Monday, December 22, 2008

SSL VPNs

The attraction of SSL VPN service is that the service works from within standard browsers on laptops, desk computers, and personal digital assistants. This makes VPNs easier to use, with less administrative support required from IT staff. The business or commercial enterprise is not required to supply special software to each laptop computer used from remote access. The simplified login results in fewer user login errors.

SSL is a newer technology used for VPNs, however, simplified access and improvements in SSL are expected to spur growth. Employees using SSL-type security can only access applications such as email supported by the SSL gear. Software in the SSL appliances is adapted to enable access to particular applications. An appliance is a specialized computer dedicated to a particular task. These appliances prompt users for their names, passwords, and (if used) token number. They apply encryption and a secure tunnel and allow or deny access to enterprise applications. They have other features such as scanning users' PCs and automatically downloading software patches to computers that do not have the latest security corrections loaded.

Because SSL is a higher-level security protocol, it has the benefit of allowing or denying access to particular applications based on privileges granted to classes of employees. As it is possible for remote computers to pass viruses to corporate networks, some SSL appliances have the capability to scan remote computers for antivirus software and operating systems with the latest security patches. Other appliances have the capability to wipe out passwords and corporate data from computers used for remote access. This eliminates the possibility of computers in public areas, such as kiosks, storing and passing on private information and passwords.

No comments: