Prev | Current Page 362 | Next

Jesse Varsalone and Jan Kanclirz Jr.

"Microsoft Forefront Security Administration Guide"


The fi rst option is Split-Tunneling, which is generally the preferred option. This
option allows clients to bypass the Network Connector when they access the
Internet. This increases their speed, as they have a direct connection to the Internet
that is not slowed down by encryption. This also removes the traffi c from your
corporate network. The second option is Non-Split Tunneling. In this option, all
Internet access is routed through the corporate network. The advantage of this method
is you can monitor and secure this access using your corporate fi rewall. The
disadvantage is it will be a slower access method for your user and increase the traffi c
on your corporate network. The third option is No Internet Access, which removes
a client access to any part of the Internet. This option increases security because it
prevents a client from being connected to the Internet and your corporate network
at the same time. The second and third options also have an additional selection for
Disable Access to Local Network. This can increases security even more by preventing
access between the local network of the client and your corporate network.
This last option will also disable access to local network printers when a user is
connected to the corporate network. This may be desired or undesired depending
upon your security and usability requirements.
Q: Is the IAG 2007 Network Connector SSL VPN compatibly limited to Windows
and IE?
A: The Network Connector is compatible with a number of operating systems and
browsers.


Pages:
350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374