NETGEAR SSL312 manual Installing the SSL VPN Concentrator, Managing Certificates

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

Installing the SSL VPN Concentrator

You are now ready to physically install your SSL VPN Concentrator using the following steps:

1.Turn off the power to the SSL VPN Concentrator and connect it to your network in your chosen topology.

•For a single arm topology, connect Ethernet Port 1 to your corporate network and leave Ethernet Port 2 disconnected.

•For a routing topology, connect Ethernet Port 1 to your public network and Ethernet Port 2 to your corporate network.

2.Turn on the power to the SSL VPN Concentrator.

3.From a PC on your corporate network, open a suitable browser and access the SSL VPN Concentrator web management interface by typing https://<IP_address>, where IP_address is the address that you assigned to the SSL312 Ethernet Port that is connected to the corporate network.

Note: If the default portal (SSL-VPN) is changed to another user-defined portal, the administration portal, SSL-VPN, can be reached by typing

https://<IP_address>/portal/SSL-VPN.

4.Log in as admin using the new password that you assigned. You can now continue the configuration of your SSL VPN Concentrator.

Managing Certificates

Establishing an SSL connection requires that the SSL server, such as your SSL VPN Concentrator, provide a digital SSL certificate to the user’s browser. A certificate is a file that contains:

•A public encryption key to be used for encrypting your messages to the server.

•Information identifying the operator of the server.

•A digital signature confirming the identity of the operator of the server.

You can obtain a certificate from a well-known commercial Certificate Authority (CA) such as Verisign or Thawte, or you can generate and sign your own certificate. Because a commercial CA takes steps to verify the identity of an applicant, a certificate from a commercial CA provides a

2-8 Installing the SSL312

v2.0, May 2007