6-1
v1.0, April 2010
Chapter 6
Virtual Private Networking
Using SSL Connections
The VPN firewall provides a hardware-based SSL VPN solution designed specifically to provide
remote access for mobile users to their corporate resources, bypassing the need for a preinstalled
VPN client on their computers. Using the familiar Secure Sockets Layer (SSL) protocol,
commonly used for e-commerce transactions, the VPN firewall can authenticate itself to an
SSL-enabled client, such as a standard Web browser. Once the authentication and negotiation of
encryption information are completed, the server and client can establish an encrypted connection.
With support for up to 50 dedicated SSL VPN tunnels, the VPN firewall allows users to easily
access the remote network for a customizable, secure, user portal experience from virtually any
available platform.
This chapter contains the following sections:
• “Understanding the SSL VPN Portal Options” on this page
• “Planning for an SSL VPN” on page 6-2
• “Creating the Portal Layout” on page 6-4
• “Configuring Domains, Groups, and Users” on page 6-7
• “Configuring Applications for Port Forwarding” on page 6-8
• “Configuring the SSL VPN Client” on page 6-10
• “Using Network Resource Objects to Simplify Policies” on page 6-14
• “Configuring User, Group, and Global Policies” on page 6-17
• “Accessing the SSL Portal Login Screen” on page 6-23
• “Viewing the SSL VPN Connection Status and SSL VPN Logs” on page 6-25
Understanding the SSL VPN Portal Options
The VPN firewall’s SSL VPN portal can provide two levels of SSL service to the remote user:
• SSL VPN tunnel. The VPN firewall can provide the full network connectivity of a VPN
tunnel using the remote user’s browser instead of a traditional IPsec VPN client.
To Next Page
Loading...
