Security Basics mailing list archives

Re: Deploying SSL-based VPNs


From: "Alice Bryson" <abryson () bytefocus com>
Date: Fri, 14 Apr 2006 22:52:53 +0800

I think whether SSL VPN need a so called client or not is depend on
the implementation. One could setup a tunnel via https, which not need
java applet or activeX. After tunnel established, you reached the
control panel of SSL VPN, java applet or activeX works at here. SSL
Vendor could also not use java applet or activeX at all, just a web
page, i think.

2006/4/10, Saqib Ali <docbook.xml () gmail com>:
On 4/10/06, André <andrecompbr () yahoo com br> wrote:
SSL VPN doesn´t need install client application; you can use a Java Applet
to establish the tunnel; this applet can be available thorugh a remote
server; so, you put an url in your browser and the applet is loaded.

In many situations a Java applet might be considered are client
application, since it not natively installed on all computers. For
e.g. If I go to a library internet kiosk, and try to connect to a SSL
VPN, it will prompt me to d/l the Java Applet, and depending on the
security level of the kiosk, it will most probably NOT allow me to d/l
this applet. Thus preventing me from accessing the SSL VPN.

--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------




--
http://www.lwang.org
lwang.org provides online base64 encode and decode, crc32 md5 and sha1
hashing, online ciphers, encryption and decryption. We are engaged in
adding more common use lookup service.
We collect spam for research at abryson () bytefocus com

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------


Current thread: