Ssl Applications - Billion BiGuard S10 Administration Manual

134 B G S10 FAQ
I UARD

SSL Applications

QUESTION:
ANSWER:
What SSL Applications does the BiGuard S10 Series provide? What do they
do?
The Billion BiGuard S10 Series provides clientless, identity-based, secure remote
access to your protected internal network. Using the 'SSL VPN Portal' environ-
ment, the Billion BiGuard S10 Series can provide users with secure remote
access to your entire private network, or to individual components such as file
shares, web-servers, FTP servers, remote desktops, or even individual applica-
tions hosted on Microsoft Terminal Servers. These various methods of secure
remote access are provided by the following components:
• Network Extender - Network Extender can provide remote users with full
access to your protected internal network. The experience is virtually identical
to that delivered by traditional IPSec VPN clients, but Network Extender does
not require any manual client installation. Instead, the Network Extender client
is automatically installed on remote user's PCs which instantiates a virtual
adapter for SSL-secure point-to-point access to permitted hosts and subnets on
the internal network.
• Transport Extender - Transport Extender is a feature that allows only specified
Protocol and IP addresses to be accessible with SSL encryption, which pro-
vides a more secure connection during transmission. Transport Extender can
be used in services with static listening ports such as a POP3 or SMTP Server.
• Network Place - Network Place provides remote users with a secure web-inter-
face to Microsoft File Shares using the CIFS (Common Internet File System) or
SMB (Server Message Block) protocols. Using a web-interface, similar in style
to Microsoft's familiar "Network Neighborhood" or "My Network Places", Net-
work Place allows users with appropriate permissions to browse network
shares, delete, retrieve, and upload files.
• Application Proxy - Application Proxy is the more finely granular components
of a trusted network, which can be accessed through the SSL VPN. Network
Resources can be pre-defined by the administrator and assigned to users or
groups as proxies for remote users. The BiGuard S10 Series utilizes integrated
client so all the applications will be shown as web-based, therefore, users do
not need to install the client software for each application.
Application Proxy is comprised of the following remote access capabilities:
• Terminal Service (RDP5) - Terminal Service (RDP5) is the current version
of Microsoft's Remote Desktop Protocol. Because of its increased function-
ality (such as session sound and full-screen mode) it is only able to operate
in conjunction with an ActiveX client (such as Internet Explorer 6.0.2800 or
later).
• Virtual Network Computing (VNC) - Virtual Network Computing (VNC)
was originally developed by AT&T, but is today widely available as open
source. Any one of the many variants of VNC server available can be
installed on most any workstation or server for remote access. The VNC cli-
ent to connect to those servers is delivered to remote users through the
web-browser as a Java client.