When we configure SSL VPN we can deploy it in two modes a web mode and a tunnel mode at work mode requires
only a web browser.
It is much easier to setup.
It is much easier to use.
Yet it supports only a limited number of protocols.
A tunnel supports most protocols.
It requires the installation of a VPN client that creates a virtual network adapter in your computer
or in your smartphone.
Now the traffic tunnels using that virtual adapter.
We will configure both modes Talon mode and web mode in one setup.
Let's start
now.
The first thing to do is to set up a user and the user groups that are authorized to use our VPN tunnel.
So let's create a new user
let's name it for any we give it a password let's keep email address and let's submit.
Now let's create a user group.
Let's name our user group SSL user group.
All right.
Let's add our new member and there we have it.
That's our SSL User Group which will be allowed to access our tunnel now one of the first things that
I do when ever I set up an SSL VPN is check out the SSL VPN configurations
and let's do the show for full and we can see a bunch of settings one that I'm interested in is the
algorithm set algorithm.
So if we choose the high cypher suit then we actually use symmetric encryption that is higher than one
hundred and twenty eight bit if we use the medium cipher suit then we use a symmetric encryption that
uses algorithms that are one hundred and twenty eight bit and lower.
And if we use the low cipher set then we can actually or the 48 and the client that negotiates between
them on the cipher suit can actually choose whichever side for a suit.
And that could be in many cases lower than 128 bit which is not recommended.
So let's keep our cipher suit or our encryption algorithm.
Hi.
All right now let's move over to a VPN SSL VPN portals.
Now as you can see we can choose the full access for them which allows us to create an SSL VPN in a
tunnel mode and in a web mode we can also choose a VPN portal that allows us only to create a tunnel
mode VPN or only a web mode VPN we will use the full access VPN portal that allows users to get into
the tunnel itself using their browser or using the 40 client the dedicated VPN client.
All right so internal mode.
We have it enables Split Tunneling enables Split Tunneling is when ever we want to split our traffic.
One way is to add towards a specific address in our network and that traffic will use our VPN tunnel
and the other traffic which is usually destined to the unsecure Internet will not use any VIP and we
will not use enables Split Tunneling.
We will only use animals so any traffic that goes up through our tunnel will get encrypted and we'll
use the VPN tunnel.
Now whenever we use a tunnel mode we are assigned a specific IP addresses that we can configure and
that is the range the IP address range that our virtual adapter assigns to whomever gets out through
the SSL VPN tunnel we can configure another Andrus object that will be on another range and make sure
that anyone that goes to our SSL VPN will be assigned an IP address from that range but we will not
do it.
We will use the same SSL VPN tunnel address that is already assigned next.
We have the client options which allows us to save our passwords or to connect automatically.
And now we head over to the Web mode and we will continue that on our next video.