
Click Accept.

Configuring Group DNS Settings

To configure custom NetExtender DNS settings for a group:
1
In the Primary DNS Server field, type in the IP address of the main DNS server.
2
In the Secondary DNS Server field, optionally type the IP address of the backup DNS server.
3
In the DNS Domain field, type the domain for the DNS servers.
4
Click Accept.

Configuring Group NetExtender Settings

The following NetExtender settings can be configured for the group:

•
Exit Client After Disconnect - The NetExtender client exit when it becomes disconnected from the SRA server. To reconnect, users in the group will have to either return to the SRA portal and click NetExtender or launch NetExtender from their Programs menu.
•
Uninstall Client After Exit - The NetExtender client automatically uninstalls when it terminates or when the user selects Exit (as opposed to simply disconnecting). To reconnect, users in the group will have to return to the SRA portal and click NetExtender. This option only applies to Windows clients. It does not apply to Android, Mac, or Linux clients.
•
Create Client Connection Profile - The NetExtender client will create a connection profile recording the SRA Server name, the Domain name and optionally the username and password.
•
The User Name & Password Caching options provide flexibility in allowing users to cache their usernames and passwords in the NetExtender client. The three options are Allow saving of user name only, Allow saving of user name & password, and Prohibit saving of user name & password. These options enable administrators to balance security needs against ease of use for users.

To have the user inherent the NetExtender settings from the global NetExtender settings, select Use Global Settings for any of the above options.

Configuring Group NetExtender Routes

To configure NetExtender client routes:
1
To add a NetExtender client route that will only be added to this user, click the Nx Routes tab in the Edit User Settings window.
2
To add a NetExtender client route that will only be added to users in this group, click the Add Client Route button.
3
Type the IPv4 or IPv6 address of the trusted network to which you would like to provide access with NetExtender in the Destination Network field.
4
For an IPv4 route, type the subnet mask in the Subnet Mask/Prefix field. For an IPv6 route, type the prefix in the Subnet Mask/Prefix field.
5
Click Add. Repeat this procedure for all necessary routes.
6
Select Enabled from the Tunnel All Mode drop-down list to force all traffic for this user—including traffic destined to the remote users’ local network—over the SRA NetExtender tunnel.
7
To also add the global NetExtender client routes (which are configured on NetExtender > Client Routes page) to users in this group, select the Add Global NetExtender Client Routes check box.
8
Click Accept.