The NSP SSL VPN offers 3 Versatile Ways to Access Your Network
The NSP differs from other SSL VPN solutions by providing the choice
of three application-access technologies in a single gateway device.
With three SSL access technologies in a single appliance, the NSP provides
a full-spectrum remote-access solution that meets every application
access type:
1. Thin access for Windows Terminal Servers,
UNIX/Linux & Mainframes
2. Web access for web applications and portals
3. SSL Tunnel connectivity for network and client/server application
access
Access Method 1
Thin/Application Access
to Server-based Applications (Layer 7)
Applications residing on Windows, UNIX/Linux, mainframes and AS/400
machines form a vital core of the business applications used today.
The challenge facing enterprises is to leverage these crucial applications
in way that allows remote users to safely and simply access these resources
over the Internet.
The NSP solves this dilemma, providing remote access to remote applications
by incorporating Web-enabling technology directly within the platform.
With no application client software required, and with just a Web browser,
users can interact with actual applications that reside in the data
center, in the same format as in the office – but within a browser
window securely over the Web. This integrated approach, unique to AEP
among SSL VPN vendors, means simply secure access to Windows Terminal
Servers, UNIX, Linux, and 3270 mainframe applications quickly and easily,
and without third-party server-based software.
- Drive mapping for seamless interactivity with local and remote data
- Session persistence for workflow continuity
- Supports both local or remote printing
- 24-bit color for Windows and X Window applications
- Requires only a Web browser on local PC
Access Method 2
Access Remote Intranet and Web-based
Applications
With the NSP, organizations can overcome the security and access challenges
associated with deploying public-facing Web servers for remote-user
access., while intranet Web servers and network topology remain safely
protected within the organization's private intranet.
With this approach, a single point of entry over the Internet –
the NSP itself – lets remote users access back-end, intranet Web
servers securely through a Web browser.
Authorized remote users thus gain instant, clientless access to a wide
range of internal Web applications from any location, allowing internal
DNS addresses that do not resolve publicly to be accessed securely over
the Internet. Company Web servers remain safe behind the firewall, in
a highly secure portion of the private network, without the cost and
maintenance of locking each server down for public access, while administrators
gain granular access control to directories, servers, and paths on a
user or group basis. At no time is the enduser directly connected to
a “private side” network resource.
-
Access any internal Web application, corporate intranet, or
portal securely through HTTP reverse proxy technology
- Gateway portal protection hides network topology from unauthorized
viewing
- Session persistence for workflow continuity
- Granular access controls to directories, servers, and paths
- Powerful Java Applet Re-write Module for greater security
- Strong Web application security mitigates network threats
Access Method 3
Remote Access for Client/Server Applications
Users who work offline
on their local PC-based TCP and UDP applications - such as Outlook,
CRM, sales tools, and other client/server programs
- can update their files and exchange data with corporate servers through
the NSP’s network layer access mode.
For maximum control over a user’s access capabilities, the NSP
distinguishes itself by incorporating a dynamic session-based firewall
for additional protection between users and central servers. The dynamic
firewall opens and closes specific application ports between the NSP
and application servers, as defined by policy tools for particular users.
In this way, the NSP effectively “locks-down” application
access on a per-user basis, providing powerful control over a user’s
ability to launch local client/server applications.
• SSL-based Layer 3 tunnel connectivity for network and client/server
application access
• On-demand, automatic virtual adapter installation
• No end user configuration or installation required
• Granular policy enforcement with stateful packet inspection
firewall
|
