Quick Start Tutorial

Section II Step 1: Create a Rule

K-Secure VPN^™ is a rule based VPN system. Different rules can be created on the server to control network connections on client machines. Rules can be made to target a single connection or a range of connections; it may affect a single user or multiple users in a group. Because of the hierarchical relationships of groups, it is also very easy for the rules to be created and maintained.

In this section we'll create a simple rule called "HTTP Rule". This rule is designed to route all web connections (i.e. outgoing connections to any web server at port 80) that are originated from client machines through the server.

1. Click the wizard tool button located at the right-top of the application window. In the menu that pops up, choose Rule Wizard. The Rule Wizard shall come up -

   

   Select Create a new rule with the following name and enter HTTP Rule in the box; then click Next.

2. This brings us to the second page of the Rule Wizard, where we will set the group for the rule -

   

   Select This rule belongs to the following group and choose My Friends from the list; then click Next.

3. We are now on the third page of the Rule Wizard. All addresses defined here are from the perspective of the client machine. When K-Secure VPN^™ Client detects a network connection initiated from the client machine, it will decide whether such a connection shall be routed based on these information -

   

   Our rule targets TCP connections so select This rule is a TCP Rule. Inside Address and Port, select A range of IP(s) and Port(s) specified below and enter 0.0.0.0/80 into Min IP and Min Port; enter 255.255.255.255 / 80 into Max IP and Max Port; then click Next.

4. We are now on the fourth page of the Rule Wizard, where we are going to define an Application Server for the routed connections. The IP and Port here are from the perspective of the server. When a connection is routed from the client machine by K-Secure VPN^™ Client, K-Secure VPN^™ Server uses this IP and port to decide where the routed connection shall be sent to -

   

   Enter 255.255.255.255 for the IP and 65535 for the port. Here the address 255.255.255.255 has a special meaning in the rule - it means "instead of routing the connection to a fixed address that I would have otherwise specified, route the connection to the original target address that the application client wanted to connect." Similarly, the port 65535 means "use the original target port that the application client wanted to connect to." We could also specify the port to be 80 since that's the only port this rule targets. Now click Next.

5. Here we are on the fifth page of the Rule Wizard -

   

   Check Enable this rule - a rule that's not enabled will be ignored by the system; leave Allow multiple connection unchecked - you need this flag only for protocols such as FTP where multiple connections are used for a single session. Now click Finish

6. Here we are on the final page of the Rule Wizard, where it confirms our rule has been created.

   

Congratulations! We are now done with the rule definition. Start the server if you have not done so. Next, we'll connect to our server with a client to see how this rule takes effect on the client machine.