Adding and managing SSL VPN users

Available in VPC

Adding and managing SSL VPN Users explains how to add/disable/delete users to use the SSL VPN you created, and how to edit user information. It also describes how to change the number of IDs (users) that can be registered to SSL VPN and how to collect authentication logs.

Add user

The following shows how to add users who will use SSL VPN.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN to which you want to add users, and then click the [User settings] button.
3. Enter the user information, and then click the [Add] button.
   • SSL VPN (VPC) supports only two-factor authentication, so be sure to enter an email address and mobile phone number for two-factor authentication.
     • An OTP authentication number will be sent to the email address and mobile phone number you entered.
   • The number of users you can add depends on the specifications you selected when creating SSL VPN. To change the specifications, see Change the number of IDs to be registered.
   • User information except Username can be edited after adding users (see Change user information).
4. Click the [Save] button.

Change user information

The following describes how to edit added user information.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN with added users whose information you want to change, and then click the [User settings] button.
3. Click the [Edit] button for the user whose information you want to change.
4. After changing the information, click the [Save] button.
   • If you do not want to save the changes, click the [Cancel] button.
5. Click the [Apply] button.

Disable user

You can disable users you've added to SSL VPN to block them from accessing SSL VPN. The following shows how to disable SSL VPN users.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN to which you want to disable users, and then click the [User settings] button.
3. Select the users you want to disable by clicking the Disable check box.
4. Click the [Apply] button.

Enable user

To enable a disabled user again, change the disabled user's information. For more information about changing user information, see Change user information.

Delete user

The following shows how to delete SSL VPN users.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN to which you want to delete users, and then click the [User settings] button.
3. Click the [Delete] button of the user you want to delete.
4. When the Delete SSL VPN user pop-up window appears, click the [Yes] button.
5. Click the [Apply] button.

Change the number of IDs to register

The number of users you can add depends on the number of IDs to register to SSL VPN. The following describes how to change the number of IDs to register to SSL VPN.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN for which you want to change the number of IDs to register and then click the [Change SSL VPN settings] button.
3. Select the number of IDs you want to change, and then click the [Apply] button.
   • You can select the number of IDs from 3 to 100.
   • You cannot change to a specification lower than the number of currently registered IDs.

Authentication log collection settings

You can change whether to enable SSL VPN user authentication log collection.

1. From NAVER Cloud Platform console, click the Services > Security > SSL VPN menus, in that order.
2. Click to select SSL VPN for which you want to change authentication log collection settings and then click the [Change SSL VPN settings] button.
3. Click the [Setting] button to change the activation status for authentication log collection.
   • When you enable authentication log collection, the authentication logs of SSL VPN users can be forwarded to CLA (Cloud Log Analytics) for storage. CLA stores the data up to 100 GB for maximum of 1 month. To store it permanently you can save it to Object Storage via Automatic Export Setting for logs.
   • To activate the authentication log collection, you must complete the CLA Request in advance. If you cancel CLA service in the middle, the additional logs will not be collected.

The following table describes the fields of authentication log items in order. All fields are separated by commas.