1 00:00:07,660 --> 00:00:17,800 When we configure SSL VPN we can deploy it in two modes a web mode and a tunnel mode at work mode requires 2 00:00:17,830 --> 00:00:19,680 only a web browser. 3 00:00:19,750 --> 00:00:22,690 It is much easier to setup. 4 00:00:22,690 --> 00:00:25,360 It is much easier to use. 5 00:00:25,570 --> 00:00:31,280 Yet it supports only a limited number of protocols. 6 00:00:31,630 --> 00:00:35,140 A tunnel supports most protocols. 7 00:00:35,140 --> 00:00:44,200 It requires the installation of a VPN client that creates a virtual network adapter in your computer 8 00:00:44,800 --> 00:00:47,450 or in your smartphone. 9 00:00:47,620 --> 00:00:53,080 Now the traffic tunnels using that virtual adapter. 10 00:00:53,110 --> 00:00:59,620 We will configure both modes Talon mode and web mode in one setup. 11 00:00:59,860 --> 00:01:00,970 Let's start 12 00:01:03,930 --> 00:01:04,140 now. 13 00:01:04,140 --> 00:01:13,570 The first thing to do is to set up a user and the user groups that are authorized to use our VPN tunnel. 14 00:01:13,650 --> 00:01:15,990 So let's create a new user 15 00:01:20,840 --> 00:01:34,650 let's name it for any we give it a password let's keep email address and let's submit. 16 00:01:34,660 --> 00:01:36,680 Now let's create a user group. 17 00:01:37,950 --> 00:01:49,680 Let's name our user group SSL user group. 18 00:01:50,200 --> 00:01:50,710 All right. 19 00:01:50,810 --> 00:01:56,710 Let's add our new member and there we have it. 20 00:01:56,710 --> 00:02:07,760 That's our SSL User Group which will be allowed to access our tunnel now one of the first things that 21 00:02:07,940 --> 00:02:16,400 I do when ever I set up an SSL VPN is check out the SSL VPN configurations 22 00:02:27,000 --> 00:02:38,050 and let's do the show for full and we can see a bunch of settings one that I'm interested in is the 23 00:02:38,070 --> 00:02:40,710 algorithm set algorithm. 24 00:02:41,140 --> 00:02:56,200 So if we choose the high cypher suit then we actually use symmetric encryption that is higher than one 25 00:02:56,200 --> 00:03:06,310 hundred and twenty eight bit if we use the medium cipher suit then we use a symmetric encryption that 26 00:03:06,310 --> 00:03:12,760 uses algorithms that are one hundred and twenty eight bit and lower. 27 00:03:13,300 --> 00:03:25,420 And if we use the low cipher set then we can actually or the 48 and the client that negotiates between 28 00:03:25,420 --> 00:03:32,380 them on the cipher suit can actually choose whichever side for a suit. 29 00:03:32,380 --> 00:03:40,930 And that could be in many cases lower than 128 bit which is not recommended. 30 00:03:40,930 --> 00:03:47,260 So let's keep our cipher suit or our encryption algorithm. 31 00:03:47,290 --> 00:03:57,740 Hi. 32 00:03:57,810 --> 00:04:06,130 All right now let's move over to a VPN SSL VPN portals. 33 00:04:06,270 --> 00:04:15,720 Now as you can see we can choose the full access for them which allows us to create an SSL VPN in a 34 00:04:15,720 --> 00:04:25,290 tunnel mode and in a web mode we can also choose a VPN portal that allows us only to create a tunnel 35 00:04:25,290 --> 00:04:40,320 mode VPN or only a web mode VPN we will use the full access VPN portal that allows users to get into 36 00:04:41,010 --> 00:04:52,510 the tunnel itself using their browser or using the 40 client the dedicated VPN client. 37 00:04:52,560 --> 00:04:54,470 All right so internal mode. 38 00:04:54,490 --> 00:05:02,890 We have it enables Split Tunneling enables Split Tunneling is when ever we want to split our traffic. 39 00:05:02,890 --> 00:05:12,760 One way is to add towards a specific address in our network and that traffic will use our VPN tunnel 40 00:05:13,540 --> 00:05:23,200 and the other traffic which is usually destined to the unsecure Internet will not use any VIP and we 41 00:05:23,200 --> 00:05:25,650 will not use enables Split Tunneling. 42 00:05:25,690 --> 00:05:34,690 We will only use animals so any traffic that goes up through our tunnel will get encrypted and we'll 43 00:05:34,690 --> 00:05:37,040 use the VPN tunnel. 44 00:05:37,070 --> 00:05:48,820 Now whenever we use a tunnel mode we are assigned a specific IP addresses that we can configure and 45 00:05:48,820 --> 00:05:58,990 that is the range the IP address range that our virtual adapter assigns to whomever gets out through 46 00:05:58,990 --> 00:06:15,530 the SSL VPN tunnel we can configure another Andrus object that will be on another range and make sure 47 00:06:15,530 --> 00:06:25,550 that anyone that goes to our SSL VPN will be assigned an IP address from that range but we will not 48 00:06:25,550 --> 00:06:26,030 do it. 49 00:06:26,060 --> 00:06:33,730 We will use the same SSL VPN tunnel address that is already assigned next. 50 00:06:33,730 --> 00:06:41,250 We have the client options which allows us to save our passwords or to connect automatically. 51 00:06:41,660 --> 00:06:49,340 And now we head over to the Web mode and we will continue that on our next video.