Application of SSL VPN technology

Application of SSL VPN

SSL VPN provides a variety of remote access services to the enterprise. Introduce the following common services:

E-mail: For enterprises, e-mail communication is a very basic function. IPSec VPN protects the messaging system, but IPSec VPNs need to install client software and connect to the corporate network before they can use an internal messaging system. If employees are using other people's computer equipment or in other networks, they face a barrier to the address translation and security policies of the opposing firewall, unable to connect to the corporate network, and thus cannot use the internal mail system. Outgoing staff in the wine electricity because of these problems can not connect to the enterprise internal network is a very troublesome problem. SSL VPN provides a better solution for employees to use any browser-enabled computer to access web-based e-mail systems and send and receive mail through secure channels established via SSL VPN. SSL VPN also hides all domain names and server addresses within the enterprise to improve the security of the corporate network.

Intranet access: Even if it is not in the office, Enterprise employees need to use some of the file resources in the intranet, but typically the enterprise does not open the entire internal network to achieve file access. SSL VPN enables enterprise employees to achieve access to internal-specific resources anywhere, using any access device that includes a browser and connects to the Internet.

network resources for Partners: in order to improve productivity and strengthen partnerships, businesses often open internal sites and network resources to partners. Considering the confidentiality of enterprise information, how to ensure that only the designated partners can access the corresponding resources, and ensure that the information on the network is not intercepted, it becomes the enterprise must solve the problem. IPSec VPN does not guarantee access to end users at deployment, that is, only allow partners to access specified resources on the internal network, and deploying IPSec VPN requires changing the security policy of the partner firewall, which is difficult to achieve. SSL VPN does not exist at all, the enterprise can even limit a partner to access only some pages and folders in a site, and do not need to modify the partner's security policy, as long as partners have access to the Internet.

Current form

SSL VPN is becoming a hot market with the increase of web application and the increasing demand of remote access. Although most remote access services are currently implemented by IPSec VPN, industry insiders point out that about 90% of enterprises use IPSec VPNs only for e-mail communications and Web applications, and only 10% of users use IPSec VPN access to non-Web applications. In other words, 90% of IPSec VPN applications can be implemented by SSL VPN, and SSL VPN is easier to configure and manage, and the cost is much lower than that of IPSec VPN. After several years of development, nowadays many large companies are flocking to SSL VPN technology, attracting international famous manufacturers including Cisco, Nokia, Array networks and so on. At present, almost all mainstream business browsers have integrated SSL, the implementation of SSL VPN does not require the installation of additional software. Infonetics predicts that global sales of SSL VPN devices will continue to grow over the next few years, with 840 million of dollars in SSL VPN market by 2005. SSL VPN provides operators with new revenue opportunities, and its advantages for operators and end users are unmatched by any technology in the past. Now that SSL VPN has been successfully deployed in some 1-tier carriers, the time has come for SSL VPN to develop rapidly.