HP VPN Firewall Appliances VPN Configuration Guide

318

Configuring SSL VPN

Feature and hardware compatibility

Hardware SSL VPN com

atibilit

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 No

F5000-S/F5000-C No

VPN firewall modules No

20-Gbps VPN firewall modules No

Overview

SSL VPN is a VPN technology based on SSL. It works between the transport layer and the application

layer. Using the certificate-based identity authentication, data encryption, and integrity verification

mechanisms that SSL provides, SSL VPN can establish secure connections for communications at the

application layer.

SSL VPN has been widely used for secure, remote Web-based access. For example, it can allow remote

users to access the corporate network securely. Fig u re 218 sh

ows a typi

cal SSL VPN network. On the SSL

VPN gateway, you can create resources to represent the resources on the servers in the internal network.

To access an internal server, a remote user first needs to establish an HTTPS connection with the SSL VPN

gateway and select the resources to be accessed. Then, the SSL VPN gateway forwards the resource

access request to the internal server. In the SSL VPN deployed network, the SSL VPN gateway will

establish an SSL connection to a remote user and then authenticate the user before allowing the user to

access an internal server, protecting the internal servers.

Figure 218 Network diagram for SSL VPN configuration

Internet

SSL VPN gateway

Remote user

Internal servers

Administrator