Security Basics mailing list archives

RE: True Clientless SSLVPN


From: "Dubber, Drew B" <drew.dubber () eds com>
Date: Mon, 5 Jun 2006 16:25:50 +0100

In the same vein as below (and indeed many of the solutions offered),
Citrix Secure Gateway will work in conjunction with Web Interface to
present a "mostly" client free SSL approach. There is an Active-X
control for the client end but if the client has Java installed I am of
the understanding that a runtime Java client can be pulled down from the
Web Interface server at connection time (size according to the features
selected) and cleaned up afterwards. 

Kind regards
Drew

-----Original Message-----
From: Beauford, Jason [mailto:jbeauford () EightInOnePet com] 
Sent: 02 June 2006 21:28
To: Jamie Schmidt; security-basics () securityfocus com
Subject: RE: True Clientless SSLVPN

Jamie Schmidt wrote:

It appears that he is referring to a laptop or PC that is running as a

restricted user remotely that has no capability of approving any type 
of applet or activeX control.  That is still somewhat a type of 
'client' install.

-jamie-

I get this part.  I mean.. What type of connectivity is the OP looking
to provide?  What access is required?

For instance, remote access to file shares is easily done via Reverse
Proxy on any of the previously named solutions without any active-x
control required.  However, Outlook Connectivity, SSH or Telnet, Remote
Desktop etc.. May require some sort of Active-X control.  Nothing I know
of at this time will provide full Network functionality without the
installation of some sort of "client".

Sorry if my post was unclear.

JMB


Current thread: