Using Ssl For Enterprise Server - Imanager Communications; Using Ssl For Enterprise Server - Client Communications; Using Ssl For Enterprise Server - Web Access Server Communications; Using Ssl For Web Access Server - Users' Web Browser Communications - Novell IFOLDER 3.X - SECURITY ADMINISTRATOR GUIDE 08-15-2006 Administrator's Manual

2.2 Using SSL for Enterprise Server - iManager
Communications
By default, the Novell iFolder 3.x plug-in to iManager uses SSL for communications to the iFolder
enterprise server being managed. For most deployments, this setting should not be changed. If the
iManager server and the iFolder enterprise server are on the same computer, SSL is not required. For
HTTP connections, the password is passed in the clear.
For information, see
3.x Administration
2.3 Using SSL for Enterprise Server - Client
Communications
By default, the iFolder enterprise server is configured to require SSL. All client communication to
the server is encrypted using the SSL protocol. For most deployments, this setting should not be
changed because iFolder uses HTTP BASIC for authentication, which means passwords are sent to
the server in the clear.
For information, see
Client" in the
If you disable SSL for server-client communications, you should use a VPN (virtual private
network) for communications over wireless networks and outside the firewall. For information, see
Section 4.3, "Securing Communications with a VPN If SSL Is Disabled," on page
2.4 Using SSL for Enterprise Server - Web
Access Server Communications
By default, the iFolder enterprise server is configured to communicate with the iFolder Web Access
server via SSL. For most deployments, this setting should not be changed. If the Web Access server
co-exists on the same machine as the iFolder enterprise server, an administrator can reconfigure to
disable SSL, which increases the performance of local communications between the two servers.
For information, see
Enterprise
2.5 Using SSL for Web Access Server - Users'
Web Browser Communications
By default, the iFolder Web Access server is configured to require SSL. All Web-browser-based
communication to the Web Access server is encrypted using the SSL protocol. In most deployments,
this setting should not be changed because iFolder uses Forms-based authentication for browser
communications, which means passwords are sent to the server in the clear. For information, see
"Configuring the Web Access Server for SSL Communications with Web
iFolder 3.x Administration
If you disable SSL for server-client communications, you should use a VPN (virtual private
network) for communications over wireless networks and outside the firewall. For information, see
Section 4.3, "Securing Communications with a VPN If SSL Is Disabled," on page
12 Novell iFolder 3.x Security Administrator Guide
"Accessing the Novell iFolder 3 Plug-In for
Guide.
"Configuring the Enterprise Server for SSL Communications with the iFolder
Novell iFolder 3.x Administration
"Configuring the Web Access Server for SSL Communications with the
Server" in the Novell iFolder 3.x Administration
Guide.
iManager" in the
Guide.
Guide.
Novell iFolder
21.
Browsers" in the Novell
21.