Dell SMA 200 - Concepts for Secure Mobile Access; Encryption Overview; SSL for Virtual Private Networking (VPN)

Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
21
Concepts for Secure Mobile Access
This section provides an overview of the following key concepts that the administrator should be familiar with
when using the SMA/SRA appliance and Secure Mobile Access web-based management interface:
• Encryption Overview on page 21
• SSL for Virtual Private Networking (VPN) on page 21
• SSL Handshake Procedure on page 22
• IPv6 Support Overview on page 22
• Portals Overview on page 25
• Domains Overview on page 25
• Application Offloading and HTTP(S) Bookmarks Overview on page 25
• Cross Domain Single Sign-On on page 29
• ActiveSync Authentication on page 30
• Network Resources Overview on page 35
• SNMP Overview on page 40
• DNS Overview on page 40
• Network Routes Overview on page 40
• NetExtender Overview on page 40
• Two-Factor Authentication Overview on page 44
• One Time Password Overview on page 46
• End Point Control Overview on page 48
• Secure Virtual Assist Overview on page 49
• Web Application Firewall Overview on page 63
Encryption Overview
Encryption enables users to encode data, making it secure from unauthorized viewers. Encryption provides a
private and secure method of communication over the Internet.
A special type of encryption known as Public Key Encryption (PKE) comprises a public and a private key for
encrypting and decrypting data. With public key encryption, an entity, such as a secure Web site, generates a
public and a private key. A secure Web server sends a public key to a user who accesses the Web site. The public
key allows the user’s Web browser to decrypt data that had been encrypted with the private key. The user’s Web
browser can also transparently encrypt data using the public key and this data can only be decrypted by the
secure Web server’s private key.
Public key encryption allows the user to confirm the identity of the Web site through an SSL certificate. After a
user contacts the SMA/SRA appliance, the appliance sends the user its own encryption information, including an
SSL certificate with a public encryption key.
SSL for Virtual Private Networking (VPN)
A Secure Socket Layer-based Virtual Private Network (SSL VPN) allows applications and private network
resources to be accessed remotely through a secure connection. Using SSL VPN, mobile workers, business
partners, and customers can access files or applications on a company’s intranet or within a private local area
network.