1 00:00:07,750 --> 00:00:09,850 And there we have it Web mode. 2 00:00:09,880 --> 00:00:22,750 Now in a VPN based on when both users are actually connecting the 48 which acts as a server as a secure 3 00:00:22,750 --> 00:00:28,350 server they do it using the SSL Telus protocol. 4 00:00:28,690 --> 00:00:38,680 Only users with credentials can enter the VPN itself and they can do it over their web browser which 5 00:00:38,680 --> 00:00:40,500 is an advantage. 6 00:00:40,870 --> 00:00:46,710 Though it supports us you will see only a limited number of protocols. 7 00:00:46,960 --> 00:00:55,300 We will later on look at the SSL VPN settings and see that the default port that is being used is port 8 00:00:55,300 --> 00:00:59,510 four for 3 which is also used for each G.P.S.. 9 00:00:59,770 --> 00:01:08,090 But we will change it since the admin management protocol is also using the port for four three. 10 00:01:08,120 --> 00:01:21,040 Now whenever we enter our 40 gate SSL VPN portal we don't get the IP address from the range that was 11 00:01:21,070 --> 00:01:23,350 allocated using tunnel mode. 12 00:01:23,710 --> 00:01:34,510 But our IP address are the client's IP address will be the same as 48 internal IP address. 13 00:01:34,510 --> 00:01:45,430 Now we can change the message of the portal message or for VPN portal we can call it let's name it work 14 00:01:46,810 --> 00:01:55,580 portal we can use different teams which allows us to customize the look and feel of our portal. 15 00:01:55,750 --> 00:01:58,010 Let's use the red team. 16 00:01:58,210 --> 00:02:06,220 We can also use several different options as log in history and session information. 17 00:02:06,220 --> 00:02:12,420 And the most important part of our portal is the predefined bookmarks. 18 00:02:12,490 --> 00:02:20,020 Those are the bookmarks that will connect us to different application on our SSL portal. 19 00:02:20,080 --> 00:02:28,130 So if we to use the Create new bookmark and let's name our bookmarks for the date and let's make the 20 00:02:28,630 --> 00:02:40,390 bookmark a bookmark that will connect anyone who uses that SSL VPN portal to the graphic user interface 21 00:02:40,420 --> 00:02:44,660 or our get to the admin page or 448. 22 00:02:45,130 --> 00:02:53,350 So for that purpose we use H.S. VPN H2 G.P.S. but as you can see when we click on it we can use different 23 00:02:54,010 --> 00:02:59,460 protocols to access FTB sites or ATP servers. 24 00:02:59,560 --> 00:03:10,240 We can also use our DP As Assange turned the TV and see other protocols the URL for forty 48 is the 25 00:03:10,570 --> 00:03:27,710 10 the zero the three that's sixteen and let's name it 14 that 14 gate admin page we will not use single 26 00:03:27,880 --> 00:03:32,580 cycle but only users that have credentials. 27 00:03:32,580 --> 00:03:39,690 And those are the users that we have already configured in the users and device will be able to enter 28 00:03:39,690 --> 00:03:42,070 our SSL VPN portal. 29 00:03:42,290 --> 00:03:48,590 We can also customize different portals for different users or user groups. 30 00:03:51,220 --> 00:03:52,440 All right. 31 00:03:52,450 --> 00:04:00,770 And now we can also add whenever we log in to our portal the four declined download. 32 00:04:00,770 --> 00:04:15,780 If anyone wishes to connect using tunnel mode and have all the other options have support for more protocols. 33 00:04:15,810 --> 00:04:16,160 All right. 34 00:04:16,170 --> 00:04:22,560 So our portal is configured and now let's head over to SSL VPN settings 35 00:04:26,330 --> 00:04:33,730 so we will listen on interface that is interface or when interface. 36 00:04:33,860 --> 00:04:37,030 We will not listen on ports for fortresses. 37 00:04:37,100 --> 00:04:40,330 It conflicts with the administrative age. 38 00:04:40,340 --> 00:04:46,380 It could be port HDP sports so we'll use Port 10 4 4 3. 39 00:04:46,400 --> 00:04:48,760 And if you use. 40 00:04:49,160 --> 00:04:58,760 If you don't have a public IP associated with your 48 and you use another router before it then you 41 00:04:58,760 --> 00:05:07,670 will have to use port forwarding to make sure that any connection that is targeted at Port 10 for 4 42 00:05:07,670 --> 00:05:19,880 3 will be redirected to the tender 0 the 3 got 16 using that port that assigns it to the SSL VPN portal 43 00:05:20,720 --> 00:05:28,760 and so it says that the Web Remote Access will be listening at HDD P.S. Celeste slash 10 to zero the 44 00:05:28,760 --> 00:05:31,820 treat of 16 and that is the 45 00:05:35,640 --> 00:05:37,810 semicolon 10 4 4 3. 46 00:05:37,830 --> 00:05:44,940 Port and that is the euro of our SSL VPN portal. 47 00:05:45,730 --> 00:05:49,000 And let's move on to other options. 48 00:05:49,010 --> 00:05:52,010 We can redirect HDTV to SSL VPN. 49 00:05:52,010 --> 00:05:53,740 We will not do it. 50 00:05:53,840 --> 00:05:59,900 We can limit access to specific hosts but we don't want to limit access to specific hosts. 51 00:05:59,900 --> 00:06:09,040 We want any host to be able to enter our SSL VPN as long as it has the credentials. 52 00:06:09,470 --> 00:06:18,960 We can change the either logo that we can currently as you can see we are using the default built in 53 00:06:19,200 --> 00:06:22,690 format factory certificate. 54 00:06:22,740 --> 00:06:26,850 My advice to you use your own certificate. 55 00:06:26,850 --> 00:06:38,690 It doesn't cost much and there are dozens of certificate authorities that will do it for you now. 56 00:06:39,030 --> 00:06:47,880 We will stay with the assigned address as we have configured before that is the address range that are 57 00:06:47,880 --> 00:06:49,090 tunnel mode. 58 00:06:49,150 --> 00:07:03,410 Users will get as they log to the SSL VPN tunnel mode portal and let's add our SSL group that we have 59 00:07:03,410 --> 00:07:14,160 configured before and let's assign them to the full access portal or right now. 60 00:07:14,160 --> 00:07:25,560 The next thing to do is to create a policy that will allow users of our SSL VPN to enter our internal 61 00:07:25,560 --> 00:07:31,320 network and our 48 admin page. 62 00:07:31,320 --> 00:07:33,840 We will do it on the next video.