Chapter 6
Cyberoam SSL VPN User Guide
APPENDICES
Appendix A - Login Scripts
A Login Script is a batch file that contains a set of instructions. Login Scripts are executed when users log on to Cyberoam. Cyberoam SSL VPN supports two types of login scripts:
• Administrator Script - Cyberoam SSL VPN Administrator creates the Administrator Script.
Administrator Script is the same for all users and is executed when any user logs on.
• User Script - A User Login Script is specific to a user. All Certificate Authentication users can create a User Script and upload it to VPN. The User Script is executed after the Administrator script.
NOTE
Native Basic Authentication users, LDAP/ADS and RADIUS users cannot upload login scripts to Cyberoam
SSL VPN.
Upload Login Script
Right-click on the VPN icon on the systray and click Show. The Login screen appears.
In the Action menu, click Upload Script. The Upload script screen appears.
Screen – Upload Login Script
In the Open field, click Browse to search for the batch file or linux script file (or type file path and name).
Click on the Administrator Script check box if you want to upload an administrator script.
NOTE
Only a Security Officer or Administrator can upload Admin Scripts. For other users the Administrator Script field will be disabled.
Click Upload to upload the script.
A success message confirms that the script is uploaded.
Click Cancel to cancel the changes made and close the window.
Cyberoam SSL VPN User Guide
NOTE
The Upload Script option will be enabled only if the current server state (click Server State from Server
Configuration) is Run State.
Delete Login Script
Right-click on the VPN icon on the systray and click Show. The Login screen appears.
In the Action menu, click Delete Script. The Delete script screen appears.
Screen – Delete Login Script
Click on the Administrator Script check box if you want to delete an administrator script.
NOTE
Only a Security Officer or Administrator can Delete Admin Scripts. For other users the Administrator Script field will be disabled.
Click Yes to confirm the deletion. Otherwise click Cancel.
NOTE
The Delete Script option will be enabled only if the current server state (click Server State from Server
Configuration) is Run State.
Cyberoam SSL VPN User Guide
Appendix B - Terminology and Acronyms
Terminology
Access Control:
Allows access to the application in accordance to corporate policies. Access control can be applied to user and application groups.
Access Filter:
A time filter that can be applied to user(s) and/or application group(s) to provide access during a designated time.
Administrator:
A privileged user for managing users and services.
Application Group:
Applications can be grouped in accordance to policies or functional groups.
Further to that access filter can be applied to these groups.
Endpoint Policy:
Endpoint Policy is to define the security rules to be scanned for on End user machine in conjunction with Endpoint Profile.
Device Profile:
Device Profiles are used to organize applications on the basis of end user machine profile. Device Profiles overrides (or say restricts) the applications access over the applications in the Application Groups.
Basic Authentication:
A mechanism to authenticate user credentials using standard authentication protocols, such as LDAP, RADIUS, AD, etc.
Bootstrap:
A process for first time configuration of Cyberoam SSL VPN. In this process the first security officer (designated certification authority) is enrolled.
Certificate Authentication:
A mechanism to authenticate the user based on client Certificate. The
Certificate is issued to a power user during enrollment.
Security Officer (SO):
The most privileged user of the system. Only first security officer is responsible for bootstrapping the server and enrolling other security officer and administrators.
User Group:
Users can be grouped in accordance to policies or functional groups. Further to that access filter can be applied to these groups.
UAC:
The Universal Application Connector is an Active-X control that makes the applications you run using Cyberoam SSL VPN secure.
NOTE
The UAC works only with Internet Explorer version 6.0 and higher; it does not support other browsers.
Acronyms
ACL
ADS
CA
DNS
EPS
FQDN
FTP
HTTP
Access Control List
Active Directory Services
Certificate Authority
Domain Name Service
Endpoint Security
Fully Qualified Domain Name
File Transfer Protocol
Hypertext Transfer Protocol
UDP
URL
VPN
HTTPS
IP
IPSEC
LDAP
Secured Hypertext Transfer Protocol
Internet Protocol Security
Lightweight Directory Access Protocol
SMTP
SO
Simple Mail Transfer Protocol
Security Officer
SSH
SSL
Secure Shell
Secure Socket Layer
TCP
Transmission Control Protocol
UAC
Uniform Connector
User Datagram Protocol
Uniform Resource Locator
Virtual Private Network
Cyberoam SSL VPN User Guide
Appendix C - Supported Applications
Application Protocol Static/ Dynamic Port
Cyberoam SSL VPN User Guide
Remarks
Dynamic Kiosk
WINDOWS TERMINAL
SERVICE
TCP Static Kiosk.
Supports local printing and local resource sharing
PRINT SHARE
SAMBA SHARE
SMB SHARE/ NETBIOS
OVER TCP/IP
CITRIX ICA CLIENT
CITRIX ICA CLIENT
SQL SERVER
SQL MONITOR TOOL
MYSQL SERVER
ORACLE
TCP Static
TCP Static
TCP Static
TCP
UDP
TCP
TCP
TCP
TCP
Dynamic
Dynamic
Static
Static
Static
Static
LOTUS NOTES
TFTP
RADIUS SERVER
DNS SERVER
PC ANYWHERE
PC ANYWHERE DATA
TACACS
ORACLE SQL * NET
BOOT PS
TCP
TCP
TCP
TCP
TCP
Static
UDP Static
TCP Static
TCP Static
UDP Static
Static
Static
UDP Static
Static
Static
445
139
Kiosk
Kiosk
1494
1604
1433
1434
> 1023
>1023
3306
1521
1352
69
1812
53
53
5632
5631
49
66
67
BOOT PS
KERBEROS
UDP Static
UDP Static
Cyberoam SSL VPN User Guide
67
88
Exchange Server
DEC Endpoint
Resolution, also known as RPC Endpoint Mapper
TCP Static
Network Time Protocol-
NTP
TCP Static
Kerberos authentication TCP Static
LDAP to global catalog servers
REQUIRED FOR
WINDOWS LOGIN
TCP Static
TCP Dynamic
135
123
88
3268
1026
TCP Static 1863 Messenger service through Exchange
