Choice of the Trustworthy SSL VPN Products

SSL VPN is the main technology for remote access, and through SSL VPN, enterprises can achieve applications to be transmitted to remote employees for working.
Now SSL has been widely used in various browsers, it also applies to C/S based applications like Outlook. Because SSL protocol is built in browsers such as IE, SSL VPN which uses SSL protocol in authentication and data encryption needn¡¯t be installed in client end. Compared to conventional IPSEC VPN, SSL VPN has a lot of feature, e.g. easy to deploy, no client, low maintenance cost, strong adaptability to network, the difference between the two types of VPN resembles the difference between C/S architecture and B/S architecture.

In general, SSL VPN is used for two purposes:
¡ô Use SSL protocol for authentication and encryption
SSL is an industrial security standard protocol generally accepted in the industry, so the VPN definitely using SSL protocol will achieve adequate security.

¡ô Directly use browser to finish operations, no need to install independent client.
SSL VPN eliminates the need of users to install any VPN client end, as long as there is browser compliant to SSL protocol in PC, user can access internal application system using SSL VPN network, it is virtually easy and pragmatical.

As technology advances and customer demand grows, compared to the SSL VPN born years ago which supports WEB visits only, the leading SSL VPN in current market has changed a lot, it mainly reflects in the following respects:

¡ô Supports wider range of applications
The earliest SSL VPN only supports WEB applications, however, today¡¯s SSL VPNs nearly all support use of plugins, reorient data of TCP application to SSL tunnels, thus support most TCP-based applications. Some advanced SSL VPN products even support applications of UDP and ICMP protocol. SSL VPN can automatically install different plug-ins by judging the requests from different platforms.

¡ô Wider support to network
Earlier SSL VPN doesn¡¯t support two-way access between servers and client end and UDP application; nor support allocation of virtual IP to mobile users, thus realize secure audit in IP identification. However, today¡¯s distinct SSL VPNs can allocate virtual IP for end users through option plug-ins at client end, and create Level 3 tunnel through SSL tunnel, so as to realize nearly as strong terminal network functions as that of IPSEC VPN client end.

¡ô Stricter requirements for terminal security.
SSL VPN originally is designed to realize access through browser if any, but as the threats coming from spy and phishing software is increasingly serious, access to intranet on unsafe terminals may result in unexpected disclosure of important information from terminals. To solve this problem, SSL VPN adds security inspection function at client end: which inspects the version of terminal operating system, deployment of terminal safety software through plug-ins, so as to determine its access authority.

Advantages of SINFOR SSL VPN
SINFOR M5X00-S SSL VPN series gateways provide unique and specific solution to various problems that user may encounter in using SSL VPN to access intranet applications, the following paragraphs will explain the advantages of SINFOR M5X00-S SSL VPN on authentication, safety, speed, humanity:

Advanced technology
Advanced VPN products
¡ô Being conferred 20 invention patents and numerous awards;
¡ô SSL VPN supports IP applications
¡ô Product supports intensive management and maintenance, intelligent upgrade and real-time monitoring;

Faster speed
Intelligent multi-line technology
¡ô Web-based intelligent line selection, provide remote users with fastest cross-operator access
¡ô Multiplex technology improves VPN access speed
¡ô VPN line backup ensures high-reliability VPN connection

Speed advantages in accessing application system
¡ô Optional speed acceleration enhances SSL encryption performance;
¡ô Optimum LZO flow compression technology speeds up application transfer (especially in wireless operation);
¡ô WEB PUSH technology can analyze pages first, then read several elements a time in parallel way in LAN environment and push to SSL client end, this significantly lifts the speed of visit to pages.

Higher security

Supports overall authentication
¡ô Supports password authentication for local users;
¡ô Supports digital certificate authentication. Combined with existing CA systems, it supports PKI system;
¡ô Provides local CA center function, reduces cost;
¡ô Seamlessly integrated with the third party authentication system such as LDAP, RADIUS

Robust ID authentication mechanism
¡ô Supports password authentication for local users;
¡ô Supports combination ID authentication and USB KEY , this not only increases easiness of use, but enhances security;
¡ô Supports authentication of one-time password by short message, combines user authentication and personal identity;
¡ô Dynamic token authentication system (optional), reduces lower cost of ownership;
¡ô Provides hardware binding function at client end, free user from trouble of password disclosure.

More security mechanism
¡ô Prevent violent decryption, protect security of password;
¡ô Provide soft keyboard and graphic code verification, protect against attack of Malicious;
¡ô Security inspection at client, define security level of client end
¡ô No trace left, clear all log-in information of users, avoid information disclosure
¡ô Powerful logging function, robust visit access.

Easier to use

Differentiated authority management
¡ô Role-based management helps effectively control authority of VPN access users;
¡ô User grouping management, in conjunction with role management, allow manager to allocate authority more easily;
¡ô Provide fine-grained access control and management over SSL VPN access user by URL, service, IP and various resources.

Enhanced humanity design
¡ô Provides overall support to single-point access of various application systems, eliminate need to reenter account No. or password, simplifies work flow;
¡ô Supports various client end environment, including mobile device such as PDA, intelligent cell phone, 3G cell phone;
¡ô Customizable log-in interface, including pre-login and post-login interface