NETGEAR SSL312 manual Chapter Port Forwarding, Configuring Applications for Port Forwarding

Chapter 10

Port Forwarding

This chapter describes the configuration for Port Forwarding, a web-based SSL VPN client that installs transparently and then creates a virtual, encrypted tunnel to the remote network. Using Port Forwarding, mobile users can access mission-critical applications such as email or mapped network drives as if they were located on the corporate network.

This chapter covers:

•Configuring Applications for Port Forwarding

•Configuring Host Name Resolution

Port Forwarding, like VPN Tunnel, is a web-based client that installs transparently and then creates a virtual, encrypted tunnel to the remote network. However, Port Forwarding differs from VPN Tunnel in several ways. For example, Port Forwarding:

•Only supports TCP data, not UDP or other IP protocols.

•Detects and reroutes individual data streams over the Port Forwarding connection rather than opening up a full tunnel to the corporate network. So Port Forwarding is a lighter client than VPN Tunnel and installs more quickly.

•Offers more fine grained management than VPN Tunnel. Administrators define individual applications and resources that will be available to remote users. With VPN Tunnel, administrators must create access policies to block undesirable traffic at the SSL VPN Concentrator rather than at the client level.

Configuring Applications for Port Forwarding

Port Forwarding client detects and reroutes data sent by the remote users to the SSL VPN Concentrator. The Port Forwarding screen allows you to specify the internal addresses and applications that Port Forwarding clients may access. To configure Port Forwarding, you must define the internal host machines and TCP applications available to remote users.

To configure applications for Port Forwarding:

1.From the Access Administration menu in the left navigation pane, select the Port Forwarding option. The Port Forwarding configuration screen will display.

10-1

v1.0, August 2006