WEBVTT 00:07.660 --> 00:17.800 When we configure SSL VPN we can deploy it in two modes a web mode and a tunnel mode at work mode requires 00:17.830 --> 00:19.680 only a web browser. 00:19.750 --> 00:22.690 It is much easier to setup. 00:22.690 --> 00:25.360 It is much easier to use. 00:25.570 --> 00:31.280 Yet it supports only a limited number of protocols. 00:31.630 --> 00:35.140 A tunnel supports most protocols. 00:35.140 --> 00:44.200 It requires the installation of a VPN client that creates a virtual network adapter in your computer 00:44.800 --> 00:47.450 or in your smartphone. 00:47.620 --> 00:53.080 Now the traffic tunnels using that virtual adapter. 00:53.110 --> 00:59.620 We will configure both modes Talon mode and web mode in one setup. 00:59.860 --> 01:00.970 Let's start 01:03.930 --> 01:04.140 now. 01:04.140 --> 01:13.570 The first thing to do is to set up a user and the user groups that are authorized to use our VPN tunnel. 01:13.650 --> 01:15.990 So let's create a new user 01:20.840 --> 01:34.650 let's name it for any we give it a password let's keep email address and let's submit. 01:34.660 --> 01:36.680 Now let's create a user group. 01:37.950 --> 01:49.680 Let's name our user group SSL user group. 01:50.200 --> 01:50.710 All right. 01:50.810 --> 01:56.710 Let's add our new member and there we have it. 01:56.710 --> 02:07.760 That's our SSL User Group which will be allowed to access our tunnel now one of the first things that 02:07.940 --> 02:16.400 I do when ever I set up an SSL VPN is check out the SSL VPN configurations 02:27.000 --> 02:38.050 and let's do the show for full and we can see a bunch of settings one that I'm interested in is the 02:38.070 --> 02:40.710 algorithm set algorithm. 02:41.140 --> 02:56.200 So if we choose the high cypher suit then we actually use symmetric encryption that is higher than one 02:56.200 --> 03:06.310 hundred and twenty eight bit if we use the medium cipher suit then we use a symmetric encryption that 03:06.310 --> 03:12.760 uses algorithms that are one hundred and twenty eight bit and lower. 03:13.300 --> 03:25.420 And if we use the low cipher set then we can actually or the 48 and the client that negotiates between 03:25.420 --> 03:32.380 them on the cipher suit can actually choose whichever side for a suit. 03:32.380 --> 03:40.930 And that could be in many cases lower than 128 bit which is not recommended. 03:40.930 --> 03:47.260 So let's keep our cipher suit or our encryption algorithm. 03:47.290 --> 03:57.740 Hi. 03:57.810 --> 04:06.130 All right now let's move over to a VPN SSL VPN portals. 04:06.270 --> 04:15.720 Now as you can see we can choose the full access for them which allows us to create an SSL VPN in a 04:15.720 --> 04:25.290 tunnel mode and in a web mode we can also choose a VPN portal that allows us only to create a tunnel 04:25.290 --> 04:40.320 mode VPN or only a web mode VPN we will use the full access VPN portal that allows users to get into 04:41.010 --> 04:52.510 the tunnel itself using their browser or using the 40 client the dedicated VPN client. 04:52.560 --> 04:54.470 All right so internal mode. 04:54.490 --> 05:02.890 We have it enables Split Tunneling enables Split Tunneling is when ever we want to split our traffic. 05:02.890 --> 05:12.760 One way is to add towards a specific address in our network and that traffic will use our VPN tunnel 05:13.540 --> 05:23.200 and the other traffic which is usually destined to the unsecure Internet will not use any VIP and we 05:23.200 --> 05:25.650 will not use enables Split Tunneling. 05:25.690 --> 05:34.690 We will only use animals so any traffic that goes up through our tunnel will get encrypted and we'll 05:34.690 --> 05:37.040 use the VPN tunnel. 05:37.070 --> 05:48.820 Now whenever we use a tunnel mode we are assigned a specific IP addresses that we can configure and 05:48.820 --> 05:58.990 that is the range the IP address range that our virtual adapter assigns to whomever gets out through 05:58.990 --> 06:15.530 the SSL VPN tunnel we can configure another Andrus object that will be on another range and make sure 06:15.530 --> 06:25.550 that anyone that goes to our SSL VPN will be assigned an IP address from that range but we will not 06:25.550 --> 06:26.030 do it. 06:26.060 --> 06:33.730 We will use the same SSL VPN tunnel address that is already assigned next. 06:33.730 --> 06:41.250 We have the client options which allows us to save our passwords or to connect automatically. 06:41.660 --> 06:49.340 And now we head over to the Web mode and we will continue that on our next video.