And there we have it Web mode.
Now in a VPN based on when both users are actually connecting the 48 which acts as a server as a secure
server they do it using the SSL Telus protocol.
Only users with credentials can enter the VPN itself and they can do it over their web browser which
is an advantage.
Though it supports us you will see only a limited number of protocols.
We will later on look at the SSL VPN settings and see that the default port that is being used is port
four for 3 which is also used for each G.P.S..
But we will change it since the admin management protocol is also using the port for four three.
Now whenever we enter our 40 gate SSL VPN portal we don't get the IP address from the range that was
allocated using tunnel mode.
But our IP address are the client's IP address will be the same as 48 internal IP address.
Now we can change the message of the portal message or for VPN portal we can call it let's name it work
portal we can use different teams which allows us to customize the look and feel of our portal.
Let's use the red team.
We can also use several different options as log in history and session information.
And the most important part of our portal is the predefined bookmarks.
Those are the bookmarks that will connect us to different application on our SSL portal.
So if we to use the Create new bookmark and let's name our bookmarks for the date and let's make the
bookmark a bookmark that will connect anyone who uses that SSL VPN portal to the graphic user interface
or our get to the admin page or 448.
So for that purpose we use H.S. VPN H2 G.P.S. but as you can see when we click on it we can use different
protocols to access FTB sites or ATP servers.
We can also use our DP As Assange turned the TV and see other protocols the URL for forty 48 is the
10 the zero the three that's sixteen and let's name it 14 that 14 gate admin page we will not use single
cycle but only users that have credentials.
And those are the users that we have already configured in the users and device will be able to enter
our SSL VPN portal.
We can also customize different portals for different users or user groups.
All right.
And now we can also add whenever we log in to our portal the four declined download.
If anyone wishes to connect using tunnel mode and have all the other options have support for more protocols.
All right.
So our portal is configured and now let's head over to SSL VPN settings
so we will listen on interface that is interface or when interface.
We will not listen on ports for fortresses.
It conflicts with the administrative age.
It could be port HDP sports so we'll use Port 10 4 4 3.
And if you use.
If you don't have a public IP associated with your 48 and you use another router before it then you
will have to use port forwarding to make sure that any connection that is targeted at Port 10 for 4
3 will be redirected to the tender 0 the 3 got 16 using that port that assigns it to the SSL VPN portal
and so it says that the Web Remote Access will be listening at HDD P.S. Celeste slash 10 to zero the
treat of 16 and that is the
semicolon 10 4 4 3.
Port and that is the euro of our SSL VPN portal.
And let's move on to other options.
We can redirect HDTV to SSL VPN.
We will not do it.
We can limit access to specific hosts but we don't want to limit access to specific hosts.
We want any host to be able to enter our SSL VPN as long as it has the credentials.
We can change the either logo that we can currently as you can see we are using the default built in
format factory certificate.
My advice to you use your own certificate.
It doesn't cost much and there are dozens of certificate authorities that will do it for you now.
We will stay with the assigned address as we have configured before that is the address range that are
tunnel mode.
Users will get as they log to the SSL VPN tunnel mode portal and let's add our SSL group that we have
configured before and let's assign them to the full access portal or right now.
The next thing to do is to create a policy that will allow users of our SSL VPN to enter our internal
network and our 48 admin page.
We will do it on the next video.