Network Management Services
WATCHGUARD FIREBOX SSL VPN Core
. . . . WatchGuard Firebox SSL VPN Core
The Firebox SSL VPN Core is designed 
to provide secure access for up to 205 concurrent users without the requirement for complex configuration or development work.
The Firebox SSL Core allows mobile users to gain access to network resources over a simple to install VPN client that does not involve the configuration and maintenance common with IPSec VPN roll outs.
The SSL VPN technology is also more dependable when connecting out through a firewall as there are no IPSec Traversal issues to contend with.
In Secure Access client mode users have the ability to tunnel most protocols over the VPN, meaning that synchronising email, accessing web applications, Terminal Services, Citrix sessions and even mapping Windows drives is not only possible, but simple.
In Kiosk mode, users can access" extensive experience in the installation, configuration and support of WatchGuard VPNs " web based applications, Terminal Services, Citrix sessions and other supported applications from a web enabled device without installing anything on their device at all.
Powerful Security Firebox® SSL Core™ VPN Gateway provides robust security from the access device to the network, from managed and unmanaged devices.
- Continuously verifies endpoint security status when allowing network access, by checking device attributes including IP address, firewall settings, operating system, patch level, and status of antivirus software
- Encryption: Session length of 128 bit and 168 bit, RC4, DES, and 3DES ciphers, supporting MD5, SHA1, SSL v3, TLS v1
- Hides IP addresses of remote network to block worm traversal
- Session timeout protects corporate information from unauthorized users
- Kiosk mode sessions transmit images, not data, so no cache cleaning is required
- Additional security capabilities, including support for two-factor authentication and authorized digital certificates, alleviate security concerns for extending network access
- Can be deployed with a Firebox® X Unified Threat Management security appliance to add protection from network, application, and content-based attacks
. . . . Strong Administrative Control
IT administrators can quickly deploy and manage user and group access from a single centralized location with integrated logging and reporting.
- Assign access policies for users and groups with robust authentication support including Radius, Windows® Domain, and RSA SecurID®
- Control which devices gain network access through built-in endpoint security checks
- Use advanced networking functions including IP pooling, optional split tunneling, load balance support and dynamic or static routing to provide the flexibility needed for evolving network topologies
. . . . Unmatched Ease of Use
Get robust, secure access out of the box without additional costs, reconfiguration, development work, or administrative headaches to get up and running fast and stay that way.
- No additional components, adapters, or special application connectors are required to get universal network and application access
- No client installation, maintenance, or support is needed - the client is automatically updated whenever the user connects to the network.
For more information on the Firebox SSL click here
. . . . WatchGuard SSL VPN Deployment
Click on the thumbnail for full-size diagram.
The SSL VPN Gateway provides flexible installation options, either in a DMZ or straddling a firewall. Control Key has extensive experience in the installation, configuration and support of WatchGuard VPNs - if you have any queries please call us.
. . . . Why SSL over IPSec?
Strengths and weaknesses of IPSec
If you require standard site-to-site VPNs, such as between central and branch offices, IPSec is an excellent choice.
It's a proven technology with powerful security capabilities. IPSec, however, is not optimized for mobile usage. Firewall traversal is unreliable and the user is tied to a specific machine.
In addition, an IT administrator has to deploy and maintain the IPSec client software on the users' devices.
Who should use SSL VPN?
SSL VPN is ideally suited for organizations with many mobile users connecting from varied locations.
It provides employees with enormous flexibility to access the network from any location and from Web-enabled devices such as laptops, PDAs, and smart phones. For the IT administrator, there's no client software to maintain on the users' devices.
. . . . The smart choice:
Firebox SSL Core VPN Gateway
With many SSL VPN implementations, access is limited to a small number of applications. Firebox SSL Core VPN Gateway overcomes this limitation and offers an in-office user experience from any location.
Users can access any network resource just as they would when connected to a LAN. This, combined with its robust security features, strong administrative control, and unmatched ease of use for both the IT administrator and the user, makes it the smart choice over other SSL VPN products.
