NSP SSL VPN Access Features

The NSP SSL VPN offers 3 Versatile Ways to Access Your Network

The NSP differs from other SSL VPN solutions by providing the choice of three application-access technologies in a single gateway device. With three SSL access technologies in a single appliance, the NSP provides a full-spectrum remote-access solution that meets every application access type:

1. Thin access for Windows Terminal Servers, UNIX/Linux & Mainframes
2. Web access for web applications and portals
3. SSL Tunnel connectivity for network and client/server application access

Access Method 1 - Thin/Application Access to Server-based Applications (Layer 7)

Applications residing on Windows, UNIX/Linux, mainframes and AS/400 machines form a vital core of the business applications used today. The challenge facing enterprises is to leverage these crucial applications in way that allows remote users to safely and simply access these resources over the Internet.

The NSP solves this dilemma, providing remote access to remote applications by incorporating Web-enabling technology directly within the platform. With no application client software required, and with just a Web browser, users can interact with actual applications that reside in the data center, in the same format as in the office – but within a browser window securely over the Web. This integrated approach, unique to AEP among SSL VPN vendors, means simply secure access to Windows Terminal Servers, UNIX, Linux, and 3270 mainframe applications quickly and easily, and without third-party server-based software.

• Drive mapping for seamless interactivity with local and remote data
• Session persistence for workflow continuity
• Supports both local or remote printing
• 24-bit color for Windows and X Window applications
• Requires only a Web browser on local PC

Access Method 2 - Access Remote Intranet and Web-based Applications

With the NSP, organizations can overcome the security and access challenges associated with deploying public-facing Web servers for remote-user access., while intranet Web servers and network topology remain safely protected within the organization's private intranet.

With this approach, a single point of entry over the Internet – the NSP itself – lets remote users access back-end, intranet Web servers securely through a Web browser.

Authorized remote users thus gain instant, clientless access to a wide range of internal Web applications from any location, allowing internal DNS addresses that do not resolve publicly to be accessed securely over the Internet. Company Web servers remain safe behind the firewall, in a highly secure portion of the private network, without the cost and maintenance of locking each server down for public access, while administrators gain granular access control to directories, servers, and paths on a user or group basis. At no time is the enduser directly connected to a “private side” network resource.

• Access any internal Web application, corporate intranet, or portal securely through HTTP reverse proxy technology
• Gateway portal protection hides network topology from unauthorized viewing
• Session persistence for workflow continuity
• Granular access controls to directories, servers, and paths
• Powerful Java Applet Re-write Module for greater security
• Strong Web application security mitigates network threats

Access Method 3 - Remote Access for Client/Server Applications

Users who work offline on their local PC-based TCP and UDP applications - such as Outlook, CRM, sales tools, and other client/server programs - can update their files and exchange data with corporate servers through the NSP’s network layer access mode.

For maximum control over a user’s access capabilities, the NSP distinguishes itself by incorporating a dynamic session-based firewall for additional protection between users and central servers. The dynamic firewall opens and closes specific application ports between the NSP and application servers, as defined by policy tools for particular users. In this way, the NSP effectively “locks-down” application access on a per-user basis, providing powerful control over a user’s ability to launch local client/server applications.

• SSL-based Layer 3 tunnel connectivity for network and client/server application access
• On-demand, automatic virtual adapter installation
• No end user configuration or installation required
• Granular policy enforcement with stateful packet inspection firewall