Traffic Flow in SSL VPN

[mahmoodm]

Hi All,

Please can someone explain me the traffic flow in SSL VPN as am a bit confuse about it.

I might come up with more questions once this discussion starts.

Thanks

[Raido_Rattameister]

I suggest to start with questions because your initial question is pretty broad 🙂

What exactly are you confused about?

[mahmoodm]

Hi Raido,

Thanks for the response.

My confusion comes from after the user connects to the gateway he is assigned an IP address without any defaut gateway.

How does the client connect to the internal resources..?

And do we need to use tunnel interface or not,if used then whats the purpose of it.

Thanks

[Mick_Ball]

A default gateway is a "catch all" for your device if it doesnt know how to get to a specific subnet. The gb client instructs all traffic to go via the vpn so a gateway for this is not required. You will still have a default gateway for other nic, this will be used for normal access not via the vpn. (Split tunnelling). 

As far as i know this tunneling or tunnel is required for routing to your internal network and a must for external gateways. You of course dont need it to access the portal but i only use "portal only" (not a setting, just my terminology) for client downloads. Could someone advise further as im sure you can do something clever with loopback but for access to internal networks a tunnel is required.

Internal gateways can be used without a tunnel interface but never used one..