Kerio Tech Firewall6 Network Router User Manual


 
355
Chapter 22
Kerio Clientless SSL-VPN
Kerio Clientless SSL-VPN (thereinafter SSL-VPN”) is a special interface used for secured
remote access to shared items (files and folders) in the network protected by WinRoute
via a web browser.
To a certain extent, the SSL-VPN interface is an alternative to Kerio VPN Client (see chap-
ter
21). Its main benefit is that it enables an immediate access to a remote network from
any location without any special application having been installed and any configuration
having been performed (that’s the reason for calling it clientless). The main disadvan-
tage of this alternative is that network connections are not transparent. SSL-VPN is, in
a manner, an alternative to the My Network Places system tool ) it does not enable
access to web servers or other services in a—remote network.
SSL-VPN is suitable for an immediate access to shared files in remote networks in such
environments where it is not possible or useful to use Kerio VPN Client.
22.1 Configuration of WinRoute’s SSL-VPN
Usage of SSL-VPN is conditioned by membership of the WinRoute host in the corre-
sponding domain (Windows NT or Active Directory). User accounts that will be used for
connections to SSL-VPN must be authenticated at the domain (it is not possible to use
local authentication). This implies that SSL-VPN cannot be used for accessing shared
items in multiple domains or to items at hosts which are not members of any domain.
SSL-VPN configuration
The SSL-VPN interface can be enabled/disabled on the Web Interface SSL-VPN in the
Configuration Advanced Options section.
Figure 22.1 Configuration of the SSL-VPN interface