Security profile groups
You can create security profile groups, which allow you to group different security profile settings together. You can then configure the profile group as part of a policy.
This topic covers the following use cases:
Security profile groups for VPN users
To create a security profile group and configure it in a VPN policy:
-
Go to Security > Security Profile. By default, the Internet Access tab is selected in the top right corner. (If you have configured secure private access, you can select between the Internet Access or Private Access tabs to select which traffic the security profile group applies to.)
-
From the Profile Group dropdown list in the top right corner, click +.
-
In the Name field, enter the desired name.
-
Select Feature Set, “Flow-based” used for flow type Profile, “Proxy-based” used for proxy type Profile.
-
In the Initial Configuration field, do one of the following:
-
Select Default to configure the new group with the same settings as the default security profile group.
-
Select Based On to configure the new group with the same settings as an existing non-default security profile group. From the dropdown list, select the desired group.
-
-
Click OK.
-
Configure the profile group in a VPN policy:
-
Go to Security > Policies.
-
Select your desired policy.
-
In the Profile Group field, select Specify. From the dropdown list, select the created object. The Profile Group field is only available for policies where the Action is configured as Accept.
-
Click OK.
-
Security profile groups for SWG users
For SWG users, the process for configuring a security profile group and policy is similar to the process for configuring these settings for VPN users.
The only difference is that these steps are required if SSO authentication is used for SWG users:
-
You must configure SSL inspection in Configure SSL ensuring that Deep Inspection is selected.
-
You will need to download the CA certificate and install it on endpoints.