topic Traffic Flow in SSL VPN in General Topics

Traffic Flow in SSL VPN

mahmoodm — Sat, 16 Sep 2017 13:57:52 GMT

Hi All,

Please can someone explain me the traffic flow in SSL VPN as am a bit confuse about it.

I might come up with more questions once this discussion starts.

Thanks

Re: Traffic Flow in SSL VPN

Raido_Rattameister — Sun, 17 Sep 2017 02:16:58 GMT

I suggest to start with questions because your initial question is pretty broad 🙂

What exactly are you confused about?

Re: Traffic Flow in SSL VPN

mahmoodm — Sun, 17 Sep 2017 05:40:37 GMT

Hi Raido,

Thanks for the response.

My confusion comes from after the user connects to the gateway he is assigned an IP address without any defaut gateway.

How does the client connect to the internal resources..?

And do we need to use tunnel interface or not,if used then whats the purpose of it.

Thanks

Re: Traffic Flow in SSL VPN

Mick_Ball — Sun, 17 Sep 2017 19:35:26 GMT

A default gateway is a "catch all" for your device if it doesnt know how to get to a specific subnet. The gb client instructs all traffic to go via the vpn so a gateway for this is not required. You will still have a default gateway for other nic, this will be used for normal access not via the vpn. (Split tunnelling).

As far as i know this tunneling or tunnel is required for routing to your internal network and a must for external gateways. You of course dont need it to access the portal but i only use "portal only" (not a setting, just my terminology) for client downloads. Could someone advise further as im sure you can do something clever with loopback but for access to internal networks a tunnel is required.

Internal gateways can be used without a tunnel interface but never used one..