Allow access to services using the Application Access Portal

The Application Access Policy defines which services are available in the Application Access Portal and which users can access the services.

Before you begin

You must have one or more Application Access Service elements.

The Application Access Policy contains rules that define which users can use each Application Access Service, and the authentication requirements for accessing the Application Access Portal Services.

For more details about the product and how to configure features, click Help or press F1.

Steps

Select Secure SD-WAN.
Create an Application Access Policy.
1. Expand the Application Access Portal branch.
2. Right-click Application Access Policies and select New Application Access Policy.
3. Configure the settings, then click OK.
The Application Access Policy opens for editing in a new tab.
Add rules in one of the following ways:
- Right-click the last row of an empty policy and select Add Rule.
- Right-click the ID cell of an existing rule and select Add Rule Before or Add Rule After.
Drag and drop one or more Application Access Service elements from the Resources pane to the Application Access Service cell.
Drag and drop one or more User or User Group elements from the Resources pane to the Authentication cell.
Save the Application Access Policy.

Next steps

You are now ready to select the Application Access Policy for an Application Access Portal element.

Application Access Policy Properties dialog box

Use this dialog box to define the properties of an Application Access Policy element.

Option	Definition
General tab
Name	Specifies a unique name for the element.
Category	Shows the assigned category. Click Select to include the element in predefined categories.
Comment	Adds a comment to the element.

Option	Definition
Permissions tab
Access Control Lists	Specifies administrator permissions for the policy.
Add	Opens the Select Element dialog box.
Remove	Removes the policy from the selected Access Control List.
Permissions
Administrator	Shows the administrator who is allowed to view or edit the policy.
Administrator Role	Shows the role or roles assigned to the selected administrator.
Add Permission	Adds an entry to the Administrator list.
Remove Permission	Removes the selected entry from the Administrator list.

Application Access Policy editing view

Use this view to define which services are available in the Application Access Portal and which users can access the services.

Option	Definition
Resources	Use this pane to create and add elements to a policy.
Search	Opens a search field for the selected element list.
Up	Returns to the previous folder.
New	Opens the associated dialog box to create an element.
Tools	Show Deleted Elements — Shows elements that have been moved to the Trash.

Option	Definition
Policy Toolbar
Save	Saves the changes.
Undo operation	Undoes the last change made.
Redo operation	Redoes the last change that was undone.
More actions
Validate	Finds rules that are clearly incorrect.
Expand Rule Sections	If you have added Rule Sections, they are all expanded.
Collapse Rule Sections	If you have added Rule Sections, and they are expanded, they are all collapsed.

Option	Definition
Application Access Portal rules table
ID (Not editable)	Automatically assigned ID number that indicates the order of the rules in the policy. The rules are matched against traffic in the order of the ID numbers. Right-clicking on this type of cell opens these menu items: Properties — Opens the element Rule Properties dialog box. Cut Rule — Copies the rule to the clipboard and deletes the rule from the policy. Copy Rule — Copies the rule from the policy. Paste — Pastes the rule into the policy. Delete Rule — Deletes the rule from the policy. Disable Rule — Temporarily disables rule without deleting. Add Rule Before — Adds the new rule before the selected rule or section. Add Rule After — Adds the new rule after the selected rule or section. Add Rule Section Before — Creates a collapsible section before the selected rule or section. Add Rule Section After — Creates a collapsible section after the selected rule or section. Move Rule Up — Moves the rule position up on the list. Move Rule Down — Moves the rule position down on the list.
Application Access Service	The Application Access Service elements that the rule matches.
Authentication	The users who are allowed to access one or more Application Access service elements.
Comment	Your optional free-form comment for this rule. You can also add separate comment rows in between rules. Right-clicking on this type of cell opens these menu items: Edit Comment — Opens the Rule Comment Definitions dialog box. Clear Cell — Removes the content of the cell. Rule — Opens a menu of list items that are the same for the ID cell.
Rule Name	Contains a rule tag and optionally a rule name. Name (Optional) — Name or description for the rule. Displayed alongside the rule tag. Tag (Not editable) — Automatically assigned unique identification for the rule. Works as a link between the log entries and the rule that has generated the log entries. The rule tag consists of two parts (for example, @20.1). The first part of the tag is permanent and belongs to only that rule. The second part changes when the rule is changed. The first part and the second part are separated by a period. Right-clicking on this type of cell opens these menu items: Edit Rule Name — Opens the Rule Name Definitions dialog box. Clear Cell — Removes the content of the cell. Remaining list items are the same as for the ID cell.

Option	Definition
Info pane	Use this pane to view more information about the selected rule.
General tab	Name — The name of the rule. Rule Tag — The rule's tag. Comment — Comment in the rule.
Rule Info tab	The rule cells and their values.
History tab	Creator — Shows the administrator who created the rule. Created — Shows the time when the rule was created. Modifier — Shows the administrator who modified the rule. Modified — Shows the time when the rule was modified. Audit History — Opens the Logs view and displays the audit log data for traffic that matches the rule.