Email Delivery

Receive new posts as email.

Email address

Syndicate WNN sites

Single feed for all sites

Syndicate this site

RSS 0.91 | RSS 2.0
RDF | Atom
Podcast only feed (RSS 2.0 format)
Get an RSS reader
Get a Podcast receiver

Contact

About This Site
Contact Us
Privacy Policy

Search

Google

Web this site

January 2007
Sun Mon Tues Wed Thurs Fri Sat
  1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31      

Stories by Category

Basics :: Basics
Casting :: Casting Listen In Podcasts Videocasts
Culture :: Culture Hacking
Future :: Future
Hardware :: Hardware Adapters Appliances Chips Consumer Electronics Gaming Home Entertainment Music Photography Video Gadgets Mesh Monitoring and Testing PDAs
Industry :: Industry Conferences Financial Deals Free Health Legal Research Vendor analysis
International :: International
Media :: Media IPTV Locally cached Streaming
Metro-Scale Networks :: Metro-Scale Networks Community Networking Municipal Public Safety
Network Types :: Network Types Broadband Wireless Cellular 2.5G and 3G 4G UMTS Power Line Satellite
News :: News Mainstream Media
Politics :: Politics Regulation Sock Puppets
Schedules :: Schedules
Security :: Security 802.1X
Site Specific :: Site Specific Administrative Detail April Fool's Blogging Book review Cluelessness Guest Commentary History Humor Self-Promotion Unique Who's Hot Today?
Software :: Software Open Source
Spectrum :: Spectrum
Standards :: Standards 802.11a 802.11e 802.11g 802.11n 802.20 Bluetooth MIMO UWB WiMAX ZigBee
Transportation and Lodging :: Transportation and Lodging Air Travel Aquatic Hotels Rails
Unclassified :: Unclassified
Vertical Markets :: Vertical Markets Academia Enterprise WLAN Switches Home Hot Spot Aggregators Hot Spot Advertising Road Warrior Roaming Libraries Location Medical Residential Rural SOHO Small-Medium Sized Business Universities Utilities wISP
Voice :: Voice

Archives

January 2007 | December 2006 | November 2006 | October 2006 | September 2006 | August 2006 | July 2006 | June 2006 | May 2006 | April 2006 | March 2006 | February 2006 | January 2006 | December 2005 | November 2005 | October 2005 | September 2005 | August 2005 | July 2005 | June 2005 | May 2005 | April 2005 | March 2005 | February 2005 | January 2005 | December 2004 | November 2004 | October 2004 | September 2004 | August 2004 | July 2004 | June 2004 | May 2004 | April 2004 | March 2004 | February 2004 | January 2004 | December 2003 | November 2003 | October 2003 | September 2003 | August 2003 | July 2003 | June 2003 | May 2003 | April 2003 | March 2003 | February 2003 | January 2003 | December 2002 | November 2002 | October 2002 | September 2002 | August 2002 | July 2002 | June 2002 | May 2002 | April 2002 | March 2002 | February 2002 | January 2002 | December 2001 | November 2001 | October 2001 | September 2001 | August 2001 | July 2001 | June 2001 | May 2001 | April 2001 |

Recent Entries

Wi-Fi Protected Setup Details Announced
Details on San Francisco/EarthLink Deal
San Francisco Reaches Deal with EarthLink, Google
Solid Coverage in Time of Muni Wi-Fi
NextWave Buys Go Networks
Surf, Sand, and Wi-Fi
Bluetooth Has Patent Woes
San Francisco! Slowly I Turned...Step by Step...Inch by Inch...
EarthLink CEO Garry Betty Dies
Rent-A-Cellular-Bridge from Avis

Site Philosophy

This site operates as an independent editorial operation. Advertising, sponsorships, and other non-editorial materials represent the opinions and messages of their respective origins, and not of the site operator or JiWire, Inc.

Copyright

Entire site and all contents except otherwise noted © Copyright 2001-2006 by Glenn Fleishman. Some images ©2006 Jupiterimages Corporation. All rights reserved. Please contact us for reprint rights. Linking is, of course, free and encouraged.

Powered by
Movable Type

« Wider-Fi | Main | Nextel Looks Inward »

August 18, 2003

SSL for VPN

By Glenn Fleishman

SSL-based virtual private networks explained with illustrations: I’ve been hearing quite a bit about using SSL (Secure Sockets Layer) or TLS (Transport Layer Security, the newer name for the same thing) for remote VPN access, but didn’t fully understand how it worked until reading this article.

The traditional VPN requires a special client installed on each computer, or can use a built-in VPN client in many operating systems, such as Windows XP Professional (a couple standards) or Mac OS X 10.2 (PPTP). A VPN server/firewall terminates the connection on the enterprise side and allows access across the VPN encrypted tunnel to internal resources.

The SSL/TLS VPN uses a browser, any SSL/TLS capable one, as the front end, and delivers applications inside the browser terminating the connection behind a firewall at an SSL/TLS server which relays application data to appropriate internal resources.

Posted by Glennf at August 18, 2003 11:31 AM

Categories: Enterprise

Trackback Pings

TrackBack URL for this entry:
https://db.isbn.nu/mt3/mt-tb.pl/676

Listed below are links to weblogs that reference SSL for VPN:

» SSL VPNs versus traditional VPNs from Roland Tanglao's Weblog
(SOURCE: Wi-Fi Networking News: SSL for VPN )- Excellent article and excellent summary by Glen F. [Read More]

Tracked on August 18, 2003 12:24 PM

Comments

Probably worth mentioning that there are two distinct flavours of SSL VPN, neither of which are reallly anything new.

the first (apparently the one discussed in this article) is the same old Application Service Provider model that MS were pushing some years ago, but reframed to be a service offered by the company itself for its own employees; the structure is the same - user https connects, authenticates, is given a java app which acts as a front end for whatever services are offered, and then works partially clientside (in java) and partially server side (using back-end scripting)

the second (which is very platform and browser specific) is basically stunnel in a browser-plugin - a poor approach and one less efficient than any of the alternatives.

Posted by: Dave Howe at August 19, 2003 5:53 AM