Watchguard Firebox SSL Core Manual de usuario descargar pdf (Pagina 6)

MIDWESTERN INTERMEDIATE UNIT IV – A CASE STUDY IN INTERNET SECURITY

WatchGuard Technologies, Inc. 505 Fifth Avenue South Suite 500, Seattle, WA 98104 www.watchguard.com

service that is able to translate the application server’s protocol and data to a Web-friendly front-end.

If this Webification takes ten days at a Professional Services rate of $2000 per day, it would amount to a

total of $20,000 over and above the cost of the product, plus travel and expense costs.

5. User interface changes - Employees grow accustomed to existing user interfaces. Developing unnatural

browser interfaces for native applications will most likely change the look and feel of the application. This

can require organizations to spend significant amounts of time reeducating unhappy users.

6. Inhibited protocol functionality (such as SMB) - Just as an unnatural user interface can have an affect on the

efficiency of an employee using a Webified application, the same can apply for some of the basic protocol

conversions that may come with an SSL VPN.

One example is the SMB (Server Message Block) Protocol. If a user is at his or her desk, mapped network

drives are available for accessing or saving files right from even simple applications like Microsoft Word,

Microsoft PowerPoint, Microsoft Excel, etc.

Forcing a user that is remote and using an SSL VPN to have to use a Webified file-sharing protocol instead

decreases the efficiency of that user, especially if he or she is not a power user.

7. Real-time traffic (voice or video) is unsupported - SSL VPNs cannot support real-time traffic such as voice or

video, which means users cannot take advantage of soft phones on their PCs or on-line or real-time video

training sessions.

8. Kiosk modes can leave temporary files and cookies - The way an SSL VPN deals with kiosks is to run a clean-

up script at the end of the session to delete any temporary files that may have been opened in e-mail and to

delete any cookies.

The problem with this approach is that it fails if the browser happens to crash during the session. If the

browser crashes during the session, the clean-up script will not have a chance to work and all the propri-

etary information that was opened during the session is stored on the kiosk.

9. Deployment time can be inaccurately represented - SSL VPN vendors tout a significant reduction in the

amount of time it takes to deploy an SSL VPN solution when compared to an IPSec solution. This, however,

assumes that there is no customization or professional services work for the SSL VPN vendor to do. Even

when using custom connectors, there are issues with split DNS entries that increase the deployment time

with both the application and the client.

Webification of an application increases the deployment time even more. In other words, this large reduction

in deployment time will be the case when the SSL VPN can be installed with no application or client

modification or professional services.

1 2 3 4 5 6 7 8 9 10 11 12

Sin comentarios

Watchguard Firebox SSL Core Manual de usuario Pagina 6