Network Bulls
www.networkbulls.com
Best Institute for CCNA CCNP CCSP CCIP CCIE Training in India
M-44, Old Dlf, Sector-14 Gurgaon, Haryana, India
Call: +91-9654672192
Cisco IOS IPsec/SSL–based VPN, also known as WebVPN, is an emerging technology that
provides remote-access connectivity from almost any Internet-enabled location using a web
browser and its native SSL encryption. WebVPN provides the flexibility to support secure
access for all users, regardless of the endpoint host from which they establish a connection.
If application access requirements are modest, WebVPN does not require a software client
to be preinstalled on the endpoint host. This ability enables companies to extend their
secure enterprise networks to any authorized user by providing remote-access connectivity
to corporate resources from any Internet-enabled location. Figure 8-5 shows how an SSL
VPN tunnel can be built through the Internet using a web browser.
Figure 8-5 IPsec SSL VPN (WebVPN)
WebVPN currently delivers two modes of SSL VPN access: clientless and thin client.
WebVPNs allow users to access web pages and services, including the ability to access
files, send and receive e-mail, and run TCP-based applications, without IPsec VPN Client
software. WebVPNs are appropriate for user populations that require per-application or
per-server access control, or access from nonenterprise-owned desktops.
In many cases, IPsec and WebVPN are complementary because they solve different
problems. This complementary approach allows a single device to address all remoteaccess
user requirements.
Benefits
The primary benefit of WebVPN is that it is compatible with Dynamic Multipoint VPNs
(DMVPN), Cisco IOS Firewalls, IPsec, intrusion prevention systems (IPS), Cisco Easy
VPN, and NAT.
Internet
Headquarters
Workplace
Resources
SSL VPN
Tunnel
WebVPN
Introducing VPN Solutions 305
Restrictions
As with other VPN software, some restrictions also exist with IPsec SSL VPN (WebVPN).
The primary restriction of WebVPN is that it is currently supported only in software. The
router CPU processes the WebVPN connections. The on-board VPN acceleration that is
available in integrated services routers accelerates only IPsec connections.
No comments:
Post a Comment