RE: True Clientless SSLVPN

["Pher Ong J.H." <pherong () gmail com>]

Hi,

from my knowledge, Firepass also download a component into the client's PC
and does this still consider clientless?? If that is the case, what about
portwise and mykenae?? 


-------------------------------------------------
Warmest Regards,
Pher Ong J.H.
-------------------------------------------------

-----Original Message-----
From: Joe [mailto:bitshield () gmail com] 
Sent: Friday, June 02, 2006 2:25 AM
To: Huzeyfe Onal
Cc: beinm () ummhc org; security-basics () securityfocus com
Subject: Re: True Clientless SSLVPN

Hi

> what do you mean true clientless? All SSL VPN products are 
> clientless(Except OpenVPN).
I do not agree. If we talk about SSL-VPN (virtual private _network_), then
it is always required to install software, becaus a real VPN requires
layer-3 routing. However most people just mean remote-access when they talk
about SSL-VPN. In such a case a client-less access like a reverse proxy
(with apache, mod_ssl and mod_proxy) is usually enough.

> SSL VPNs allow users to connect securely  only a web browser.. You can 
> try SSLExplorer (http://sourceforge.net/projects/sslexplorer/) or 
> another SSL VPN solutions.
Yes and most commercial products (like Aventail and FirePass) also offer the
possibility to use true-client less access.

Regards
Joe

--
~ no viruses found ~
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.8.0/353 - Release Date: 31-05-2006
 

-- 
~ no viruses found ~
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.8.0/353 - Release Date: 31-05-2006