Re: Clientless VPN (SSL VPN) vs HTTPS

Hello

There are various ways to implement SSL-VPNs. The simplest one is
accessing HTTP based services using a browser. In such an
implementation there is not much difference from accessing an HTTPS
website directly. In the SSL-VPN scenario, the browser connects to the
SSL-VPN gateway using HTTPS. The SSL-VPN gateway then acts as a
reverse proxy to the HTTP based service. So the main difference
between normal HTTPS access and a simple SSL-VPN access is basically
just that you access the resource over a reverse-proxy that is able to
talk SSL.

However, there are more sophisticated ways to implement SSL-VPNs. You
can for example implement port-forwarding or even tunnel all kind of
IP traffic. Those techniques, however, do not have much similarity to
HTTPS base access.

Regards
Joe

On 8/11/06, harbinger <bluetooth995@xxxxxxxxx> wrote:
Hi

These days SSL VPN has been the alternative to
the tradition IPsec VPN, particularly for users that
require only email access.

However, what is the different in implementing SSL VPN -
which essentially means allowing only webbased traffic i.e webmail,
as compare to just to setup a webmail server running HTTPS.

Can anyone point out the differences??

Thanks

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------