Ssl Vpn Client Modes; Enterprise Mode - Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual

SSL VPN Client Modes

3
Novell SSL VPN has two client modes, Enterprise mode and Kiosk mode. In Enterprise mode,
which is available for users who have administrative privileges, all applications are enabled for SSL
VPN. In Kiosk mode, only a limited set of applications are enabled for SSL VPN.
Enterprise mode is available to a user who has the administrator right in a Windows workstation or a
user privilege on Linux or Macintosh workstations. If the user does not have administrator
root
rights or user privileges for that workstation, the SSL VPN connection is made in Kiosk mode.
root
For more information on the client platforms and setups tested by Novell, see
Support Pack 1 SSLVPN integration testing report (http://www.novell.com/support/
viewContent.do?externalId=7004342&sliceId=1).
Section 3.1, "Enterprise Mode," on page 23
Section 3.2, "Kiosk Mode," on page 25

3.1 Enterprise Mode

In Enterprise mode, all applications, including those on the desktop and the toolbar, are enabled for
SSL, regardless of whether they were opened before or after connecting to SSL VPN. In this
approach, a thin client is installed on the user's workstation. In Enterprise mode, the IP Forwarding
feature is enabled by default.
Enterprise mode is recommended for devices that are managed by an organization, such as a laptop
provided by the organization for its employees. Enterprise mode supports the following:
Protocols such as TCP, UDP, ICMP, and NetBIOS.
Applications that open TCP connections on both sides, such as VoIP and FTP.
Enterprise applications such as CRM and SAP*.
Applications such as Windows File Sharing systems, the Novell Client
SecureLogin.
You can configure a user to connect only in Enterprise mode, depending on the role of the user. For
more information, see Section 15.1, "Configuring Users to Connect Only in Enterprise Mode or
Kiosk Mode," on page 101.
NOTE: If you have configured a user to connect in Enterprise mode only and that user does not
meet the prerequisites, then, the SSL VPN connection fails with an appropriate error message if
using the applet-based Web browser, or a blank screen if an ActiveX-based Web browser is used.
This section has the following information:
Section 3.1.1, "Prerequisites," on page 24
Section 3.1.2, "User Scenarios," on page 24
Access Manager 3.1
, and Novell
TM
SSL VPN Client Modes
3
23