Security Basics mailing list archives
Re: Deploying SSL-based VPNs
From: "Alice Bryson" <abryson () bytefocus com>
Date: Fri, 14 Apr 2006 22:52:53 +0800
I think whether SSL VPN need a so called client or not is depend on the implementation. One could setup a tunnel via https, which not need java applet or activeX. After tunnel established, you reached the control panel of SSL VPN, java applet or activeX works at here. SSL Vendor could also not use java applet or activeX at all, just a web page, i think. 2006/4/10, Saqib Ali <docbook.xml () gmail com>:
On 4/10/06, André <andrecompbr () yahoo com br> wrote:SSL VPN doesn´t need install client application; you can use a Java Applet to establish the tunnel; this applet can be available thorugh a remote server; so, you put an url in your browser and the applet is loaded.In many situations a Java applet might be considered are client application, since it not natively installed on all computers. For e.g. If I go to a library internet kiosk, and try to connect to a SSL VPN, it will prompt me to d/l the Java Applet, and depending on the security level of the kiosk, it will most probably NOT allow me to d/l this applet. Thus preventing me from accessing the SSL VPN. -- Saqib Ali, CISSP, ISSAP Support http://www.capital-punishment.net ----------- "I fear, if I rebel against my Lord, the retribution of an Awful Day (The Day of Resurrection)" Al-Quran 6:15 ----------- ------------------------------------------------------------------------- This List Sponsored by: Webroot Don't leave your confidential company and customer records un-protected. Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no obligation. See why so many companies trust Spy Sweeper Enterprise to eradicate spyware from their networks. FREE 30-Day Trial of Spy Sweeper Enterprise http://www.webroot.com/forms/enterprise_lead.php --------------------------------------------------------------------------
-- http://www.lwang.org lwang.org provides online base64 encode and decode, crc32 md5 and sha1 hashing, online ciphers, encryption and decryption. We are engaged in adding more common use lookup service. We collect spam for research at abryson () bytefocus com ------------------------------------------------------------------------- This List Sponsored by: Webroot Don't leave your confidential company and customer records un-protected. Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no obligation. See why so many companies trust Spy Sweeper Enterprise to eradicate spyware from their networks. FREE 30-Day Trial of Spy Sweeper Enterprise http://www.webroot.com/forms/enterprise_lead.php --------------------------------------------------------------------------
Current thread:
- Re: Deploying SSL-based VPNs Kenton Smith (Apr 03)
- <Possible follow-ups>
- Re: Deploying SSL-based VPNs Saqib Ali (Apr 03)
- Message not available
- Re: Deploying SSL-based VPNs Saqib Ali (Apr 11)
- Re: Deploying SSL-based VPNs Alice Bryson (Apr 17)
- Message not available
- Re: Deploying SSL-based VPNs Joe (Apr 03)
- RE: Deploying SSL-based VPNs Andrew Shore (Apr 03)
- RE: Deploying SSL-based VPNs Hayes, Ian (Apr 03)
- RE: Deploying SSL-based VPNs Beauford, Jason (Apr 03)
- Re: Deploying SSL-based VPNs Saqib Ali (Apr 04)