SMA 8200v AMC Preconfigured Objects

When the CloudFormation stack reaches the CREATE_COMPLETE state, the following objects are automatically configured in the SMA 8200v Appliance Management Console (AMC).

Authentication

• Default Realm and Default Community are created to support Connect Tunnel and WorkPlace authentication.

Network Resources

• Static Address Pool is configured using the StaticPoolCidr value (default: 10.101.0.0/16) and provides IP addresses to Connect Tunnel clients.

• Remote Network Resource (created only when SiteToSiteVpn=true) is configured using the SiteToSiteRemoteCidr value and represents the remote on-premises network.

Access Control Rules

The following rules are preconfigured in the AMC and applied in priority order:

Priority	Rule Name	User / Group	Resource
1	Allow tunnel user to remote on-prem network	tunnel	[SiteToSiteRemoteCidr value]
2	Allow Connect Tunnel for tunnel user	tunnel	Connect Tunnel
3	Default WorkPlace permit all rule	Any user	WorkPlace
4	Permit rule for Default Resources	Any user	Default Resources

Rule 1 is created only when SiteToSiteVpn is set to true. The resource in Rule 1 uses the CIDR value specified for SiteToSiteRemoteCidr during deployment. Review and modify these rules in the AMC under User Access > Policies before deploying to production.