Configuring Ssl Vpn To Connect Through A Forward Proxy; Understanding How Ssl Vpn Connects Through A Forward Proxy - Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual

Ssl vpn server guide

Table of Contents

Configuring SSL VPN to Connect

1 7

through a Forward Proxy

The Novell

SSL VPN can be configured to detect and connect through a forward proxy in both

Kiosk as well as Enterprise modes after authenticating to the Identity server. To establish the SSL

VPN connection through a forward proxy, you can either configure the browser or create a

file in the user's home directory. You must also ensure that the SSL VPN server is

proxy.conf

listening on the TCP port and not on the UDP port.

NOTE: The SSL VPN client ignores the use of dynamic proxy configuration either by assigning a

JavaScript* to the browser client or by using the WPAD protocol. In such a scenario,

proxy.pac

use the

file. Fore more information on how to create a

proxy.conf

Section 17.2, "Creating the proxy.conf File," on page

This section has the following information:

Section 17.1, "Understanding How SSL VPN Connects Through a Forward Proxy," on

page 109

Section 17.2, "Creating the proxy.conf File," on page 110

17.1 Understanding How SSL VPN Connects

Through a Forward Proxy

When a user initiates a connection to SSL VPN server through a browser, SSL VPN uses the

following process to connect:

1. SSL VPN checks to see if the browser is configured to use a proxy.

2. If it is, SSL VPN checks for the

3. If a proxy configuration file is present, the following occurs:

a. SSL VPN checks for the format of the file. If the information provided in the file is not in

the correct format, SSL VPN proceeds with Step 4.

b. If the configuration information is in the correct format, SSL VPN reads the proxy

information from the

4. If the proxy configuration file is not present or if the information is not in the correct format,

SSL VPN checks for proxy configuration information from the browser registry or profile.

5. If SSL VPN is unable to get the proxy configuration information either through the

file or through the registry, it throws an error asking the user to edit the

proxy.conf

and tries to establish a direct connection.

proxy.conf

6. SSL VPN reads the proxy configuration information and attempts to connect to the resource

without the proxy. If this attempt fails, the SSL VPN connection is made through the forward

proxy.

110.

file in the user's home directory.

proxy.conf

file, then proceeds with Step 6.

proxy.conf