WEBVTT 00:07.750 --> 00:09.850 And there we have it Web mode. 00:09.880 --> 00:22.750 Now in a VPN based on when both users are actually connecting the 48 which acts as a server as a secure 00:22.750 --> 00:28.350 server they do it using the SSL Telus protocol. 00:28.690 --> 00:38.680 Only users with credentials can enter the VPN itself and they can do it over their web browser which 00:38.680 --> 00:40.500 is an advantage. 00:40.870 --> 00:46.710 Though it supports us you will see only a limited number of protocols. 00:46.960 --> 00:55.300 We will later on look at the SSL VPN settings and see that the default port that is being used is port 00:55.300 --> 00:59.510 four for 3 which is also used for each G.P.S.. 00:59.770 --> 01:08.090 But we will change it since the admin management protocol is also using the port for four three. 01:08.120 --> 01:21.040 Now whenever we enter our 40 gate SSL VPN portal we don't get the IP address from the range that was 01:21.070 --> 01:23.350 allocated using tunnel mode. 01:23.710 --> 01:34.510 But our IP address are the client's IP address will be the same as 48 internal IP address. 01:34.510 --> 01:45.430 Now we can change the message of the portal message or for VPN portal we can call it let's name it work 01:46.810 --> 01:55.580 portal we can use different teams which allows us to customize the look and feel of our portal. 01:55.750 --> 01:58.010 Let's use the red team. 01:58.210 --> 02:06.220 We can also use several different options as log in history and session information. 02:06.220 --> 02:12.420 And the most important part of our portal is the predefined bookmarks. 02:12.490 --> 02:20.020 Those are the bookmarks that will connect us to different application on our SSL portal. 02:20.080 --> 02:28.130 So if we to use the Create new bookmark and let's name our bookmarks for the date and let's make the 02:28.630 --> 02:40.390 bookmark a bookmark that will connect anyone who uses that SSL VPN portal to the graphic user interface 02:40.420 --> 02:44.660 or our get to the admin page or 448. 02:45.130 --> 02:53.350 So for that purpose we use H.S. VPN H2 G.P.S. but as you can see when we click on it we can use different 02:54.010 --> 02:59.460 protocols to access FTB sites or ATP servers. 02:59.560 --> 03:10.240 We can also use our DP As Assange turned the TV and see other protocols the URL for forty 48 is the 03:10.570 --> 03:27.710 10 the zero the three that's sixteen and let's name it 14 that 14 gate admin page we will not use single 03:27.880 --> 03:32.580 cycle but only users that have credentials. 03:32.580 --> 03:39.690 And those are the users that we have already configured in the users and device will be able to enter 03:39.690 --> 03:42.070 our SSL VPN portal. 03:42.290 --> 03:48.590 We can also customize different portals for different users or user groups. 03:51.220 --> 03:52.440 All right. 03:52.450 --> 04:00.770 And now we can also add whenever we log in to our portal the four declined download. 04:00.770 --> 04:15.780 If anyone wishes to connect using tunnel mode and have all the other options have support for more protocols. 04:15.810 --> 04:16.160 All right. 04:16.170 --> 04:22.560 So our portal is configured and now let's head over to SSL VPN settings 04:26.330 --> 04:33.730 so we will listen on interface that is interface or when interface. 04:33.860 --> 04:37.030 We will not listen on ports for fortresses. 04:37.100 --> 04:40.330 It conflicts with the administrative age. 04:40.340 --> 04:46.380 It could be port HDP sports so we'll use Port 10 4 4 3. 04:46.400 --> 04:48.760 And if you use. 04:49.160 --> 04:58.760 If you don't have a public IP associated with your 48 and you use another router before it then you 04:58.760 --> 05:07.670 will have to use port forwarding to make sure that any connection that is targeted at Port 10 for 4 05:07.670 --> 05:19.880 3 will be redirected to the tender 0 the 3 got 16 using that port that assigns it to the SSL VPN portal 05:20.720 --> 05:28.760 and so it says that the Web Remote Access will be listening at HDD P.S. Celeste slash 10 to zero the 05:28.760 --> 05:31.820 treat of 16 and that is the 05:35.640 --> 05:37.810 semicolon 10 4 4 3. 05:37.830 --> 05:44.940 Port and that is the euro of our SSL VPN portal. 05:45.730 --> 05:49.000 And let's move on to other options. 05:49.010 --> 05:52.010 We can redirect HDTV to SSL VPN. 05:52.010 --> 05:53.740 We will not do it. 05:53.840 --> 05:59.900 We can limit access to specific hosts but we don't want to limit access to specific hosts. 05:59.900 --> 06:09.040 We want any host to be able to enter our SSL VPN as long as it has the credentials. 06:09.470 --> 06:18.960 We can change the either logo that we can currently as you can see we are using the default built in 06:19.200 --> 06:22.690 format factory certificate. 06:22.740 --> 06:26.850 My advice to you use your own certificate. 06:26.850 --> 06:38.690 It doesn't cost much and there are dozens of certificate authorities that will do it for you now. 06:39.030 --> 06:47.880 We will stay with the assigned address as we have configured before that is the address range that are 06:47.880 --> 06:49.090 tunnel mode. 06:49.150 --> 07:03.410 Users will get as they log to the SSL VPN tunnel mode portal and let's add our SSL group that we have 07:03.410 --> 07:14.160 configured before and let's assign them to the full access portal or right now. 07:14.160 --> 07:25.560 The next thing to do is to create a policy that will allow users of our SSL VPN to enter our internal 07:25.560 --> 07:31.320 network and our 48 admin page. 07:31.320 --> 07:33.840 We will do it on the next video.