Novell ACCESS MANAGER 3.1 SP2 - SSL VPN SERVER GUIDE 2010 Manual page 12

For more information on how to order and install the high-bandwidth SSL VPN, and to upgrade the
high-bandwidth version to the latest build, see
SSLVPN" in the
Traditional and ESP-Enabled Installation
You can install SSL VPN in two ways:
As an ESP-enabled SSL VPN, which is installed with the Identity Server and the
Administration Console.
As a Traditional SSL VPN, which is installed with the Identity Server, Administration Console,
and the Access Gateway.
For more information on these methods, see
VPNs," on page
Enterprise and Kiosk Modes for End User Access
The Novell SSL VPN uses both clientless and thin-client access methods. The clientless method is
called the Kiosk mode SSL VPN and the thin-client method is called the Enterprise mode SSL VPN.
In Enterprise mode, all applications, including those on the desktop and the toolbar, are enabled for
SSL, regardless of whether they were opened before or after connecting to SSL VPN. In this mode,
a thin client is installed on the user's workstation, and the IP Forwarding feature is enabled by
default. For more information on Enterprise mode, see
page 17.
In Kiosk mode, only a limited set of applications are enabled for SSL VPN. In Kiosk mode,
applications that were opened before the SSL VPN connection was established are not enabled for
SSL. For more information on Kiosk mode, see
As SSL VPN server administrators, you can decide which users can connect in Enterprise mode and
which users can connect in Kiosk mode, depending on the role of the user. Or you can let the client
select the mode in which the SSL VPN connection is made. For more information on how to do this,
see Chapter 4, "Configuring How Users Connect to SSL VPN," on page
available to a user who has the administrator right in a Windows workstation or a
privilege on Linux or Macintosh workstations. If the user does not have administrator rights or
user privileges for that workstation, the SSL VPN connection is made in Kiosk mode.
Customized Home and Exit Pages for End Users
The home page and the exit page of SSL VPN can be customized to suit the needs of different
customers. For more information, see
page 99.
Clustering SSL VPN Servers
The SSL VPN servers can be clustered to provide load balancing and fault tolerance, When you
form a cluster of SSL VPN servers, all members of a cluster should belong to only one type of SSL
VPN and they should all be running the high-bandwidth SSL VPN. For example, all the members of
a cluster should belong to either the ESP-enabled SSL VPN or the Traditional SSL VPN. For more
information on SSL VPN clustering, see
Servers," on page
12 Novell Access Manager 3.1 SP2 SSL VPN Server Guide
Novell Access Manager 3.1 SP2 Installation
14.
Section 8.1, "Customizing the SSL VPN User Interface," on
Chapter 5, "Clustering the High-Bandwidth SSL VPN
67.
"Installing the Key for the High-Bandwidth
Guide.
Section 1.2, "Traditional and ESP-Enabled SSL
Section 1.3.1, "Enterprise Mode," on
Section 1.3.2, "Kiosk Mode," on page 19.
55. Enterprise mode is
user
root
root