196 | SRA 6.0 Administrator’s Guidepolicy for a specific service (for example RDP) will take precedence over a policy thatapplies to all services.User policies take precedence over group policies and group policies take precedence overglobal policies, regardless of the policy definition. A user policy that allows access to all IPaddresses will take precedence over a group policy that denies access to a single IPaddress.To add NetExtender client routes, perform the following steps:Step 1 Navigate to the NetExtender > Client Routes page.Step 2 Select Enabled from the Tunnel All Mode drop-down list to force all traffic for this user—including traffic destined to the remote users’ local network—over the SRA NetExtender tunnel.Step 3 Click the Add Client Route button. The Add Client Route dialog box displays.Step 4 In the Add Client Route dialog box, in the Destination Network field, type the IP address ofthe trusted network to which you would like to provide access with NetExtender. For example,if you are connecting to an existing DMZ with the network 192.168.50.0/24 and you want toprovide access to your LAN network 192.168.168.0/24, you would enter 192.168.168.0.You can enter an IPv6 route in the Destination Network field, in the form 2007::1:2:3:0.Step 5 For an IPv4 destination network, type the subnet mask in the Subnet Mask/Prefix field usingdecimal format (255.0.0.0, 255.255.0.0, or 255.255.255.0). For an IPv6 destination network,type the prefix, such as 112.Step 6 Click Add.Step 7 Repeat this procedure for all necessary routes.NetExtender User and Group SettingsMultiple range and route support for NetExtender enables network administrators to easilysegment groups and users without the need of configuring firewall rules to govern access. Thisuser segmentation allows for granular control of access to the network—allowing users accessto necessary resources while restricting access to sensitive resources to only those whorequire it. This section contains the following subsections:• “Configuring User-Level NetExtender Settings” section on page 196• “Configuring Group-Level NetExtender Settings” section on page 200Configuring User-Level NetExtender SettingsAll of the global settings for NetExtender (IP address ranges, DNS settings, client routes, andclient connection settings) can be configured at the user and group levels. Multiple range androute support for NetExtender enables network administrators to easily segment groups andusers without the need of configuring firewall rules to govern access. This user segmentationallows for granular control of access to the network—allowing users access to necessaryresources while restricting access to sensitive resources to only those who require it.To configure custom settings for individual users, perform the following steps:
